diff --git a/scripts/audit_rule_categorization.py b/scripts/audit_rule_categorization.py index 4c39ac89..c922a364 100755 --- a/scripts/audit_rule_categorization.py +++ b/scripts/audit_rule_categorization.py @@ -1,8 +1,9 @@ #!/usr/bin/env python3 """Single source of truth for rule origin/classification. -Parses registry.rs and cfn-lint source to compute the TRUE origin of every -rule, the cfn-lint E→F mapping, alias groups, and the engine-extra set. +Applies explicit CloudFormation-contract evidence and cfn-lint source data to +compute the TRUE origin of every rule, the cfn-lint E→F mapping, alias groups, +and the engine-extra set. Exported API (imported by compare_cfnlint.py): compute_rule_origins(cfnlint_root) → RuleOrigins namedtuple @@ -47,6 +48,7 @@ REGISTRY = PROJECT_ROOT / "src/rules/src/registry.rs" DEFAULT_OUTPUT = SCRIPT_DIR / "snapshots" / "rule_categorization_audit.md" + SEV_MAP = {"F": "Fatal", "E": "Error", "W": "Warn", "I": "Info", "D": "Debug"} ALLOWED_CATS = { @@ -97,12 +99,14 @@ "cfnlint_ids", # {id: (shortdesc, filename)} from cfn-lint source "true_origins", # {id: "CfnLint"|"Schema"|"Engine"|"Engine(collision)"} "cfnlint_to_engine", # {cfnlint_id: our_id} explicit equivalence table - "engine_to_cfnlint", # reverse of above (first cfn-lint id per engine id) + "engine_to_cfnlint", # reverse of above: {engine_id: set of cfn-lint ids} "engine_extra", # set of rule IDs that cfn-lint would never emit + "engine_extra_collisions", # subset of engine_extra with Engine(collision) origin "engine_stricter", # engine IDs implementing a cfn-lint rule under a split/generic ID "rule_aliases", # {canonical_id: {alias_ids}} for comparison matching "origin_issues", # [(id, reg_origin, true_origin, note)] mismatches - "is_engine_extra_diagnostic", # callable(diag_dict) → bool for message-based checks + "engine_extra_invariant_violations", # [(id, kind, cfnlint_ids)] post-computation violations + "is_engine_extra_diagnostic", # callable(diag_dict) → bool with equivalent-rule safeguards ]) @@ -144,6 +148,118 @@ def _cfnlint_rules_path(cfnlint_root) -> Path: return candidate +_TEMPLATE_MODEL_SCHEMA_RULES = frozenset({ + "E1011", "E1015", "E1017", "E1018", "E1019", "E1021", "E1022", + "E1024", "E1028", "E1030", "E1031", "E1033", "E6005", "E8001", + "E8002", "E8003", "E8004", "E8005", "E8006", "E8007", "E9101", + "E9106", +}) + +# Explicit schema-grounding evidence for non-Fatal rules. +# +# A non-Fatal rule is classified as Schema ONLY when it satisfies BOTH: +# 1. It is listed here with an explicit CloudFormation-contract justification +# (not merely because it happens to be emitted from template-model). +# 2. The required production emitters are confirmed present in the codebase. +# +# Source location alone is NOT sufficient proof of schema origin. A rule +# emitted from template-model may be enforcing CloudFormation contract +# semantics (Schema) OR performing a lint-level semantic check (not Schema). +# The classification here is a manual, evidence-based decision. +# +# To ADD a rule: provide CloudFormation documentation/schema evidence that +# the check enforces a structural contract CloudFormation itself rejects, +# then add the entry with its required emitter paths. +_SCHEMA_GROUNDING_SOURCE_REQUIREMENTS = { + **{ + rule_id: (("template-model/",),) + for rule_id in _TEMPLATE_MODEL_SCHEMA_RULES + }, + "E1016": ( + ("cel-engine/src/rules/intrinsics.rs",), + ("rego-engine/handwritten/rego/intrinsics/intrinsic_params.rego",), + ), + "E9004": ( + ("cel-engine/src/rules/intrinsics.rs",), + ("rego-engine/handwritten/rego/intrinsics/getatt.rego",), + ), +} + + +def _compute_schema_grounded_non_f( + registry, + rust_emissions=None, + rego_emissions=None, +): + """Return non-Fatal rules backed by explicit schema-contract classification + AND confirmed production emitters. + + A rule qualifies ONLY when: + 1. It is explicitly listed in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS + (a manual, evidence-based classification that the rule enforces a + CloudFormation structural contract). + 2. Its required production emitters are confirmed present in the codebase. + + Source location alone is NOT proof of schema origin — being emitted from + template-model does not automatically make a rule Schema. The explicit + listing in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS is the classification + input; emitter presence is the verification step. + + Rules NOT listed in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS are never + promoted to Schema regardless of where they are emitted from. This + ensures uncertainty is visible rather than silently promoting every + template-model emission. + """ + if rust_emissions is None: + rust_emissions = scan_rust_emissions() + if rego_emissions is None: + rego_emissions = scan_rego_emissions() + + registry_ids = {rule[0] for rule in registry} + emission_paths = defaultdict(set) + for emission in [*rust_emissions, *rego_emissions]: + emission_paths[emission[0]].add(emission[-2]) + + grounded = set() + for rule_id, source_groups in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS.items(): + if rule_id not in registry_ids: + continue + paths = emission_paths.get(rule_id, set()) + if all( + any( + path.startswith(source_prefix) + for path in paths + for source_prefix in source_group + ) + for source_group in source_groups + ): + grounded.add(rule_id) + return frozenset(grounded) + + +def _find_engine_extra_invariant_violations( + engine_extra, + cfnlint_ids, + cfnlint_equivalent, + rule_aliases, +): + violations = [] + cfnlint_id_set = set(cfnlint_ids) + for rule_id in sorted(engine_extra): + has_direct_equivalent = rule_id in cfnlint_id_set + has_documented_equivalent = rule_id in cfnlint_equivalent + aliased_reference_ids = ( + {rule_id} | rule_aliases.get(rule_id, set()) + ) & cfnlint_id_set + if has_direct_equivalent or has_documented_equivalent or aliased_reference_ids: + violations.append(( + rule_id, + "direct" if has_direct_equivalent else "alias", + sorted(aliased_reference_ids) if aliased_reference_ids else [rule_id], + )) + return violations + + def compute_rule_origins(cfnlint_root: Path) -> RuleOrigins: """Compute true origin for every rule by cross-referencing registry + cfn-lint. @@ -188,6 +304,7 @@ def compute_rule_origins(cfnlint_root: Path) -> RuleOrigins: "E2003": "F2003", # Parameter name must be alphanumeric "E2011": "F2011", # Parameter name length "E2015": "F2015", # Default value within parameter constraints + "E7010": "F0050", # Mapping key/attribute counts must not exceed 200 "E3002": "F3002", # Additional properties not allowed "E3003": "F3003", # Required property missing "E3004": "F3004", # Circular dependency @@ -276,6 +393,22 @@ def _link(*ids): _link("E9006", "E3690", "E3691") # Type coercion: cfn-lint strict E3012 ↔ engine Fatal F3012 or soft W9003. _link("F3012", "E3012", "W9003") + # Parameter defaults: the reference check combines AllowedValues, pattern, + # length, and numeric constraints. The engine uses one rule for + # AllowedValues membership and another for the remaining constraints. + _link("E2015", "F2012", "F2015") + # Mapping configuration: malformed mapping levels are rejected while + # mapping names and keys remain under the direct configuration rule. + _link("E7001", "F0017") + # Mapping size: the engine enforces second- and third-level limits through + # its structural mapping rule. + _link("E7010", "F0050") + # FindInMap: a missing map is one structural case covered by the reference + # function-validation rule. + _link("E1011", "F1012") + # Password parameters: the dedicated parameter-name heuristic and the + # resource-use check share the NoEcho concern. + _link("W2501", "W2509") # Enum value: cfn-lint's E3030 covers both the enum check and the const # check. The engine splits it - the open-world enum check is a soft W3030 # (a value absent from the point-in-time enum snapshot may still deploy) and @@ -306,13 +439,22 @@ def _link(*ids): engine_to_cfnlint = {} for cid, eid in cfnlint_to_engine.items(): - engine_to_cfnlint.setdefault(eid, cid) + engine_to_cfnlint.setdefault(eid, set()).add(cid) + for engine_id in reg_ids: + equivalent_reference_ids = ( + {engine_id} | rule_aliases.get(engine_id, set()) + ) & set(cfnlint_ids) + if equivalent_reference_ids: + engine_to_cfnlint.setdefault(engine_id, set()).update( + equivalent_reference_ids + ) # ── cfn-lint-equivalent engine rules ───────────────────────────────── # Every one of OUR rule IDs that implements (or is a 1:1 / split / generic # alias of) a cfn-lint rule. These PARTICIPATE in parity matching; an # UNMATCHED firing of any of them is a FALSE POSITIVE, never engine-extra. cfnlint_equivalent = {eid for eid in cfnlint_to_engine.values() if eid in reg_ids} + cfnlint_equivalent.update(engine_to_cfnlint) cfnlint_equivalent.add("E9003") # second half of the cfn-lint E1010 GetAtt split # Open-world half of the enum split: the const check stays Fatal (its ID is # already a mapping target and thus cfnlint_equivalent), while the soft enum @@ -329,6 +471,9 @@ def _link(*ids): # Top-level structural rules cfn-lint covers under its parent E1001/E3001 # (F0001 omitted on purpose - cfn-lint never flags an empty Resources section): cfnlint_equivalent.update({"F0002", "F0005", "F0006"}) + # W9003 (soft type coercion warning) aliases cfn-lint E3012 and participates + # in parity — an unmatched firing is a false positive, not engine-extra. + cfnlint_equivalent.add("W9003") # ── True origin (for the audit report) ─────────────────────────────── # Priority: a structural rule is Schema first. F-prefix marks a structural @@ -337,12 +482,21 @@ def _link(*ids): # Schema, surfaced under an F-numbered ID via E→F promotion. Only then does # an exact or aliased cfn-lint ID classify as CfnLint; everything else is # an engine-only rule. + # + # Non-Fatal schema classifications require explicit contract evidence and + # concrete production emitters in the architectural layer that enforces it. + schema_grounded_non_f = _compute_schema_grounded_non_f(registry) + schema_grounding_candidates = set(_SCHEMA_GROUNDING_SOURCE_REQUIREMENTS) & reg_ids + missing_schema_grounding = schema_grounding_candidates - set(schema_grounded_non_f) + true_origins = {} for rid, sev, _cat, reg_origin, desc in registry: prefix = rid[0] num = rid[1:] if prefix == "F": true_origins[rid] = "Schema" + elif rid in schema_grounded_non_f: + true_origins[rid] = "Schema" elif rid in cfnlint_ids: true_origins[rid] = "CfnLint" elif rid in cfnlint_equivalent: @@ -362,100 +516,114 @@ def _link(*ids): # ── Origin-correctness issues (alias-aware) ────────────────────────── # The registry's origin: field must reflect reality: # * CfnLint - exact cfn-lint ID, OR an engine ID that aliases a cfn-lint rule - # * Schema - Fatal structural rule (cfn-only or promoted from a cfn-lint Error) + # * Schema - Fatal structural rule (cfn-only or promoted from a cfn-lint Error), + # OR a non-F rule in the explicit schema-grounded set # * Engine - a genuinely NEW check with NO cfn-lint equivalent # An Engine-origin rule that actually aliases a cfn-lint rule IS flagged (it # should be CfnLint); this enforces "engine-extra == truly new rules, not # aliases of cfn-lint rules". + # + # Comparison is EXACT: registry origin must match computed base origin. + # CfnLint and Schema are not interchangeable. origin_issues = [] for rid, sev, _cat, reg_origin, desc in registry: - has_equiv = rid in cfnlint_ids or rid in cfnlint_equivalent - if has_equiv: - if reg_origin not in ("CfnLint", "Schema"): + computed = true_origins[rid] + # Extract the base computed origin (strip parenthetical qualifiers) + computed_base = computed.split("(")[0] + if reg_origin != computed_base: + # Build a human-readable note + if rid in missing_schema_grounding: + note = ( + f"registry says {reg_origin}; required production emission " + "evidence for non-Fatal schema grounding is missing" + ) + elif computed == "Schema": + if rid[0] == "F": + note = f"registry says {reg_origin}; F-prefix rule is Schema" + else: + note = ( + f"registry says {reg_origin}; explicit schema-grounding " + "evidence is present in required production emitters" + ) + elif computed == "CfnLint": if rid in cfnlint_ids: - note = "cfn-lint has this exact ID" + note = f"registry says {reg_origin}; cfn-lint has this exact ID" else: cfn_aliases = sorted(({rid} | rule_aliases.get(rid, set())) & set(cfnlint_ids)) - note = f"aliases cfn-lint rule(s) {cfn_aliases}" - origin_issues.append((rid, reg_origin, "CfnLint", - f"registry says {reg_origin}; {note}")) - elif reg_origin == "CfnLint": - origin_issues.append((rid, reg_origin, "Engine", - "registry says CfnLint but no cfn-lint equivalent (exact ID or alias) exists")) + note = f"registry says {reg_origin}; aliases cfn-lint rule(s) {cfn_aliases}" + elif computed.startswith("Engine"): + note = f"registry says {reg_origin}; no cfn-lint equivalent exists" + else: + note = f"registry says {reg_origin}; computed {computed}" + origin_issues.append((rid, reg_origin, computed, note)) # ── Engine-extra set (computed after all equivalences) ─────────────── - # A correct engine finding that cfn-lint never emits. A rule qualifies only - # when cfn-lint has no equivalent at all: - # * true origin Engine / Engine(collision), or - # * a Schema Fatal with no cfn-lint promotion. - # A rule with any cfn-lint equivalent is then removed: an unmatched firing - # of such a rule is a false positive and must surface, not be excused. A - # rule cfn-lint also implements is never waved through by ID - a - # "deeper-resolution" extra is verified per-template, not assumed correct. + # "Engine-extra" means a correct engine finding that cfn-lint NEVER emits + # because cfn-lint has NO SEMANTIC EQUIVALENT — not merely because the + # numeric ID differs. A rule qualifies only when: + # * true origin Engine (no cfn-lint equivalent at all), or + # * true origin Engine(collision) — the numeric portion exists under + # another prefix in cfn-lint but implements a DIFFERENT check, or + # * a Schema Fatal with no cfn-lint promotion AND no direct cfn-lint ID. + # + # A rule with ANY cfn-lint semantic equivalent (direct ID, alias, split, + # or parent-rule grouping) is EXCLUDED — an unmatched firing of such a + # rule surfaces as a false positive, never engine-extra. + # + # Engine(collision) rules are included in engine-extra because the shared + # number is coincidental — the cfn-lint rule with that number implements + # a DIFFERENT check. These are tracked separately for audit visibility. + # + # No forced overrides: W9003 and W1019 have cfn-lint equivalents (they + # alias E3012 and E1029/F1018 respectively) and are NOT engine-extra. engine_extra = set() + engine_extra_collisions = set() # subset with Engine(collision) origin for rid, true_o in true_origins.items(): - if true_o in ("Engine", "Engine(collision)"): + if true_o == "Engine": + engine_extra.add(rid) + elif true_o == "Engine(collision)": engine_extra.add(rid) - elif true_o == "Schema" and rid not in engine_to_cfnlint: + engine_extra_collisions.add(rid) + elif true_o == "Schema" and rid not in engine_to_cfnlint and rid not in cfnlint_ids: + # Schema-only rule with no cfn-lint equivalent at all engine_extra.add(rid) engine_extra -= cfnlint_equivalent - # W9003 is engine-extra by design: cfn-lint accepts coercible property - # values silently (emitting E3012 only in strict mode), so an unmatched - # W9003 is intentional strictness. It still aliases F3012/E3012 so a - # strict-mode E3012 finding matches. - engine_extra.add("W9003") - # W1019: cfn-lint registers this rule but never wires its child-rule hook, - # so it never fires; the engine's W1019 is deliberate extra coverage. - engine_extra.add("W1019") + + # ── Post-computation invariant ─────────────────────────────────────── + # No rule with a direct or aliased cfn-lint equivalent can be engine-extra. + # This catches any logic error in the computation above. + engine_extra_invariant_violations = _find_engine_extra_invariant_violations( + engine_extra, + cfnlint_ids, + cfnlint_equivalent, + rule_aliases, + ) + # If violated, the engine_extra set is wrong — remove the violating IDs + # so that at least the exported set is safe, but record the issue. + for rid, _, _ in engine_extra_invariant_violations: + engine_extra.discard(rid) # Engine rules that implement a cfn-lint check under a different (split or # generic) ID. Reported by the audit; they participate in parity matching # and are NOT engine-extra. engine_stricter = {rid for rid in ("E9003", "E9004", "E9006") if rid in reg_ids} - # Message-based engine-extra predicate: diagnostics that are engine-extra - # based on message content, not just rule ID. These cover cases where the - # engine's schema-validator extensions produce findings cfn-lint doesn't. + # The diagnostic-level predicate is a defensive API boundary. It cannot + # promote a finding whose rule has a direct, split, parent, or aliased + # cfn-lint equivalent; contextual equivalent-rule mismatches are handled by + # the comparison script's intentional-divergence evidence checks. def _is_engine_extra_diagnostic(diag): - """Return True if a diagnostic is engine-extra based on message content. - - Complements the rule-ID-based engine_extra set for cases where the - same rule ID can produce both cfn-lint-matching and engine-only findings. - """ - # Extension-sourced schema findings (e.g. S3 ACL → OwnershipControls) - # are stricter than cfn-lint and reflect real CloudFormation behavior. - if "(from extension)" in diag.get("message", ""): - return True - # S3 Bucket OwnershipControls requirement: AWS 2023 policy requires this - # when AccessControl is set (deployment fails with AccessControlListNotSupported). - # cfn-lint does not implement this check. - if (diag.get("rule_id") == "F3003" - and diag.get("resource_type") == "AWS::S3::Bucket" - and "OwnershipControls" in diag.get("message", "")): - return True - # F3002 on resources with cfn-lint ignore directives: engine validates - # properties that cfn-lint suppresses via metadata directives. - # Also covers Fn::If branches with invalid conditions that cfn-lint skips. - if (diag.get("rule_id") == "F3002" - and diag.get("resource_id") in ("myBucketPass", "myBucketFirstAndLastPass")): - return True - # F3002 inside Fn::If branches with invalid condition names: cfn-lint - # skips validation when the condition doesn't exist. Engine validates anyway. - if (diag.get("rule_id") == "F3002" - and any(k in diag.get("message", "") - for k in ("'BadKey'", "'BadValue'"))): - return True - # Enum Warning on directive-suppressed resources or unresolvable Fn::If - # values: the engine validates the enum even when Fn::If can't be resolved - # (invalid condition) or when cfn-lint suppresses the resource via a - # directive. The enum diagnostic is the soft-Warning half of the enum - # split (the const half stays Fatal), so match on that ID here - this is - # the sole narrow excuse now that the rule participates in parity matching. - if (diag.get("rule_id") == "W3030" - and (diag.get("resource_id") == "myBucketFirstAndLastPass" - or "Fn::If" in diag.get("message", ""))): - return True - return False + rule_id = diag.get("rule_id", "") + if not rule_id: + return False + if ( + rule_id in cfnlint_ids + or rule_id in cfnlint_equivalent + or engine_to_cfnlint.get(rule_id) + ): + return False + return rule_id in engine_extra + return RuleOrigins( registry=registry, @@ -464,9 +632,11 @@ def _is_engine_extra_diagnostic(diag): cfnlint_to_engine=cfnlint_to_engine, engine_to_cfnlint=engine_to_cfnlint, engine_extra=engine_extra, + engine_extra_collisions=engine_extra_collisions, engine_stricter=engine_stricter, rule_aliases=rule_aliases, origin_issues=origin_issues, + engine_extra_invariant_violations=engine_extra_invariant_violations, is_engine_extra_diagnostic=_is_engine_extra_diagnostic, ) @@ -474,55 +644,237 @@ def _is_engine_extra_diagnostic(diag): # ── Source emission scanning ────────────────────────────────────────────────── # Extracts (rule_id, message) pairs from Rust and Rego source files to verify # that every emitted rule ID is registered and used consistently. +# +# PRODUCTION SCOPE: scans all runtime crates that can emit diagnostics: +# template-model, schema-validator, validation-engine, diagnostics, +# cel-engine, rego-engine (handwritten Rego). +# EXCLUDED: +# - data-source/generated/ (committed generated code) +# - bindings-* crates (no diagnostic emission) +# - cfn-validate (CLI frontend, tests only) +# - resources (test fixtures) +# - guard-translator (IR, no diagnostic emission) +# - rules/src/registry.rs (the definition, not an emitter) +# - #[cfg(test)] modules (test-only false positives) SRC = PROJECT_ROOT / "src" CEL_RULES = SRC / "cel-engine/src/rules" REGO_RULES = SRC / "rego-engine/handwritten/rego" -_RUST_EMISSION_RE = re.compile( - r'make_resource_diagnostic\(\s*"([A-Z]\d{4})"' - r'\s*,\s*(?:&format!\(\s*"([^"]*)"' - r'|"([^"]*)")', +# Production runtime crates that can emit diagnostics. +_PRODUCTION_SCAN_CRATES = ( + "template-model", + "schema-validator", + "validation-engine", + "diagnostics", + "cel-engine", + "rego-engine", +) + +# Paths to exclude from the scan (generated code, registry definition). +_SCAN_EXCLUDE_PATHS = ( + "data-source/generated", + "rules/src/registry.rs", +) + +# Constructor patterns that emit diagnostics (first arg is rule ID literal). +_RUST_CONSTRUCTOR_RE = re.compile( + r'(?:make_resource_diagnostic|make_resource_diagnostic_at_source' + r'|build_diagnostic|build_diagnostic_conditional' + r'|make_parse_defect|make_parse_defect_at|make_parse_defect_for_resource' + r'|RegisteredDiagnostic::new' + r'|rule_diag)\(\s*"([A-Z]\d{4})"' + r'(?:\s*,\s*(?:&format!\(\s*"([^"]*)"' + r'|"([^"]*)"))?', re.DOTALL, ) -# Catches rule IDs passed through variables (e.g. check_format() helper, -# instance-type enum loops) that the primary regex misses because the ID -# is not a literal first argument to make_resource_diagnostic. +# Dynamic constructor inputs are recognized only in syntactic contexts that +# flow rule IDs to diagnostics. Arbitrary rule-shaped strings are not emissions. _RUST_RULE_ID_LITERAL_RE = re.compile(r'"([A-Z]\d{4})"') +_RUST_RULE_ID_TUPLE_RE = re.compile(r'\(\s*"([A-Z]\d{4})"\s*,') +_RUST_RULE_ID_BINDING_RE = re.compile( + r'\b(?:let|const)\s+(?=[A-Za-z0-9_]*rule)' + r'[A-Za-z_][A-Za-z0-9_]*[^=;]*=\s*(.*?);', + re.DOTALL | re.IGNORECASE, +) +_RUST_RULE_ID_MATCH_ARM_RE = re.compile( + r'=>\s*"([A-Z]\d{4})"\s*,', +) +_RUST_DYNAMIC_RULE_HELPER_RE = re.compile( + r'\bcheck_bdm_iops_ignored\s*\((.*?)\);', + re.DOTALL, +) +_SEV_FOR_PREFIX = {"F": "FATAL", "E": "ERROR", "W": "WARN", "I": "INFO", "D": "DEBUG"} _REGO_DIAG_RE = re.compile( - r'make_diag(?:_full|_at|_related|_conditional)?\(' + r'make_diag(?:_full|_at_source|_at|_related|_conditional)?\(' r'\s*"([A-Z]\d{4})"\s*,' r'\s*"([A-Z]+)"\s*,', re.DOTALL, ) -_SEV_FOR_PREFIX = {"F": "FATAL", "E": "ERROR", "W": "WARN", "I": "INFO", "D": "DEBUG"} + +# Regex to detect and strip #[cfg(test)] mod blocks (non-greedy, brace-balanced). +_CFG_TEST_MOD_RE = re.compile( + r'#\[cfg\(test\)\]\s*mod\s+\w+\s*\{', re.DOTALL +) + + +def _strip_cfg_test_modules(text: str) -> str: + """Remove #[cfg(test)] mod blocks from Rust source to avoid test-only IDs. + + Uses brace-counting to find the matching closing brace, skipping braces + that appear inside string literals (including raw strings), character + literals, line comments, and block comments. This prevents strings like + "}" or comments containing braces from prematurely closing the module. + + Fail-closed: if the matching brace is never found (unbalanced input), + the entire remainder is stripped — this is conservative (may remove real + code) but never lets test-only IDs leak through. + """ + result = [] + pos = 0 + for m in _CFG_TEST_MOD_RE.finditer(text): + result.append(text[pos:m.start()]) + # Find the matching closing brace, skipping string/comment interiors + depth = 1 + i = m.end() + length = len(text) + while i < length and depth > 0: + ch = text[i] + if ch == '/' and i + 1 < length: + next_ch = text[i + 1] + if next_ch == '/': + # Line comment — skip to end of line + nl = text.find('\n', i + 2) + i = nl + 1 if nl != -1 else length + continue + elif next_ch == '*': + # Block comment — skip to */ + end_comment = text.find('*/', i + 2) + i = end_comment + 2 if end_comment != -1 else length + continue + elif ch == '"': + # String literal — handle raw strings r"..." and r#"..."# + if i > 0 and text[i - 1] == 'r': + # Count leading hashes + hash_start = i + 1 + num_hashes = 0 + while hash_start + num_hashes < length and text[hash_start + num_hashes] == '#': + num_hashes += 1 + # Raw string: r#"..."# — find closing "### + closing = '"' + '#' * num_hashes + end_raw = text.find(closing, hash_start + num_hashes) + i = end_raw + len(closing) if end_raw != -1 else length + continue + else: + # Regular string literal — skip to unescaped closing " + i += 1 + while i < length: + if text[i] == '\\': + i += 2 # skip escaped char + elif text[i] == '"': + i += 1 + break + else: + i += 1 + continue + elif ch == "'": + # Character literal — 'x' or '\x' or '\u{...}' + # Also lifetime annotations like 'a — those don't contain braces + if i + 2 < length and text[i + 1] == '\\': + # Escaped char literal: skip to closing ' + close_tick = text.find("'", i + 2) + i = close_tick + 1 if close_tick != -1 else i + 1 + continue + elif i + 2 < length and text[i + 2] == "'": + # Simple char literal 'x' + i += 3 + continue + # Lifetime or label — just advance past the tick + elif ch == '{': + depth += 1 + elif ch == '}': + depth -= 1 + i += 1 + pos = i + result.append(text[pos:]) + return "".join(result) + + +def _is_excluded_path(relpath: str) -> bool: + """Check if a relative path should be excluded from emission scanning.""" + for excl in _SCAN_EXCLUDE_PATHS: + if relpath.startswith(excl) or ("/" + excl) in relpath: + return True + return False -def scan_rust_emissions(directory): - """Extract (rule_id, message, relpath, line) from Rust files. +def scan_rust_emissions(directory=None): + """Extract (rule_id, message, relpath, line) from production Rust files. - Two-pass approach: - 1. Primary regex captures (rule_id, message) from make_resource_diagnostic("ID", ...). - 2. Fallback scan finds rule ID string literals passed through variables - (e.g. in helper functions or loops) that the primary regex misses. + When directory is None, scans all production crates. When a specific + directory is given (for backward compatibility), scans only that subtree. + + The primary regex captures literals passed directly to constructors. A + constrained fallback recognizes tuple tables, rule-ID bindings, and known + diagnostic helpers that pass a dynamic ID to a constructor. + + Excludes #[cfg(test)] modules to avoid test-only false positives. """ + if directory is not None: + directories = [directory] + relpath_base = directory + else: + directories = [SRC / crate / "src" for crate in _PRODUCTION_SCAN_CRATES + if (SRC / crate / "src").exists()] + relpath_base = SRC out = [] - for path in sorted(directory.rglob("*.rs")): - text = path.read_text() - primary_ids = set() - for m in _RUST_EMISSION_RE.finditer(text): - rid = m.group(1) - msg = m.group(2) or m.group(3) or "" - line = text[:m.start()].count('\n') + 1 - out.append((rid, msg, str(path.relative_to(SRC)), line)) - primary_ids.add(rid) - # Second pass: pick up rule IDs passed through variables - for m in _RUST_RULE_ID_LITERAL_RE.finditer(text): - rid = m.group(1) - if rid not in primary_ids: - primary_ids.add(rid) + for scan_dir in directories: + for path in sorted(scan_dir.rglob("*.rs")): + relpath = str(path.relative_to(relpath_base)) + if _is_excluded_path(relpath): + continue + text = path.read_text() + # Strip test modules to avoid test-only false positives + text = _strip_cfg_test_modules(text) + primary_ids = set() + for m in _RUST_CONSTRUCTOR_RE.finditer(text): + rid = m.group(1) + msg = m.group(2) or m.group(3) or "" line = text[:m.start()].count('\n') + 1 - out.append((rid, "", str(path.relative_to(SRC)), line)) + out.append((rid, msg, relpath, line)) + primary_ids.add(rid) + contextual_matches = [] + contextual_matches.extend( + (match.group(1), match.start(1)) + for match in _RUST_RULE_ID_TUPLE_RE.finditer(text) + ) + contextual_matches.extend( + (match.group(1), match.start(1)) + for match in _RUST_RULE_ID_MATCH_ARM_RE.finditer(text) + ) + for binding in _RUST_RULE_ID_BINDING_RE.finditer(text): + binding_value = binding.group(1) + contextual_matches.extend( + ( + literal.group(1), + binding.start(1) + literal.start(1), + ) + for literal in _RUST_RULE_ID_LITERAL_RE.finditer(binding_value) + ) + for helper_call in _RUST_DYNAMIC_RULE_HELPER_RE.finditer(text): + helper_arguments = helper_call.group(1) + contextual_matches.extend( + ( + literal.group(1), + helper_call.start(1) + literal.start(1), + ) + for literal in _RUST_RULE_ID_LITERAL_RE.finditer(helper_arguments) + ) + for rid, position in contextual_matches: + if rid not in primary_ids: + primary_ids.add(rid) + line = text[:position].count('\n') + 1 + out.append((rid, "", relpath, line)) return out @@ -538,6 +890,17 @@ def scan_rego_emissions(): return out +def scan_production_scopes(): + """Return a list of (crate_name, directory) pairs that were scanned.""" + scopes = [] + for crate in _PRODUCTION_SCAN_CRATES: + d = SRC / crate / "src" + if d.exists(): + scopes.append((crate, str(d.relative_to(PROJECT_ROOT)))) + scopes.append(("rego-engine/handwritten", str(REGO_RULES.relative_to(PROJECT_ROOT)))) + return scopes + + def _check_rego_severity(registry_ids, rego_emissions): """Rego severity string doesn't match rule ID prefix.""" issues = [] @@ -607,6 +970,169 @@ def jaccard(a: set, b: set) -> float: return len(a & b) / len(a | b) +# Logical coverage map: cfn-lint rule IDs whose logic is enforced via our +# schema-validator consuming cfn-lint's extensions/patches, or via a +# different-ID engine rule. Values are (our_id_or_mechanism, note). +# +# IMPORTANT: An entry here states ONLY that we have a structural or +# mechanical substitute at the referenced ID/mechanism. It does NOT claim +# behavioral parity — the engine's implementation may differ in scope, +# triggering conditions, or message from cfn-lint's version. Behavioral +# parity is verified separately by the comparison script on real templates. +# +# Coverage categories: +# - "schema-ext" : cfn-lint if/then patch compiled into our schemas +# - "schema-patch" : cfn-lint schema overlay merged at build time +# - "schema-format": cfn-lint FormatKeyword rule enforced via schema format field +# - "out-of-scope" : functionality cfn-lint checks that is outside template validation +# - Rule IDs : our rule that covers the SAME concern (not necessarily +# same behavior — divergences are tracked elsewhere) +LOGICAL_COVERAGE = { + # Covered via Fatal/schema rules (different numeric ID). + # Each entry states a structural substitute exists at the referenced ID. + # Behavioral parity with cfn-lint is NOT asserted here. + "E1001": ("F0002/F0005", "Top-level structure (partial: covers format version + section names only)"), + "E1003": ("F0011", "description max length 1024"), + "E1011": ("F1012/F1101", "FindInMap structural validation (structural shape only; cfn-lint also checks resolved map keys)"), + "E1017": ("F1050/F1101", "Select structural validation (template-model parser)"), + "E1019": ("F1018", "Sub variable resolution"), + "E1021": ("F1101", "Base64 structural validation (template-model parser)"), + "E1022": ("F1101", "Join structural validation (template-model parser)"), + "E1028": ("E1028/F0013", "Fn::If condition + structure"), + "E1700": ("F8600", "Rules section config"), + "E1701": ("F8603", "Rule Assertions required"), + "E1702": ("F8606", "Rule RuleCondition validation"), + "E2010": ("F0003", "Parameter limit 200"), + "E3015": ("E8002", "Condition reference on resource"), + # E3008: prefixItems array validation - handled by schema-validator + # through compiled JSON Schema (prefixItems is a standard JSON Schema keyword). + "E3008": ("schema-patch", "Array prefixItems validation (compiled schema)"), + "E3035": ("F3016", "DeletionPolicy values"), + "E3036": ("F0018", "UpdateReplacePolicy values"), + # Structural validation (covered via parser + Fatal schema rules): + "E4001": ("F0005", "Metadata Interface section validation"), + "E4002": ("F0005", "Metadata section config"), + "E6002": ("F0040", "Output Value required"), + "E6003": ("F6101", "Output value type"), + "E6010": ("F0004", "Output limit 200"), + "E6102": ("F6005/F6101", "Output Export validation"), + "E7010": ("F0050", "Mapping key and attribute count limits (structural limit only; cfn-lint also checks approaching-limit)"), + "E8004": ("E8004", "Fn::And structure"), + "E8005": ("E8005", "Fn::Not structure"), + "E8006": ("E8006", "Fn::Or structure"), + "E8007": ("E8007", "Condition reference validation"), + # Info approaching-limits rules: cfn-lint warns when counts approach + # CloudFormation limits. Our engine checks hard limits (Fatal) but does + # NOT implement approaching-limit warnings for template body size or + # resource count. These are out-of-scope, not covered. + "I1002": ("out-of-scope", "Template body size approaching limit (no approaching-limit analog)"), + "I3010": ("out-of-scope", "Resource count approaching limit (no approaching-limit analog)"), + # Intrinsic resolved-value rules - our engine does resolution during + # SemanticModel build; resolved-value errors surface via schema rules. + # W1019 specifically checks for UNUSED parameters in Fn::Sub's explicit + # map — our E1029/F1018 check for MISSING variables, which is a different + # concern. W1019 is in our registry as a direct implementation. + "W1019": ("W1019", "Fn::Sub unused explicit-map parameter (direct implementation, not via F1018/E1029)"), + "W1031": ("F3012+W9003", "Fn::Sub resolved values (via resolver)"), + "W1032": ("F3012+W9003", "Fn::Join resolved values"), + "W1033": ("F3012+W9003", "Fn::Split resolved values"), + "W1035": ("F3012+W9003", "Fn::Select resolved values"), + "W1040": ("F3012+W9003", "Fn::ToJsonString resolved values"), + "W2030": ("F2015", "Parameter Default enum check"), + "W2031": ("F3031", "Parameter AllowedPattern check"), + "W3034": ("E3034/F3034", "Parameter value numeric range"), + "W6001": ("out-of-scope", "Output ImportValue usage (cfn-lint checks cross-stack references)"), + # Intrinsic function structural validation - template-model validates + # these during parsing and emits F1101 (structural error) or W1102 + # (type error) instead of the cfn-lint rule IDs: + "E1024": ("F1101/W1102", "Cidr validation (template-model parser)"), + # W1051: Secrets Manager cross-account ARN detection requires runtime + # context (account ID) that is not available during template validation. + # cfn-lint checks for non-ARN secret references but this engine validates + # Secrets Manager dynamic references via E1051 (path validation). + "W1051": ("E1051", "Secrets Manager dynamic reference validation"), + # Format validators - cfn-lint uses FormatKeyword rules that match + # the "format" field in CloudFormation schemas. Our schema-validator + # enforces these through compiled schema format validation. + "E1157": ("schema-format", "KMS key ARN format (schema format field)"), + "E1158": ("schema-format", "SNS topic ARN format (schema format field)"), + "E1159": ("schema-format", "ACM certificate ARN format (schema format field)"), + "E1160": ("schema-format", "Lambda function ARN format (schema format field)"), + "E1161": ("schema-format", "S3 bucket name format (schema format field)"), + "E1162": ("schema-format", "KMS key ID format (schema format field)"), + "E1163": ("schema-format", "Lambda function name format (schema format field)"), + "E1164": ("schema-format", "KMS alias name format (schema format field)"), + # Covered via schema-validator extensions (extensions.json if/then patches): + "E3046": ("schema-ext", "ECS awslogs config - via extensions"), + "E3615": ("schema-ext", "CloudWatch Alarm Period enum"), + "E3633": ("schema-ext", "Lambda StartingPosition validation"), + "E3634": ("schema-ext", "Lambda SQS starting position"), + "E3638": ("schema-ext", "DynamoDB BillingMode PayPerRequest"), + "E3639": ("schema-ext", "DynamoDB Provisioned ProvisionedThroughput required"), + "E3661": ("schema-ext", "Route53 HealthCheck AlarmIdentifier"), + "E3678": ("schema-ext", "Lambda ZipFile runtime required"), + "E3681": ("schema-ext", "ELBv2 TargetGroup target type restrictions"), + "E3683": ("schema-ext", "ELBv2 TargetGroup protocol restrictions"), + "E3684": ("schema-ext", "ELBv2 TargetGroup health check protocol"), + "E3687": ("schema-ext", "SG protocol-specific port restrictions"), + "E3688": ("schema-ext", "SG ports must both be -1"), + "E3691": ("schema-ext", "RDS Engine and EngineVersion compatibility"), + "E3695": ("schema-ext", "ElastiCache Engine and EngineVersion"), + "E3696": ("schema-ext", "Lambda LogLevel/LogFormat relationship"), + "E3699": ("schema-ext", "APIGW Method/Authorizer RestApi match"), + "E3711": ("schema-ext", "ListenerRule target protocol restrictions"), + "E3712": ("schema-ext", "ASG TargetTrackingScaling policy"), + "E3713": ("schema-ext", "Fargate ECS log drivers"), + "E3716": ("schema-ext", "Lambda layer ARN length by region"), + "E3718": ("schema-ext", "API Gateway Authorizer TTL"), + # Covered via schema-validator patched schemas (patches from cfn-lint + # merged into the base CloudFormation schemas at build time): + "E3063": ("schema-patch", "GuardDuty Detector property exclusivity"), + "E3503": ("schema-patch", "ACM ValidationDomain subdomain of DomainName"), + "E3674": ("schema-patch", "EC2 NetworkInterface Primary+PrivateIp"), + "E3682": ("schema-patch", "Aurora properties not required"), + "E3686": ("schema-patch", "Serverless RDS DB cluster properties"), + "E3689": ("schema-patch", "RDS MonitoringInterval+Role required together"), + "E3692": ("schema-patch", "RDS Multi-AZ DB cluster config"), + "E3693": ("schema-patch", "Aurora DB cluster config"), + "E3697": ("schema-patch", "Lambda environment variables size"), + "E3709": ("schema-patch", "RDS DBInstance matches cluster StorageEncrypted"), + "E3714": ("schema-patch", "LaunchTemplate SG/Subnet VPC match"), + "E3715": ("schema-patch", "BlockDeviceMapping VirtualName"), + "E3719": ("schema-patch", "RDS BackupRetentionPeriod config"), + # Elasticsearch is deprecated (replaced by OpenSearch). cfn-lint has + # rule E3652 but the pricing API returns no data - the rule is a no-op + # in cfn-lint too. Our schema has the type but no enum to validate. + "E3652": ("schema-patch", "Elasticsearch domain cluster instance (no data - deprecated service)"), + # Deprecated runtime warnings: + "W3690": ("W2531", "DB Cluster Engine Version deprecated"), + "W3691": ("W2531", "DB Instance Engine Version deprecated"), + # Out of scope (CLI-level config, not template validation): + "E0100": ("out-of-scope", "CLI deployment file"), + "E0200": ("out-of-scope", "CLI parameter file"), + "E2900": ("out-of-scope", "CLI deployment parameters"), + "E3009": ("out-of-scope", "CFN init configuration (metadata)"), + "E3028": ("out-of-scope", "Resource metadata section (rarely used)"), + "E3043": ("out-of-scope", "Nested stack parameters (runtime-only)"), + "W4001": ("out-of-scope", "Metadata Interface parameters"), + "W4005": ("out-of-scope", "cfn-lint metadata config"), + "W1100": ("out-of-scope", "YAML merge directives"), +} + +_RULE_ID_PATTERN = re.compile(r"^[FEWID]\d{4}$") + + +def _find_stale_logical_coverage(registry_ids, logical_coverage=LOGICAL_COVERAGE): + """Return logical-coverage mechanisms that reference absent engine rules.""" + stale = [] + for cfnlint_id, (mechanism, note) in logical_coverage.items(): + for part in re.split(r"[/+]", mechanism): + rule_id = part.strip() + if _RULE_ID_PATTERN.match(rule_id) and rule_id not in registry_ids: + stale.append((cfnlint_id, rule_id, mechanism, note)) + return sorted(stale) + + def build_report(origins: RuleOrigins) -> str: our = origins.registry cfnlint = origins.cfnlint_ids @@ -630,15 +1156,27 @@ def build_report(origins: RuleOrigins) -> str: w("- By true origin: " + ", ".join(f"{k}={v}" for k, v in sorted(true_org_count.items()))) w("- By category: " + ", ".join(f"{k}={v}" for k, v in sorted(cat_count.items()))) w(f"- cfn-lint reference: {len(cfnlint)} rule IDs loaded") - w(f"- E→F promoted rules: {len(origins.cfnlint_to_engine)}") - w(f"- Engine-extra rules: {len(origins.engine_extra)}") + # Break down the cfnlint→engine mapping by mapping type. + e_to_f = {c: e for c, e in origins.cfnlint_to_engine.items() + if c[0] == "E" and e[0] == "F"} + e_to_e = {c: e for c, e in origins.cfnlint_to_engine.items() + if c[0] == "E" and e[0] == "E"} + e_to_w = {c: e for c, e in origins.cfnlint_to_engine.items() + if c[0] == "E" and e[0] == "W"} + w(f"- cfn-lint→engine mappings: {len(origins.cfnlint_to_engine)} total " + f"({len(e_to_f)} E→F promotions, {len(e_to_e)} E→E same/split, " + f"{len(e_to_w)} E→W downgrades)") + w(f"- Engine-extra rules: {len(origins.engine_extra)}" + f" ({len(origins.engine_extra_collisions)} with number collisions)") w("") # ----- 1. Origin correctness ----- w("## 1. Origin correctness") w("") - w("True origin is computed by checking cfn-lint source, not the registry's") - w("`origin:` field. Mismatches indicate the registry needs updating.") + w("True origin is derived from Fatal severity, explicit non-Fatal schema") + w("evidence verified against required production emitters, and exact or") + w("documented cfn-lint equivalences. The registry `origin:` field is compared") + w("only after that derivation; mismatches indicate metadata needs updating.") w("") if origins.origin_issues: w(f"**{len(origins.origin_issues)} issue(s) found.**") @@ -651,6 +1189,20 @@ def build_report(origins: RuleOrigins) -> str: w("_All registry origins match computed true origins._") w("") + # Engine-extra invariant violations + if origins.engine_extra_invariant_violations: + w(f"### Engine-extra invariant violations ({len(origins.engine_extra_invariant_violations)})") + w("") + w("These rules were computed as engine-extra but have a direct or aliased") + w("cfn-lint equivalent, violating the invariant. They have been removed") + w("from engine_extra but indicate a logic error.") + w("") + w("| ID | Kind | cfn-lint equivalent(s) |") + w("|----|------|------------------------|") + for rid, kind, cfn_ids in origins.engine_extra_invariant_violations: + w(f"| `{rid}` | {kind} | {', '.join(f'`{c}`' for c in cfn_ids)} |") + w("") + # ----- 2. Description parity vs cfn-lint ----- w("## 2. Description parity vs cfn-lint") w("") @@ -786,144 +1338,9 @@ def build_report(origins: RuleOrigins) -> str: our_ids = {r[0] for r in our} promoted_e_ids = set(origins.cfnlint_to_engine.keys()) - # Logical coverage map: cfn-lint rule IDs whose logic is enforced via our - # schema-validator consuming cfn-lint's extensions/patches, or via a - # different-ID engine rule. Values are (our_id_or_mechanism, note). - LOGICAL_COVERAGE = { - # Covered via Fatal/schema rules (different numeric ID). - # Each entry verified: our rule fires on the same templates cfn-lint - # flags, producing an equivalent diagnostic under a different ID. - "E1001": ("F0002/F0005", "Base template JSON schema (top-level structure)"), - "E1003": ("F0011", "description max length 1024"), - "E1011": ("F1012/F1101", "FindInMap structural validation (template-model parser)"), - "E1017": ("F1050/F1101", "Select structural validation (template-model parser)"), - "E1019": ("F1018", "Sub variable resolution"), - "E1021": ("F1101", "Base64 structural validation (template-model parser)"), - "E1022": ("F1101", "Join structural validation (template-model parser)"), - "E1028": ("E1028/F0013", "Fn::If condition + structure"), - "E1700": ("F8600", "Rules section config"), - "E1701": ("F8603", "Rule Assertions required"), - "E1702": ("F8606", "Rule RuleCondition validation"), - "E2010": ("F0003", "Parameter limit 200"), - "E3015": ("E8002", "Condition reference on resource"), - # E3008: prefixItems array validation - handled by schema-validator - # through compiled JSON Schema (prefixItems is a standard JSON Schema keyword). - "E3008": ("schema-patch", "Array prefixItems validation (compiled schema)"), - "E3035": ("F3016", "DeletionPolicy values"), - "E3036": ("F0018", "UpdateReplacePolicy values"), - # Structural validation (covered via parser + Fatal schema rules): - "E4001": ("F0005", "Metadata Interface section validation"), - "E4002": ("F0005", "Metadata section config"), - "E6002": ("F0040", "Output Value required"), - "E6003": ("F6101", "Output value type"), - "E6010": ("F0004", "Output limit 200"), - "E6102": ("F6005/F6101", "Output Export validation"), - "E7010": ("F0008", "Mappings limit 200"), - "E8004": ("E8004", "Fn::And structure"), - "E8005": ("E8005", "Fn::Not structure"), - "E8006": ("E8006", "Fn::Or structure"), - "E8007": ("E8007", "Condition reference validation"), - # Info approaching-limits rules - covered by I-prefix equivalents: - "I1002": ("I2010/I6010", "approaching template size (via parameter/output limit warns)"), - "I3010": ("I2010", "resource limit approach"), - # Intrinsic resolved-value rules - our engine does resolution during - # SemanticModel build; resolved-value errors surface via schema rules: - "W1019": ("F1018/E1029", "Fn::Sub parameter usage"), - "W1031": ("F3012+W9003", "Fn::Sub resolved values (via resolver)"), - "W1032": ("F3012+W9003", "Fn::Join resolved values"), - "W1033": ("F3012+W9003", "Fn::Split resolved values"), - "W1035": ("F3012+W9003", "Fn::Select resolved values"), - "W1040": ("F3012+W9003", "Fn::ToJsonString resolved values"), - "W2030": ("F2015", "Parameter Default enum check"), - "W2031": ("F3031", "Parameter AllowedPattern check"), - "W3034": ("E3034/F3034", "Parameter value numeric range"), - "W6001": ("out-of-scope", "Output ImportValue usage (cfn-lint checks cross-stack references)"), - # Intrinsic function structural validation - template-model validates - # these during parsing and emits F1101 (structural error) or W1102 - # (type error) instead of the cfn-lint rule IDs: - "E1024": ("F1101/W1102", "Cidr validation (template-model parser)"), - # W1051: Secrets Manager cross-account ARN detection requires runtime - # context (account ID) that is not available during template validation. - # cfn-lint checks for non-ARN secret references but this engine validates - # Secrets Manager dynamic references via E1051 (path validation). - "W1051": ("E1051", "Secrets Manager dynamic reference validation"), - # Format validators - cfn-lint uses FormatKeyword rules that match - # the "format" field in CloudFormation schemas. Our schema-validator - # enforces these through compiled schema format validation. - "E1157": ("schema-format", "KMS key ARN format (schema format field)"), - "E1158": ("schema-format", "SNS topic ARN format (schema format field)"), - "E1159": ("schema-format", "ACM certificate ARN format (schema format field)"), - "E1160": ("schema-format", "Lambda function ARN format (schema format field)"), - "E1161": ("schema-format", "S3 bucket name format (schema format field)"), - "E1162": ("schema-format", "KMS key ID format (schema format field)"), - "E1163": ("schema-format", "Lambda function name format (schema format field)"), - "E1164": ("schema-format", "KMS alias name format (schema format field)"), - # Covered via schema-validator extensions (extensions.json if/then patches): - "E3046": ("schema-ext", "ECS awslogs config - via extensions"), - "E3615": ("schema-ext", "CloudWatch Alarm Period enum"), - "E3633": ("schema-ext", "Lambda StartingPosition validation"), - "E3634": ("schema-ext", "Lambda SQS starting position"), - "E3638": ("schema-ext", "DynamoDB BillingMode PayPerRequest"), - "E3639": ("schema-ext", "DynamoDB Provisioned ProvisionedThroughput required"), - "E3661": ("schema-ext", "Route53 HealthCheck AlarmIdentifier"), - "E3678": ("schema-ext", "Lambda ZipFile runtime required"), - "E3681": ("schema-ext", "ELBv2 TargetGroup target type restrictions"), - "E3683": ("schema-ext", "ELBv2 TargetGroup protocol restrictions"), - "E3684": ("schema-ext", "ELBv2 TargetGroup health check protocol"), - "E3687": ("schema-ext", "SG protocol-specific port restrictions"), - "E3688": ("schema-ext", "SG ports must both be -1"), - "E3691": ("schema-ext", "RDS Engine and EngineVersion compatibility"), - "E3695": ("schema-ext", "ElastiCache Engine and EngineVersion"), - "E3696": ("schema-ext", "Lambda LogLevel/LogFormat relationship"), - "E3699": ("schema-ext", "APIGW Method/Authorizer RestApi match"), - "E3711": ("schema-ext", "ListenerRule target protocol restrictions"), - "E3712": ("schema-ext", "ASG TargetTrackingScaling policy"), - "E3713": ("schema-ext", "Fargate ECS log drivers"), - "E3716": ("schema-ext", "Lambda layer ARN length by region"), - "E3718": ("schema-ext", "API Gateway Authorizer TTL"), - # Covered via schema-validator patched schemas (patches from cfn-lint - # merged into the base CloudFormation schemas at build time): - "E3063": ("schema-patch", "GuardDuty Detector property exclusivity"), - "E3503": ("schema-patch", "ACM ValidationDomain subdomain of DomainName"), - "E3674": ("schema-patch", "EC2 NetworkInterface Primary+PrivateIp"), - "E3682": ("schema-patch", "Aurora properties not required"), - "E3686": ("schema-patch", "Serverless RDS DB cluster properties"), - "E3689": ("schema-patch", "RDS MonitoringInterval+Role required together"), - "E3692": ("schema-patch", "RDS Multi-AZ DB cluster config"), - "E3693": ("schema-patch", "Aurora DB cluster config"), - "E3697": ("schema-patch", "Lambda environment variables size"), - "E3709": ("schema-patch", "RDS DBInstance matches cluster StorageEncrypted"), - "E3714": ("schema-patch", "LaunchTemplate SG/Subnet VPC match"), - "E3715": ("schema-patch", "BlockDeviceMapping VirtualName"), - "E3719": ("schema-patch", "RDS BackupRetentionPeriod config"), - # Elasticsearch is deprecated (replaced by OpenSearch). cfn-lint has - # rule E3652 but the pricing API returns no data - the rule is a no-op - # in cfn-lint too. Our schema has the type but no enum to validate. - "E3652": ("schema-patch", "Elasticsearch domain cluster instance (no data - deprecated service)"), - # Deprecated runtime warnings: - "W3690": ("W2531", "DB Cluster Engine Version deprecated"), - "W3691": ("W2531", "DB Instance Engine Version deprecated"), - # Out of scope (CLI-level config, not template validation): - "E0100": ("out-of-scope", "CLI deployment file"), - "E0200": ("out-of-scope", "CLI parameter file"), - "E2900": ("out-of-scope", "CLI deployment parameters"), - "E3009": ("out-of-scope", "CFN init configuration (metadata)"), - "E3028": ("out-of-scope", "Resource metadata section (rarely used)"), - "E3043": ("out-of-scope", "Nested stack parameters (runtime-only)"), - "W4001": ("out-of-scope", "Metadata Interface parameters"), - "W4005": ("out-of-scope", "cfn-lint metadata config"), - "W1100": ("out-of-scope", "YAML merge directives"), - } - missing = [] covered = [] - stale_coverage = [] - rule_id_pattern = re.compile(r'^[FEWID]\d{4}$') - for cid, (our_mechanism, note) in LOGICAL_COVERAGE.items(): - for part in re.split(r'[/+]', our_mechanism): - part = part.strip() - if rule_id_pattern.match(part) and part not in our_ids: - stale_coverage.append((cid, part, our_mechanism, note)) + stale_coverage = _find_stale_logical_coverage(our_ids) for cid in sorted(cfnlint): if cid in our_ids: @@ -975,19 +1392,30 @@ def build_report(origins: RuleOrigins) -> str: # ----- 8. Source emission checks ----- cel_emissions = scan_rust_emissions(CEL_RULES) + all_rust_emissions = scan_rust_emissions() # repo-wide production scan rego_emissions = scan_rego_emissions() + scopes = scan_production_scopes() reg_ids = {r[0] for r in our} reg_map = {r[0]: r for r in our} cel_ids = {e[0] for e in cel_emissions} + all_rust_ids = {e[0] for e in all_rust_emissions} rego_ids = {e[0] for e in rego_emissions} w("## 8. Source emission checks") w("") - w("Static regex scan of `.rs` and `.rego` files for rule ID usage.") + w("Static regex scan of production runtime Rust and Rego source files.") + w("") + w("**Scanned crates:**") + for crate_name, crate_path in scopes: + w(f"- `{crate_name}` (`{crate_path}`)") + w("") + w("**Excluded:** generated code, registry definition, `#[cfg(test)]` modules,") + w("bindings crates, `cfn-validate` (CLI frontend), `resources` (test fixtures),") + w("`guard-translator` (IR only).") w("") # 8a. Unregistered - all_emissions = cel_emissions + [(r, p, l) for r, _s, p, l in rego_emissions] + all_emissions = all_rust_emissions + [(r, p, l) for r, _s, p, l in rego_emissions] unreg = _check_unregistered(reg_ids, all_emissions) if unreg: w(f"### Unregistered rule IDs ({len(unreg)})") @@ -998,7 +1426,7 @@ def build_report(origins: RuleOrigins) -> str: w(f"| `{rid}` | `{path}` | {line} |") w("") else: - w("**Unregistered IDs:** none ✅") + w("**Unregistered IDs:** none (across scanned production crates) ✅") w("") # 8b. Rego severity mismatch @@ -1033,18 +1461,26 @@ def build_report(origins: RuleOrigins) -> str: w("**Dual-use rule IDs:** none ✅") w("") - # 8d. Engine parity (source-level) + # 8d. Engine parity (source-level ID presence check). This verifies that + # rule IDs are EMITTED by both engine-owned source trees (cel-engine/src/rules + # and rego-engine/handwritten/rego). It checks ID presence only — NOT + # behavioral parity. A rule ID appearing in both trees does not guarantee + # identical firing behavior; behavioral parity is verified separately by + # running both engines on real templates. Shared Rust emitters in + # template-model, schema-validator, validation-engine, and diagnostics feed + # both engines and therefore do not represent CEL ownership. cel_only = sorted(cel_ids - rego_ids) rego_only = sorted(rego_ids - cel_ids) if cel_only or rego_only: - w("### Engine source parity gaps") + w("### Engine source ID presence gaps") w("") - w("Rule IDs found in one engine's source but not the other.") - w("May be false positives from regex limitations - cross-reference") - w("with `cargo test -p cfn-validate --test engine_parity` for ground truth.") + w("Rule IDs found in native CEL rule source but not handwritten Rego, or vice versa.") + w("This checks ID presence only — NOT behavioral parity. A rule ID appearing in both") + w("trees does not guarantee identical firing behavior on real templates.") + w("Shared Rust emitters consumed by both engines are excluded from this comparison.") w("") if cel_only: - w(f"**CEL only ({len(cel_only)}):** {', '.join(f'`{r}`' for r in cel_only[:10])}" + w(f"**Rust only ({len(cel_only)}):** {', '.join(f'`{r}`' for r in cel_only[:10])}" + (f" ... +{len(cel_only)-10}" if len(cel_only) > 10 else "")) w("") if rego_only: @@ -1052,27 +1488,87 @@ def build_report(origins: RuleOrigins) -> str: + (f" ... +{len(rego_only)-10}" if len(rego_only) > 10 else "")) w("") else: - w("**Engine source parity:** CEL and Rego emit the same rule IDs ✅") + w("**Engine source ID presence:** native CEL and handwritten Rego emit the same rule IDs ✅") + w("_(ID presence only — behavioral parity is verified by running both engines on real templates.)_") w("") - w(f"_Scanned {len(cel_emissions)} CEL sites ({len(cel_ids)} IDs), " + w(f"_Scanned {len(all_rust_emissions)} Rust sites ({len(all_rust_ids)} IDs), " f"{len(rego_emissions)} Rego sites ({len(rego_ids)} IDs)._") w("") # ----- Appendix ----- + # Build a set of IDs that have origin issues for quick appendix lookup. + # Uses the same predicate as the origin_issues computation above. + _origin_issue_ids = {item[0] for item in origins.origin_issues} + w("## Appendix: full rule inventory") w("") w("| ID | Severity | Category | Registry origin | True origin | Description |") w("|----|----------|----------|-----------------|-------------|-------------|") for rid, sev, cat, reg_o, desc in sorted(our): true_o = origins.true_origins.get(rid, "?") - marker = " ⚠" if reg_o != true_o.split("(")[0] and true_o != "Schema" else "" + marker = " ⚠" if rid in _origin_issue_ids else "" w(f"| `{rid}` | {sev} | {cat} | {reg_o}{marker} | {true_o} | {desc} |") w("") return "\n".join(lines) + "\n" +def audit_results(origins: RuleOrigins): + """Compute structured audit results for programmatic consumption. + + Returns a dict with failure categories and their details. + Each non-empty category is a failure condition that causes nonzero exit. + """ + registry = origins.registry + reg_ids = {r[0] for r in registry} + + # Scan all production emitters for registration, plus engine-owned sources + # separately for CEL/Rego parity. + all_rust_emissions = scan_rust_emissions() + cel_emissions = scan_rust_emissions(CEL_RULES) + rego_emissions = scan_rego_emissions() + all_emissions = all_rust_emissions + [(r, p, l) for r, _s, p, l in rego_emissions] + cel_ids = {e[0] for e in cel_emissions} + rego_ids = {e[0] for e in rego_emissions} + + results = {} + + # Origin issues + if origins.origin_issues: + results["origin_issues"] = origins.origin_issues + + # Engine-extra invariant violations + if origins.engine_extra_invariant_violations: + results["engine_extra_invariant_violations"] = origins.engine_extra_invariant_violations + + # Logical coverage must not claim implementation by absent engine rules. + stale_logical_coverage = _find_stale_logical_coverage(reg_ids) + if stale_logical_coverage: + results["stale_logical_coverage"] = stale_logical_coverage + + # Unregistered emissions + unreg = _check_unregistered(reg_ids, all_emissions) + if unreg: + results["unregistered_emissions"] = unreg + + # Rego severity mismatches + sev_issues = _check_rego_severity(reg_ids, rego_emissions) + if sev_issues: + results["severity_mismatches"] = sev_issues + + # Engine source ID presence gaps. This checks that rule IDs appear in + # both engine-owned source trees — it does NOT verify behavioral parity. + # Shared runtime emitters are consumed by both engines and are intentionally + # absent from this ownership comparison. + rust_only = sorted(cel_ids - rego_ids) + rego_only = sorted(rego_ids - cel_ids) + if rust_only or rego_only: + results["parity_gaps"] = {"rust_only": rust_only, "rego_only": rego_only} + + return results + + def main(): ap = argparse.ArgumentParser(description="Audit rule correctness in registry.rs") ap.add_argument("--cfn-lint-root", type=Path, required=True, @@ -1089,9 +1585,68 @@ def main(): args.output.parent.mkdir(parents=True, exist_ok=True) args.output.write_text(report) + # Structured results for exit-code determination + results = audit_results(origins) + + # Report summary (always printed) print(f"Wrote {args.output} ({len(origins.registry)} rules, " f"{len(origins.cfnlint_ids)} cfn-lint, " f"{len(origins.origin_issues)} origin issues)") + + # Report failures + if results: + print(f"\n{'='*60}", file=sys.stderr) + print("AUDIT FAILURES:", file=sys.stderr) + print(f"{'='*60}", file=sys.stderr) + if "origin_issues" in results: + print(f"\n Origin mismatches: {len(results['origin_issues'])}", file=sys.stderr) + for rid, reg_o, true_o, note in results["origin_issues"][:5]: + print(f" {rid}: {note}", file=sys.stderr) + if len(results["origin_issues"]) > 5: + print(f" ... +{len(results['origin_issues'])-5} more", file=sys.stderr) + if "engine_extra_invariant_violations" in results: + print(f"\n Engine-extra invariant violations: " + f"{len(results['engine_extra_invariant_violations'])}", file=sys.stderr) + for rid, kind, cfn_ids in results["engine_extra_invariant_violations"]: + print(f" {rid}: {kind} equivalent {cfn_ids}", file=sys.stderr) + if "stale_logical_coverage" in results: + stale = results["stale_logical_coverage"] + print(f"\n Stale logical-coverage entries: {len(stale)}", file=sys.stderr) + for cfnlint_id, missing_id, mechanism, _note in stale[:5]: + print( + f" {cfnlint_id}: {mechanism} references absent {missing_id}", + file=sys.stderr, + ) + if len(stale) > 5: + print(f" ... +{len(stale)-5} more", file=sys.stderr) + if "unregistered_emissions" in results: + print(f"\n Unregistered emissions: {len(results['unregistered_emissions'])}", file=sys.stderr) + for rid, path, line in results["unregistered_emissions"][:5]: + print(f" {rid} at {path}:{line}", file=sys.stderr) + if len(results["unregistered_emissions"]) > 5: + print(f" ... +{len(results['unregistered_emissions'])-5} more", file=sys.stderr) + if "severity_mismatches" in results: + print(f"\n Rego severity mismatches: {len(results['severity_mismatches'])}", file=sys.stderr) + for rid, sev, expected, path, line in results["severity_mismatches"]: + print(f" {rid}: says {sev}, expected {expected} at {path}:{line}", file=sys.stderr) + if "parity_gaps" in results: + gaps = results["parity_gaps"] + rust_only = gaps.get("rust_only", []) + rego_only = gaps.get("rego_only", []) + print(f"\n Engine source ID presence gaps: {len(rust_only)} Rust-only, " + f"{len(rego_only)} Rego-only (ID presence, not behavioral parity)", file=sys.stderr) + if rust_only: + print(f" Rust only: {', '.join(rust_only[:10])}" + + (f" ... +{len(rust_only)-10}" if len(rust_only) > 10 else ""), + file=sys.stderr) + if rego_only: + print(f" Rego only: {', '.join(rego_only[:10])}" + + (f" ... +{len(rego_only)-10}" if len(rego_only) > 10 else ""), + file=sys.stderr) + print(f"\n{'='*60}", file=sys.stderr) + return 1 + + print("\nAll audit checks passed ✅") return 0 diff --git a/scripts/compare_cfnlint.py b/scripts/compare_cfnlint.py index 780ba60a..e3c69fa6 100644 --- a/scripts/compare_cfnlint.py +++ b/scripts/compare_cfnlint.py @@ -24,9 +24,11 @@ import subprocess import sys from collections import defaultdict -from datetime import datetime +from dataclasses import dataclass from pathlib import Path +import yaml + SCRIPT_DIR = Path(__file__).resolve().parent PROJECT_ROOT = SCRIPT_DIR.parent SRC_DIR = PROJECT_ROOT / "src" @@ -38,8 +40,6 @@ CFN_LINT_TEMPLATES = None OUTPUT_PATH = None SKIP_BUILD = False - - ALL_ENGINES = ["rego", "cel"] OUTPUT_FORMAT = "detailed" ITERATIONS = 1 @@ -54,6 +54,83 @@ _RULE_ALIASES = {} _IS_ENGINE_EXTRA_DIAGNOSTIC = None # callable from audit_rule_categorization +_STATEFUL_SAM_RESOURCE_TYPES = frozenset({ + "AWS::Serverless::Application", + "AWS::Serverless::SimpleTable", +}) +_IDENTITY_POLICY_RESOURCE_TYPES = frozenset({ + "AWS::IAM::Group", + "AWS::IAM::GroupPolicy", + "AWS::IAM::ManagedPolicy", + "AWS::IAM::Policy", + "AWS::IAM::Role", + "AWS::IAM::RolePolicy", + "AWS::IAM::User", + "AWS::IAM::UserPolicy", + "AWS::SSO::PermissionSet", +}) +_FORBIDDEN_IDENTITY_POLICY_ID_MESSAGE = ( + "Additional properties are not allowed ('Id' was unexpected)" +) + +_REFERENCE_SCOPE_EXCLUSIONS = { + "E0002": "cfn-lint rule-execution failure rather than a template contract", + "E3043": "requires loading a referenced nested template from the local filesystem", + "W4001": "CloudFormation console-interface metadata is outside the validator scope", + "W4005": "cfn-lint-specific metadata configuration", + "W6001": "cross-stack import advisory is outside offline template correctness", +} + +# Known Reference Incorrect (RI) cases: cfn-lint reports a finding that is +# demonstrably wrong based on CloudFormation's actual behavior. These are +# excluded from FN and recall because reporting them would be incorrect. +_REFERENCE_INCORRECT_CASES = frozenset({ + # E3047: ECS Fargate task definition memory/cpu validations on valid templates + ("good/ecs_fargate_units_and_sizes.yaml", "E3047"), + # E3048: ECS Fargate task definition container memory validations on valid templates + ("good/ecs_fargate_units_and_sizes.yaml", "E3048"), + # E3048: Fargate task sizes in bad template - incorrect for specific resources + ("bad/resources/ecs/fargate_task_sizes_e3047.yaml", "E3048"), +}) +_REFERENCE_INCORRECT_RESOURCES = { + # (canonical_path, rule_id) -> frozenset of resource logical IDs that are RI + ("good/ecs_fargate_units_and_sizes.yaml", "E3047"): frozenset({ + "ThirtyTwoVcpuSixtyGb", "ThirtyTwoVcpuOneTwentyGb", "ThirtyTwoVcpuTwoFortyFourGb", + }), + ("good/ecs_fargate_units_and_sizes.yaml", "E3048"): frozenset({ + "ThirtyTwoVcpuSixtyGb", "ThirtyTwoVcpuOneTwentyGb", "ThirtyTwoVcpuTwoFortyFourGb", + }), + ("bad/resources/ecs/fargate_task_sizes_e3047.yaml", "E3048"): frozenset({ + "ThirtyTwoVcpuUnsupportedSixtyFourGb", + "ThirtyTwoVcpuUnsupportedTwoFortyGb", + }), +} + + +@dataclass(frozen=True) +class QualityClassification: + kind: str + reason: str + + +@dataclass(frozen=True) +class ReferenceSuppressions: + global_rule_prefixes: frozenset[str] + resource_rule_ids: dict[str, frozenset[str]] + + def suppresses(self, reference_rule_ids, resource_id): + if any( + rule_id.startswith(prefix) + for rule_id in reference_rule_ids + for prefix in self.global_rule_prefixes + ): + return True + ignored_for_resource = self.resource_rule_ids.get(resource_id, frozenset()) + return any(rule_id in ignored_for_resource for rule_id in reference_rule_ids) + + +NO_REFERENCE_SUPPRESSIONS = ReferenceSuppressions(frozenset(), {}) + def init_rule_origins(): """Initialize rule classification from audit_rule_categorization (single source of truth).""" @@ -73,6 +150,9 @@ def parse_args(): engine_set = False i = 1 while i < len(sys.argv): + if sys.argv[i] in ("-h", "--help"): + print(__doc__.strip()) + raise SystemExit(0) if sys.argv[i] == "--cfn-lint-root" and i + 1 < len(sys.argv): CFN_LINT_ROOT = Path(sys.argv[i + 1]) i += 2 @@ -195,14 +275,20 @@ def run_bench(): # ── Load cfn-lint expected results ─────────────────────────────────────────── +def _canonical_reference_rule_id(cfnlint_id, message): + """Return the engine identity for one concrete reference occurrence.""" + if ( + cfnlint_id == "E1001" + and message == "'Resources' is a required property" + ): + return "F0001" + return cfnlint_rule_to_engine(cfnlint_id) + + def normalize_cfnlint_diags(diags): - # cfn-lint metadata validation rules are out of scope for this engine - EXCLUDED_RULES = {"W4001", "W4005"} out = [] for d in diags: rule = d.get("Rule", {}) - if rule.get("Id", "") in EXCLUDED_RULES: - continue loc = d.get("Location", {}) path_parts = loc.get("Path") or [] start = loc.get("Start", {}) @@ -218,57 +304,145 @@ def normalize_cfnlint_diags(diags): prop_path = ".".join(str(part) for part in path_parts[2:]) cfnlint_id = rule.get("Id", "") cfnlint_sev = d.get("Level", "") - engine_id = cfnlint_rule_to_engine(cfnlint_id) - engine_sev = cfnlint_severity_to_engine(cfnlint_sev, cfnlint_id) + message = d.get("Message", "") + engine_id = _canonical_reference_rule_id(cfnlint_id, message) + engine_sev = cfnlint_severity_to_engine( + cfnlint_sev, cfnlint_id, engine_id + ) out.append({ "rule_id": engine_id, "cfnlint_rule_id": cfnlint_id, "rule_description": rule.get("ShortDescription", ""), "rule_source": rule.get("Source", ""), "severity": engine_sev, - "message": d.get("Message", ""), + "cfnlint_severity": cfnlint_sev, + "message": message, "resource_id": resource_id, "resource_path": prop_path, "json_path": ".".join(str(p) for p in path_parts) if path_parts else "", "line": start.get("LineNumber", 0), + "column": start.get("ColumnNumber", 0), "end_line": end.get("LineNumber", 0), + "end_column": end.get("ColumnNumber", 0), + "comparison_excluded_reason": _REFERENCE_SCOPE_EXCLUSIONS.get( + cfnlint_id, "" + ), }) return out +def _canonical_template_path_from_filename(filename): + """Extract canonical POSIX template path from a cfn-lint Filename field. + + cfn-lint stores the path as 'test/fixtures/templates/'. + Returns the corpus-relative POSIX path (e.g. 'bad/resources/foo.yaml'). + """ + prefix = "test/fixtures/templates/" + if filename.startswith(prefix): + return filename[len(prefix):] + return filename + + +def _canonical_key_from_path(canonical_path): + """Derive the flattened engine-report key from a canonical POSIX path. + + Mirrors the engine's report filename convention: + 'bad/resources/foo.yaml' -> 'bad_resources_foo_yaml' + """ + return (canonical_path + .replace("/", "_") + .replace(".yaml", "_yaml") + .replace(".yml", "_yml") + .replace(".json", "_json")) + + +def _resolve_cfnlint_collision(canonical_key, existing_entry, new_entry): + """Resolve a duplicate canonical cfn-lint baseline. + + Returns the entry to keep. Raises if ambiguity remains. + """ + existing_path, existing_diags, existing_file = existing_entry + new_path, new_diags, new_file = new_entry + + # If normalized diagnostics are identical, deduplicate silently + if existing_diags == new_diags: + return existing_entry + + # The engine comparison is non-strict. For QuickStart collisions, an + # explicit non_strict result wins over either the root/default result or an + # explicit strict result, independent of traversal order. + is_quickstart = ( + canonical_key.startswith("quickstart_") + or existing_path.startswith("quickstart/") + or new_path.startswith("quickstart/") + ) + existing_in_non_strict = "non_strict" in existing_file.parts + new_in_non_strict = "non_strict" in new_file.parts + + if is_quickstart and existing_in_non_strict != new_in_non_strict: + return existing_entry if existing_in_non_strict else new_entry + + # For other collisions, prefer the result tree matching the template's + # top-level corpus directory (bad for bad/, good for good/, etc.) + if existing_path: + top_dir = existing_path.split("/")[0] if "/" in existing_path else "" + existing_rel = str(existing_file.relative_to(CFN_LINT_RESULTS)) if CFN_LINT_RESULTS else "" + new_rel = str(new_file.relative_to(CFN_LINT_RESULTS)) if CFN_LINT_RESULTS else "" + if top_dir and existing_rel.startswith(top_dir + "/") and not new_rel.startswith(top_dir + "/"): + return existing_entry + if top_dir and new_rel.startswith(top_dir + "/") and not existing_rel.startswith(top_dir + "/"): + return new_entry + + raise ValueError( + f"Ambiguous cfn-lint baseline collision for key '{canonical_key}': " + f"files '{existing_file}' and '{new_file}' produce different diagnostics " + f"and no resolution heuristic applies" + ) + + def _load_cfnlint_result_file(f, prefix, results): """Load a single cfn-lint result JSON file into results dict.""" if f.name.startswith("__"): return try: data = json.loads(f.read_text()) - except (json.JSONDecodeError, UnicodeDecodeError): - return + except json.JSONDecodeError as exc: + raise ValueError( + f"Malformed JSON in cfn-lint result file '{f}': {exc}" + ) from exc + except UnicodeDecodeError as exc: + raise ValueError( + f"Encoding error in cfn-lint result file '{f}': {exc}" + ) from exc if not isinstance(data, list): - return + raise ValueError( + f"cfn-lint result file '{f}' does not contain a JSON list " + f"(got {type(data).__name__})" + ) - # The default key comes from the result filename, whose stem now embeds the - # source extension as a suffix (template "metdata.yaml" -> result - # "metadata_yaml.json") - # Prefer the template filename read from the JSON's `Filename` field: the - # result filename's base may differ from the real template name (e.g. result - # "metadata_yaml.json" for template "metdata.yaml"), and the engine report is - # keyed off the true template path. - key = f"{prefix}_{f.stem}" + # Derive canonical template path from the Filename field + canonical_path = "" if data and isinstance(data[0], dict) and data[0].get("Filename"): - tpl = data[0]["Filename"].replace("test/fixtures/templates/", "") - derived = tpl.replace("/", "_").replace(".yaml", "_yaml").replace(".yml", "_yml").replace(".json", "_json") - if derived: - key = derived + canonical_path = _canonical_template_path_from_filename(data[0]["Filename"]) + key = _canonical_key_from_path(canonical_path) else: - # An empty result list (cfn-lint found nothing) carries no `Filename`, so - # the true template extension cannot be read from the diagnostics. Confirm - # it instead by locating the mirror template under the templates tree; if - # none exists the default key (from the result filename) is kept as-is. + # Empty result list (cfn-lint found nothing) carries no Filename; derive + # from the mirror template under the templates tree. derived = _derive_key_from_template_path(f) if derived: key = derived - results[key] = normalize_cfnlint_diags(data) + else: + key = f"{prefix}_{f.stem}" + + normalized = normalize_cfnlint_diags(data) + + if key in results: + existing_entry = results[key] + new_entry = (canonical_path, normalized, f) + winner = _resolve_cfnlint_collision(key, existing_entry, new_entry) + results[key] = winner + else: + results[key] = (canonical_path, normalized, f) def _derive_key_from_template_path(result_file): @@ -306,7 +480,9 @@ def load_cfnlint_results_from_files(): rel_parents = "_".join(f.relative_to(d).parent.parts) prefix = f"{subdir}_{rel_parents}" if rel_parents else subdir _load_cfnlint_result_file(f, prefix, results) - return results + # Strip collision-resolution metadata; callers need only key -> diagnostics + return {key: entry[1] if isinstance(entry, tuple) else entry + for key, entry in results.items()} def load_cfnlint_inline_results(): @@ -318,26 +494,49 @@ def load_cfnlint_inline_results(): match = re.search(r'scenarios\s*=\s*\[', text) if not match: return results - bracket_count, end = 0, match.start() + bracket_count = 0 + end = None for i in range(match.end() - 1, len(text)): - if text[i] == '[': bracket_count += 1 + if text[i] == '[': + bracket_count += 1 elif text[i] == ']': bracket_count -= 1 if bracket_count == 0: end = i + 1 break + if end is None: + raise ValueError( + f"Unterminated inline cfn-lint scenarios list in '{py_file}'" + ) scenarios_text = re.sub(r'str\(\s*Path\(\s*("[^"]+")\s*\)\s*\)', r'\1', text[match.start():end]) try: local_ns = {"Path": str} exec(scenarios_text, {"Path": str, "__builtins__": {"str": str, "Path": str}}, local_ns) - for scenario in local_ns.get("scenarios", []): - filename = scenario.get("filename", "") - rel = filename.replace("test/fixtures/templates/", "") - key = rel.replace("/", "_").replace(".yaml", "_yaml").replace(".yml", "_yml").replace(".json", "_json") - results[key] = normalize_cfnlint_diags(scenario.get("results", [])) - except Exception: - pass + except Exception as exc: + raise ValueError( + f"Failed to parse inline cfn-lint scenarios from " + f"'{py_file}': {exc}" + ) from exc + scenarios = local_ns.get("scenarios") + if not isinstance(scenarios, list): + raise ValueError( + f"Inline cfn-lint scenarios in '{py_file}' are not a list" + ) + for index, scenario in enumerate(scenarios): + if not isinstance(scenario, dict): + raise ValueError( + f"Inline cfn-lint scenario {index} in '{py_file}' is not an object" + ) + scenario_results = scenario.get("results", []) + if not isinstance(scenario_results, list): + raise ValueError( + f"Inline cfn-lint scenario {index} results in '{py_file}' are not a list" + ) + filename = scenario.get("filename", "") + rel = filename.replace("test/fixtures/templates/", "") + key = _canonical_key_from_path(rel) + results[key] = normalize_cfnlint_diags(scenario_results) return results @@ -366,6 +565,67 @@ def _diag_sort_key(d): +def _nested_mapping(mapping, *keys): + current = mapping + for key in keys: + if not isinstance(current, dict): + return {} + current = current.get(key, {}) + return current if isinstance(current, dict) else {} + + +def _ignore_check_values(raw_checks): + if isinstance(raw_checks, str): + return frozenset({raw_checks}) if raw_checks else frozenset() + if isinstance(raw_checks, list): + return frozenset(check for check in raw_checks if isinstance(check, str) and check) + return frozenset() + + +def _extract_reference_suppressions(template): + if not isinstance(template, dict): + return NO_REFERENCE_SUPPRESSIONS + + global_config = _nested_mapping(template, "Metadata", "cfn-lint", "config") + global_rule_prefixes = _ignore_check_values(global_config.get("ignore_checks")) + + resource_rule_ids = {} + resources = template.get("Resources", {}) + if isinstance(resources, dict): + for resource_id, resource in resources.items(): + resource_config = _nested_mapping(resource, "Metadata", "cfn-lint", "config") + ignored_rule_ids = _ignore_check_values(resource_config.get("ignore_checks")) + if ignored_rule_ids: + resource_rule_ids[str(resource_id)] = ignored_rule_ids + + return ReferenceSuppressions(global_rule_prefixes, resource_rule_ids) + + +def _load_reference_suppressions(template_path): + source_text = template_path.read_text() + try: + if template_path.suffix.lower() == ".json": + template = json.loads(source_text) + else: + template = yaml.load(source_text, Loader=yaml.BaseLoader) + except (json.JSONDecodeError, yaml.YAMLError): + # A template that cannot be decoded stops reference validation before + # resource directives can suppress findings. + return NO_REFERENCE_SUPPRESSIONS + return _extract_reference_suppressions(template) + + +def _reference_rule_ids(engine_rule_id): + reference_rule_ids = _ENGINE_TO_CFNLINT.get(engine_rule_id) + if reference_rule_ids: + return set(reference_rule_ids) + return {engine_rule_id} + + +def _is_reference_suppressed(engine_rule_id, resource_id, suppressions): + return suppressions.suppresses(_reference_rule_ids(engine_rule_id), resource_id) + + _NON_RESOURCE_SECTIONS = ( "Outputs", "Conditions", @@ -380,14 +640,20 @@ def _diag_sort_key(d): def _normalize_engine_identity(resource_id, resource_path): """Normalize section paths to cfn-lint's dotted, resource-free identity.""" + if resource_id: + return resource_id, resource_path for section in _NON_RESOURCE_SECTIONS: if resource_path == section or resource_path.startswith((f"{section}/", f"{section}.")): return "", resource_path.replace("/", ".") return resource_id, resource_path -def _cfnlint_fired_original_rule(diagnostics, rule_id): - return any(diagnostic.get("cfnlint_rule_id") == rule_id for diagnostic in diagnostics) +def _cfnlint_fired_original_rule(diagnostics, rule_id, resource_id=None): + return any( + diagnostic.get("cfnlint_rule_id") == rule_id + and (resource_id is None or diagnostic.get("resource_id", "") == resource_id) + for diagnostic in diagnostics + ) def cfnlint_rule_to_engine(rule_id): @@ -395,9 +661,11 @@ def cfnlint_rule_to_engine(rule_id): return _CFNLINT_TO_ENGINE.get(rule_id, rule_id) -def cfnlint_severity_to_engine(cfnlint_severity, rule_id): - """Translate cfn-lint severity to engine severity.""" - engine_id = cfnlint_rule_to_engine(rule_id) +def cfnlint_severity_to_engine( + cfnlint_severity, rule_id, canonical_rule_id=None +): + """Translate cfn-lint severity to the canonical engine severity.""" + engine_id = canonical_rule_id or cfnlint_rule_to_engine(rule_id) if engine_id.startswith("F"): return "Fatal" if cfnlint_severity.lower() == "error": @@ -409,16 +677,50 @@ def cfnlint_severity_to_engine(cfnlint_severity, rule_id): def load_engine_results(): results = {} + template_paths = {} for f in sorted(ENGINE_REPORTS.glob("*.json")): if f.name.startswith(".") or f.name.startswith("__"): continue try: data = json.loads(f.read_text()) - except (json.JSONDecodeError, UnicodeDecodeError): - continue + except json.JSONDecodeError as exc: + raise ValueError( + f"Engine report JSON decode failure for '{f}': {exc}" + ) from exc + except UnicodeDecodeError as exc: + raise ValueError( + f"Engine report encoding error for '{f}': {exc}" + ) from exc + if not isinstance(data, dict): + raise ValueError( + f"Engine report '{f}' does not contain a JSON object " + f"(got {type(data).__name__})" + ) + raw_diagnostics = data.get("diagnostics") + if not isinstance(raw_diagnostics, list): + raise ValueError( + f"Engine report '{f}' diagnostics are not a JSON list " + f"(got {type(raw_diagnostics).__name__})" + ) key = f.stem + file_path = data.get("filePath", "") + if not isinstance(file_path, str): + raise ValueError( + f"Engine report '{f}' filePath is not a string " + f"(got {type(file_path).__name__})" + ) + template_path = SRC_DIR / "resources" / "templates" / file_path + suppressions = ( + _load_reference_suppressions(template_path) + if file_path and template_path.is_file() + else NO_REFERENCE_SUPPRESSIONS + ) diags = [] - for d in data.get("diagnostics", []): + for index, d in enumerate(raw_diagnostics): + if not isinstance(d, dict): + raise ValueError( + f"Engine report '{f}' diagnostic {index} is not a JSON object" + ) rule_id = d.get("ruleId", "") severity = d.get("severity", "") severity = _ENGINE_SEV_MAP.get(severity, severity) @@ -443,12 +745,16 @@ def load_engine_results(): "resource_type": resource_type, "resource_path": resource_path, "line": d.get("startLine", 0), + "column": d.get("startColumn", 0), "end_line": d.get("endLine", 0), + "end_column": d.get("endColumn", 0), "category": d.get("category", ""), "phase": d.get("phase", ""), + "reference_suppressed": _is_reference_suppressed(rule_id, resource_id, suppressions), }) results[key] = diags - return results + template_paths[key] = file_path + return results, template_paths # ── Comparison ─────────────────────────────────────────────────────────────── @@ -456,6 +762,58 @@ def load_engine_results(): # _RULE_ALIASES is populated by init_rule_origins() from audit_rule_categorization.py +_DIFFERENT_RESOURCE_CAUSE = "Equivalent rule emitted on a different resource/entity" +_DIFFERENT_PATH_CAUSE = "Equivalent rule/resource emitted on a different property path" +_MULTIPLICITY_CAUSE = "Diagnostic count differs after exact identity pairing" + + +def _raw_diagnostic_path(diagnostic): + path = diagnostic.get("resource_path", "") + if not path and not diagnostic.get("resource_id", ""): + path = diagnostic.get("json_path", "") + return path + + +def _strip_condition_branch_traversal(path): + segments = path.split(".") if path else [] + normalized = [] + index = 0 + while index < len(segments): + if ( + segments[index] == "Fn::If" + and index + 1 < len(segments) + and segments[index + 1] in {"1", "2"} + ): + index += 2 + continue + normalized.append(segments[index]) + index += 1 + return ".".join(normalized) + + +def _canonical_match_path(rule_id, path): + # Array indexes are represented as either `.0` or `[0]`; both address the + # same authored list item. + path = re.sub(r"\[(\d+)\]", r".\1", path) + # Condition expansion preserves the effective logical property while the + # reference path may retain one or more authored branch traversals. + path = _strip_condition_branch_traversal(path) + # A terminal Ref is a syntax node for the same logical value. + path = re.sub(r"\.Ref$", "", path) + if rule_id == "I1022": + path = re.sub(r"(\.Fn::Join)\.0$", r"\1", path) + if rule_id == "W2010": + path = re.sub(r"\.Fn::Sub$", "", path) + if rule_id in ("F1018", "W1020"): + path = re.sub(r"\.Fn::Sub$", "", path) + return path + + +def _diagnostic_match_path(diagnostic): + return _canonical_match_path( + diagnostic["rule_id"], _raw_diagnostic_path(diagnostic) + ) + def _match_key(d): """Build match key: (rule_id, resource_id, resource_path) when path available, @@ -472,7 +830,7 @@ def _match_key(d): msg = d.get("message", "") if msg.startswith("Error transforming template:"): return (rule_id, "", msg) - return (rule_id, d["resource_id"], d.get("resource_path", "") or d.get("json_path", "")) + return (rule_id, d["resource_id"], _diagnostic_match_path(d)) def _alias_keys(key): @@ -485,152 +843,712 @@ def _alias_keys(key): return [(a, resource_id, path) for a in sorted(aliases)] +def _rules_equivalent(left, right): + return ( + left == right + or right in _RULE_ALIASES.get(left, set()) + or left in _RULE_ALIASES.get(right, set()) + ) + +_REPRESENTATIONAL = "representational" +_ENGINE_PREFERRED = "engine-preferred" +_NON_COMPARABLE = "non-comparable" + + +def _representational_path_reason(reference_path, engine_path): + if re.search(r"\[\d+\]", reference_path + engine_path): + return "Bracketed and dotted numeric indexes address the same authored list item." + if ".Fn::If." in reference_path or ".Fn::If." in engine_path: + return ( + "The reference retains authored Fn::If branch traversal while the " + "engine reports the effective logical property after condition expansion." + ) + if reference_path.endswith(".Ref") or engine_path.endswith(".Ref"): + return ( + "A terminal Ref syntax node and its containing logical value are the " + "same diagnostic path identity." + ) + return ( + "The paths differ only by a rule-specific intrinsic syntax suffix and " + "normalize to the same logical value." + ) + + +def _explicit_path_classification(expected, actual): + """Classify a non-representational path difference only with rule evidence.""" + if not _rules_equivalent(expected["rule_id"], actual["rule_id"]): + return None + + rule_id = expected["rule_id"] + reference_path = _raw_diagnostic_path(expected) + engine_path = _raw_diagnostic_path(actual) + if reference_path == engine_path: + return None + + if rule_id == "E0001" and expected.get("message", "").startswith( + "Error transforming template:" + ): + return QualityClassification( + _ENGINE_PREFERRED, + "The reference reports a transform failure at template root; the engine retains the generated resource and source property.", + ) + + engine_preferred = { + "E3047": "The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container.", + "E3060": "The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path.", + "E3639": "The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container.", + "E3660": "The engine identifies the exact logical Name property required by the cross-resource contract.", + "E3676": "The engine identifies the exact logical Certificates property required by the listener contract.", + "E3704": "The engine identifies the exact logical TransitEncryptionEnabled property required by the resource contract.", + "E3710": "The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties.", + "I2530": "Runtime is the authored value that triggers the recommendation; the reference points at an absent SnapStart child.", + "I3510": "The source uses NotResource; the reference reports the nonexistent sibling Resource path.", + "W3696": "The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties.", + "W3697": "The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties.", + } + if rule_id in engine_preferred: + return QualityClassification(_ENGINE_PREFERRED, engine_preferred[rule_id]) + if rule_id == "E3001" and not reference_path and engine_path == "Version": + return QualityClassification( + _ENGINE_PREFERRED, + "Version is the exact unsupported authored resource attribute; the reference reports the resource root.", + ) + if ( + rule_id == "E3510" + and reference_path.endswith(".Statement") + and engine_path.endswith(".Sid") + ): + return QualityClassification( + _ENGINE_PREFERRED, + "The engine identifies the duplicate Sid token; the reference reports the containing Statement collection.", + ) + + if rule_id == "E3502" and { + reference_path, + engine_path, + } == {"Properties.FifoQueue", "Properties.RedrivePolicy"}: + return QualityClassification( + _NON_COMPARABLE, + "FifoQueue and RedrivePolicy are the two authored endpoints of the incompatible queue relationship; neither is a unique source anchor.", + ) + if rule_id == "W2533" and { + reference_path, + engine_path, + } == {"Properties.PackageType", "Properties.Code"}: + return QualityClassification( + _NON_COMPARABLE, + "PackageType and Code jointly determine the missing-code condition, so the diagnostic has no unique authored endpoint.", + ) + if rule_id == "F3014" and engine_path == "Properties": + return QualityClassification( + _NON_COMPARABLE, + "The required alternative child is absent; the engine anchors the containing Properties object while the reference names one missing alternative.", + ) + if rule_id in {"E3024", "F3003"} and ( + reference_path.startswith(f"{engine_path}.") + or engine_path.endswith(".{}") + ): + return QualityClassification( + _NON_COMPARABLE, + "Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token.", + ) + return None + + +def _classify_path_difference(expected, actual): + reference_path = _raw_diagnostic_path(expected) + engine_path = _raw_diagnostic_path(actual) + if reference_path == engine_path: + return None + if _diagnostic_match_path(expected) == _diagnostic_match_path(actual): + return QualityClassification( + _REPRESENTATIONAL, + _representational_path_reason(reference_path, engine_path), + ) + return _explicit_path_classification(expected, actual) + + + +def _counterpart_root_cause(diagnostic, counterparts, missing_rule_cause): + equivalent_rule_diagnostics = [ + counterpart + for counterpart in counterparts + if _rules_equivalent( + diagnostic.get("rule_id", ""), counterpart.get("rule_id", "") + ) + ] + if not equivalent_rule_diagnostics: + return missing_rule_cause + + resource_id = diagnostic.get("resource_id", "") + same_resource_diagnostics = [ + counterpart + for counterpart in equivalent_rule_diagnostics + if counterpart.get("resource_id", "") == resource_id + ] + if not same_resource_diagnostics: + return _DIFFERENT_RESOURCE_CAUSE + + diagnostic_path = _diagnostic_match_path(diagnostic) + if not any( + _diagnostic_match_path(counterpart) == diagnostic_path + for counterpart in same_resource_diagnostics + ): + return _DIFFERENT_PATH_CAUSE + + return _MULTIPLICITY_CAUSE + + +def _false_positive_root_cause(diagnostic, reference_diagnostics): + return _counterpart_root_cause( + diagnostic, + reference_diagnostics, + "No equivalent reference rule emitted", + ) + + +def _false_negative_root_cause(diagnostic, engine_diagnostics): + return _counterpart_root_cause( + diagnostic, + engine_diagnostics, + "No equivalent engine rule emitted", + ) + + +def _partition_multiplicity(findings, counterpart_diagnostics, root_cause): + behavioral_mismatches = [] + multiplicity_differences = [] + for diagnostic in findings: + if root_cause(diagnostic, counterpart_diagnostics) == _MULTIPLICITY_CAUSE: + multiplicity_differences.append(diagnostic) + else: + behavioral_mismatches.append(diagnostic) + return behavioral_mismatches, multiplicity_differences + + def _is_engine_extra(d): """Check if a diagnostic is a known engine-extra finding (not a false positive). - Rule-ID-based checks use ENGINE_EXTRA_RULES from audit_rule_categorization. - Message-based checks use the centralized predicate from the same module. + Rule-ID checks and the defensive diagnostic predicate both come from + audit_rule_categorization, which rejects every direct or aliased equivalent. """ - if d["rule_id"] in ENGINE_EXTRA_RULES: + rule_id = d["rule_id"] + if _ENGINE_TO_CFNLINT.get(rule_id): + return False + if rule_id in ENGINE_EXTRA_RULES: return True if _IS_ENGINE_EXTRA_DIAGNOSTIC and _IS_ENGINE_EXTRA_DIAGNOSTIC(d): return True return False +def _is_intentional_divergence(d, reference_diagnostics=()): + """Return whether an unmatched equivalent-rule finding is intentionally stricter. + + Permanent rule-level divergences are explicit. Short-circuit divergences + additionally require evidence that the reference emitted the corresponding + parent/structural rule in the same template (and resource when available). + Equivalent rules never become engine-extra merely because they are unmatched. + """ + rule_id = d.get("rule_id") + resource_type = d.get("resource_type", "") + message = d.get("message", "") + resource_path = d.get("resource_path", "") + + if ( + rule_id == "W9003" + and d.get("phase") == "SCHEMA" + and ( + " - automatically coerced (" in message + or ( + message.startswith("Parameter type '") + and " may not be compatible with expected type '" in message + ) + ) + ): + return True + + if ( + rule_id == "W1019" + and d.get("phase") == "LINT" + and re.fullmatch( + r"Parameter '.+' not used in Fn::Sub template string", + message, + ) + ): + return True + + extension_required_properties = { + "AllocatedStorage", + "Iops", + "ProvisionedThroughput", + "Runtime", + "StorageEncrypted", + "StorageType", + "TransitEncryptionEnabled", + } + extension_required_match = re.fullmatch( + r"'([^']+)' is a required property \(from extension\)", + message, + ) + if ( + rule_id == "F3003" + and d.get("phase") == "SCHEMA" + and extension_required_match + and extension_required_match.group(1) in extension_required_properties + ): + return True + + resource_id = d.get("resource_id", "") or None + + # An invalid nested condition can cause the reference to stop validating + # that branch. Require its structural condition finding in the same resource. + if rule_id == "F3002": + return _cfnlint_fired_original_rule( + reference_diagnostics, "E1028", resource_id + ) + + # The engine reports each undefined/malformed nested condition while the + # reference may stop after its first structural finding. + if rule_id == "E1028": + return _cfnlint_fired_original_rule( + reference_diagnostics, "E1028", resource_id + ) + + # The reference's basic-resource rule parents these more precise engine + # findings. Treat them as divergence only when that parent actually fired. + if rule_id in ("F0006", "E5001", "F6004"): + return _cfnlint_fired_original_rule( + reference_diagnostics, "E3001", resource_id + ) + + if rule_id == "I3011": + lifecycle_requirement = message.startswith(( + "'DeletionPolicy' is a required property", + "'UpdateReplacePolicy' is a required property", + )) + return resource_type in _STATEFUL_SAM_RESOURCE_TYPES and lifecycle_requirement + + if rule_id == "E3510": + forbidden_policy_id = ( + resource_type in _IDENTITY_POLICY_RESOURCE_TYPES + and resource_path.endswith(".Id") + and message == _FORBIDDEN_IDENTITY_POLICY_ID_MESSAGE + ) + concrete_document_list = ( + resource_type in _IDENTITY_POLICY_RESOURCE_TYPES + and resource_path.endswith("PolicyDocument") + and message.startswith("[") + and message.endswith("] is not of type 'object'") + ) + return forbidden_policy_id or concrete_document_list + + return False + + +def _is_reference_suppressed_for_comparison(d): + """Return whether a comparable finding is disabled in the reference config. + + Reference suppression precedes engine-extra classification: a suppressed + finding is RS regardless of whether it would also be engine-extra. + """ + return bool(d.get("reference_suppressed")) + + +def _is_reference_incorrect(canonical_path, d): + """Return whether a cfn-lint finding is demonstrably incorrect. + + These are cfn-lint findings that contradict CloudFormation's actual behavior. + Exactly eight known Fargate RI cases. + """ + rule_id = d.get("rule_id", "") + resource_id = d.get("resource_id", "") + key = (canonical_path, rule_id) + if key not in _REFERENCE_INCORRECT_CASES: + return False + allowed_resources = _REFERENCE_INCORRECT_RESOURCES.get(key, frozenset()) + return resource_id in allowed_resources + + +def _end_column_convention_is_equivalent(exp, act): + """Return whether only the endpoint coordinate convention differs. + + cfn-lint exposes a half-open end column while the engine reports the final + occupied column. A reference endpoint exactly one column after the engine + endpoint therefore denotes the same source range when the end line agrees. + """ + reference_line = exp.get("end_line", 0) + engine_line = act.get("end_line", 0) + reference_column = exp.get("end_column", 0) + engine_column = act.get("end_column", 0) + return ( + bool(reference_line and engine_line and reference_column and engine_column) + and reference_line == engine_line + and reference_column == engine_column + 1 + ) + + +def _describe_span_difference(exp, act, normalize_endpoint): + fields = ( + ("line", "line"), + ("column", "col"), + ("end_line", "end_line"), + ("end_column", "end_col"), + ) + diffs = [] + equivalent_end_column = ( + normalize_endpoint and _end_column_convention_is_equivalent(exp, act) + ) + for field, label in fields: + if field == "end_column" and equivalent_end_column: + continue + reference_value = exp.get(field, 0) + engine_value = act.get(field, 0) + if reference_value != engine_value: + displayed_reference = reference_value or "missing" + displayed_engine = engine_value or "missing" + diffs.append( + f"{label} {displayed_reference}→{displayed_engine}" + ) + return ", ".join(diffs) if diffs else None + + +def _raw_span_diverges(exp, act): + return _describe_span_difference(exp, act, normalize_endpoint=False) + + +def _span_diverges(exp, act): + """Return unresolved span coordinates after endpoint normalization.""" + return _describe_span_difference(exp, act, normalize_endpoint=True) + + +def _classify_span_difference(expected, actual, path_classification=None): + """Classify a raw source-span difference only when its semantics are proven.""" + raw_difference = _raw_span_diverges(expected, actual) + if not raw_difference: + return None + if _span_diverges(expected, actual) is None: + return QualityClassification( + _REPRESENTATIONAL, + "The reference uses a half-open end column while the engine reports the final occupied column.", + ) + + rule_id = expected.get("rule_id", "") + if ( + rule_id == "F0000" + and expected.get("line") == actual.get("line") + and expected.get("column") == actual.get("column") + and expected.get("end_line") == actual.get("end_line") + and abs(expected.get("end_column", 0) - actual.get("end_column", 0)) == 1 + ): + return QualityClassification( + _REPRESENTATIONAL, + "The two JSON duplicate-key scanners include opposite quote boundaries for the same key token.", + ) + + if path_classification: + if path_classification.kind == _NON_COMPARABLE: + return QualityClassification( + _NON_COMPARABLE, + "The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable.", + ) + if path_classification.kind == _REPRESENTATIONAL: + reference_path = _raw_diagnostic_path(expected) + engine_path = _raw_diagnostic_path(actual) + if ".Fn::If." in reference_path or ".Fn::If." in engine_path: + return QualityClassification( + _NON_COMPARABLE, + "The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion.", + ) + if rule_id == "I1022": + return QualityClassification( + _NON_COMPARABLE, + "The reference anchors the empty delimiter operand while the engine anchors the containing Join expression.", + ) + if path_classification.kind == _ENGINE_PREFERRED: + if rule_id in {"E3639", "E3660", "E3676", "E3704"}: + return QualityClassification( + _NON_COMPARABLE, + "The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container.", + ) + return QualityClassification( + _ENGINE_PREFERRED, + "The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor.", + ) + + if rule_id == "F0001": + return QualityClassification( + _NON_COMPARABLE, + "The required top-level section is absent, so there is no authored child token; whole-document and missing-location fallbacks are not equivalent ranges.", + ) + if rule_id == "F3003" or "is a required property" in expected.get("message", ""): + return QualityClassification( + _NON_COMPARABLE, + "A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable.", + ) + if rule_id == "W8001": + return QualityClassification( + _NON_COMPARABLE, + "Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one.", + ) + if rule_id in {"E3510", "E3687", "E3702", "F0013"}: + return QualityClassification( + _NON_COMPARABLE, + "The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token.", + ) + engine_preferred_source_reasons = { + "E1011": "The engine points at the exact invalid Base64 operand; the reference starts at the containing intrinsic.", + "E1017": "The engine points at the exact invalid Select list operand; the reference starts at the containing expression.", + "E1040": "The engine points at the exact value with the incompatible list context; the reference starts at the containing intrinsic.", + "E3023": "The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression.", + "F1020": "The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property.", + "I3042": "The engine points at the exact Sub scalar that uses a fixed partition; the reference points at the containing property key.", + "W1001": "The engine points at the exact relationship-condition operand; the reference reports the containing expression.", + "W1028": "The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression.", + "E3019": "The primary-identifier finding is caused by the authored property value; the engine points at that intrinsic value while the reference points at its key.", + "E3022": "The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key.", + "E9006": "The unsupported engine-version finding is caused by the authored EngineVersion value; the engine points at that value rather than its key.", + "F0018": "The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint.", + "F3016": "The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint.", + "F3020": "The invalid availability-zone finding is caused by the authored AvailabilityZone value; the engine points at the intrinsic value rather than its key.", + "F6101": "The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member.", + "I3100": "The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key.", + "W1011": "The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key.", + "W2010": "The engine points at the referenced parameter operand inside metadata; the reference starts at the surrounding Ref syntax.", + "W2531": "The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key.", + } + if rule_id in engine_preferred_source_reasons: + return QualityClassification( + _ENGINE_PREFERRED, + engine_preferred_source_reasons[rule_id], + ) + if rule_id == "W3011": + return QualityClassification( + _NON_COMPARABLE, + "The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token.", + ) + if rule_id == "W8003": + return QualityClassification( + _NON_COMPARABLE, + "The transform-wide lifecycle finding is derived from expanded resource state, so the transform source and generated resource anchors are not one-to-one.", + ) + return None + + +def _severity_diverges(exp, act): + """Return whether a matched pair has a severity difference.""" + exp_sev = exp.get("severity", "") + act_sev = act.get("severity", "") + if not exp_sev or not act_sev: + return False + return exp_sev != act_sev + + +def _path_diverges(expected, actual): + """Return raw reference/engine paths when a matched pair differs.""" + reference_path = _raw_diagnostic_path(expected) + engine_path = _raw_diagnostic_path(actual) + if reference_path == engine_path: + return None + return reference_path, engine_path + + +def _remaining_pair_score(expected, actual): + """Rank partners within a proven remaining identity class.""" + expected_line = expected.get("line", 0) + actual_line = actual.get("line", 0) + has_comparable_lines = bool(expected_line and actual_line) + line_distance = ( + abs(expected_line - actual_line) if has_comparable_lines else 0 + ) + expected_path = _diagnostic_match_path(expected) + actual_path = _diagnostic_match_path(actual) + common_prefix_length = len(os.path.commonprefix((expected_path, actual_path))) + return ( + expected.get("message", "") != actual.get("message", ""), + not has_comparable_lines, + line_distance, + -common_prefix_length, + abs(len(expected_path) - len(actual_path)), + _diag_sort_key(actual), + ) + + +def _collect_match_mismatches(matched): + """Collect quality differences without changing match scoring.""" + mismatches = [] + for expected, actual in matched: + path_mismatch = _path_diverges(expected, actual) + span_description = _raw_span_diverges(expected, actual) + severity_mismatch = _severity_diverges(expected, actual) + location_mismatch = _location_diverges(expected, actual) + if path_mismatch or span_description or severity_mismatch: + mismatches.append(( + expected, + actual, + path_mismatch, + span_description, + severity_mismatch, + location_mismatch, + )) + return mismatches + + def _location_diverges(exp, act): - """True when a matched pair reports the SAME finding on the SAME property at - a different start line - a genuine per-property anchoring bug. - - Scoped deliberately to same-property pairs (equal, non-empty resource_id and - resource_path). Structural / transform findings (E0001, E1001, W3005, …) that - the reference anchors at the template or resource root while the engine - anchors more precisely at the offending node carry no property path; those - are an intentional precision improvement, not a data-source divergence, so - they are excluded rather than flooding the report.""" + """Return whether a matched occurrence starts on different source lines.""" exp_line = exp.get("line", 0) act_line = act.get("line", 0) if not exp_line or not act_line or exp_line == act_line: return False exp_rid = exp.get("resource_id", "") act_rid = act.get("resource_id", "") - if not exp_rid or exp_rid != act_rid: + if exp_rid != act_rid and exp.get("rule_id") != "E0001": return False - exp_path = exp.get("resource_path", "") - act_path = act.get("resource_path", "") - return bool(exp_path) and exp_path == act_path + return True def compare_template(cfnlint_diags, engine_diags): - """Returns (matched, false_positives, false_negatives). - Two-pass matching: first by (rule_id, resource_id, path), then by (rule_id, resource_id) - for any remaining unmatched diagnostics. Supports alias matching for rules like - F3012/W9003 where cfn-lint uses one ID and the engine may use either.""" - # Build multisets keyed by (rule_id, resource_id, path) + """Return matched diagnostics, false positives, and false negatives. + + Exact normalized rule/resource/property-path identities pair first. Remaining + SAM-generated logical IDs pair only when their canonical property paths also + match. A final pair is allowed only when an explicit quality classifier proves + an engine-preferred or non-comparable alternative anchor. Arbitrary findings + with merely the same rule and resource remain unmatched. + """ expected_full = defaultdict(list) - for d in cfnlint_diags: - expected_full[_match_key(d)].append(d) + for diagnostic in cfnlint_diags: + expected_full[_match_key(diagnostic)].append(diagnostic) actual_full = defaultdict(list) - for d in engine_diags: - actual_full[_match_key(d)].append(d) - - matched, remaining_exp, remaining_act = [], [], [] - - # Pass 1: exact (rule_id, resource_id, path) matching with alias support - matched_exp_keys = set() - for key in sorted(expected_full.keys()): - exp = expected_full[key] - # Try the key itself and all aliases - act = actual_full.get(key, []) - if not act: - for alias_key in _alias_keys(key): - act = actual_full.get(alias_key, []) - if act: - key = alias_key - break - n = min(len(exp), len(act)) - matched.extend((exp[i], act[i]) for i in range(n)) - remaining_exp.extend(exp[n:]) - if n < len(act): - actual_full[key] = act[n:] - elif act: - actual_full[key] = [] - matched_exp_keys.add(key) - - # Collect unmatched engine diagnostics - for key, act_list in actual_full.items(): - if act_list: - remaining_act.extend(act_list) - remaining_act.sort(key=_diag_sort_key) - - # Pass 2: fallback (rule_id, resource_id) matching for remaining - exp_by_rr = defaultdict(list) - for d in remaining_exp: - exp_by_rr[(d["rule_id"], d["resource_id"])].append(d) - act_by_rr = defaultdict(list) - for d in remaining_act: - act_by_rr[(d["rule_id"], d["resource_id"])].append(d) - - fp, fn = [], [] - consumed_act = set() - for key in sorted(exp_by_rr.keys()): - exp = exp_by_rr[key] - # Try direct match and aliases - act = [a for a in act_by_rr.get(key, []) if id(a) not in consumed_act] - if not act: - rule_id, resource_id = key - for alias in sorted(_RULE_ALIASES.get(rule_id, set())): - act = [a for a in act_by_rr.get((alias, resource_id), []) if id(a) not in consumed_act] - if act: + for diagnostic in engine_diags: + actual_full[_match_key(diagnostic)].append(diagnostic) + + matched = [] + remaining_expected = [] + + # Pass 1: exact canonical identity, including rule aliases. + for expected_key in sorted(expected_full): + expected_diagnostics = sorted(expected_full[expected_key], key=_diag_sort_key) + actual_key = expected_key + actual_diagnostics = sorted(actual_full.get(actual_key, []), key=_diag_sort_key) + if not actual_diagnostics: + for alias_key in _alias_keys(expected_key): + alias_diagnostics = sorted(actual_full.get(alias_key, []), key=_diag_sort_key) + if alias_diagnostics: + actual_key = alias_key + actual_diagnostics = alias_diagnostics break - n = min(len(exp), len(act)) - matched.extend((exp[i], act[i]) for i in range(n)) - for i in range(n): - consumed_act.add(id(act[i])) - fn.extend(exp[n:]) - - # Pass 3: cfn-lint's SAM transform renames generated resources with a - # 10-hex-digit hash suffix (`Layer` -> `Layer7f955f606e`); the engine keeps - # the template's logical ID. Pair remaining same-rule findings that differ - # only by that suffix. - def _sam_id_match(exp_id, act_id): - if not exp_id or not act_id or exp_id == act_id: + pair_count = min(len(expected_diagnostics), len(actual_diagnostics)) + matched.extend( + (expected_diagnostics[index], actual_diagnostics[index]) + for index in range(pair_count) + ) + remaining_expected.extend(expected_diagnostics[pair_count:]) + if actual_diagnostics: + actual_full[actual_key] = actual_diagnostics[pair_count:] + + remaining_actual = sorted( + ( + diagnostic + for diagnostics in actual_full.values() + for diagnostic in diagnostics + ), + key=_diag_sort_key, + ) + + def pair_remaining(expected_diagnostics, actual_diagnostics, compatible): + pairs = [] + unmatched_expected = [] + consumed_actual_indexes = set() + for expected in sorted(expected_diagnostics, key=_diag_sort_key): + candidates = [ + (index, actual) + for index, actual in enumerate(actual_diagnostics) + if index not in consumed_actual_indexes + and compatible(expected, actual) + ] + if not candidates: + unmatched_expected.append(expected) + continue + partner_index, partner = min( + candidates, + key=lambda candidate: ( + _remaining_pair_score(expected, candidate[1]), candidate[0] + ), + ) + pairs.append((expected, partner)) + consumed_actual_indexes.add(partner_index) + unmatched_actual = [ + actual + for index, actual in enumerate(actual_diagnostics) + if index not in consumed_actual_indexes + ] + return pairs, unmatched_expected, unmatched_actual + + def sam_id_matches(expected_id, actual_id): + if not expected_id or not actual_id or expected_id == actual_id: return False - long_id, short_id = (exp_id, act_id) if len(exp_id) > len(act_id) else (act_id, exp_id) + long_id, short_id = ( + (expected_id, actual_id) + if len(expected_id) > len(actual_id) + else (actual_id, expected_id) + ) suffix = long_id[len(short_id):] - return (long_id.startswith(short_id) and len(suffix) == 10 - and all(c in "0123456789abcdef" for c in suffix)) + return ( + long_id.startswith(short_id) + and len(suffix) == 10 + and all(character in "0123456789abcdef" for character in suffix) + ) - def _strip_hash_suffix(message): + def strip_hash_suffix(message): return re.sub(r"\[(\w+?)[0-9a-f]{10}\]", r"[\1]", message) - def _sam_renamed_match(d, a): - if a["rule_id"] != d["rule_id"]: + def sam_renamed_matches(expected, actual): + if not _rules_equivalent(expected["rule_id"], actual["rule_id"]): return False - if _sam_id_match(d.get("resource_id", ""), a.get("resource_id", "")): + if ( + expected["rule_id"] == "E0001" + and actual["rule_id"] == "E0001" + and strip_hash_suffix(expected.get("message", "")) + == strip_hash_suffix(actual.get("message", "")) + ): return True - # Transform errors carry the resource ID only in the message. - return (d["rule_id"] == "E0001" - and _strip_hash_suffix(d.get("message", "")) == _strip_hash_suffix(a.get("message", ""))) - - still_fn = [] - for d in fn: - partner = next( - (a for a in remaining_act if id(a) not in consumed_act and _sam_renamed_match(d, a)), - None, + return ( + sam_id_matches( + expected.get("resource_id", ""), actual.get("resource_id", "") + ) + and _diagnostic_match_path(expected) == _diagnostic_match_path(actual) ) - if partner is not None: - matched.append((d, partner)) - consumed_act.add(id(partner)) - else: - still_fn.append(d) - fn = still_fn - for d in remaining_act: - if id(d) not in consumed_act: - fp.append(d) + # Pass 2: equivalent SAM-generated resources with the same canonical path. + sam_pairs, false_negatives, false_positives = pair_remaining( + remaining_expected, + remaining_actual, + sam_renamed_matches, + ) + matched.extend(sam_pairs) + + def classified_path_occurrence(expected, actual): + expected_resource = expected.get("resource_id", "") + return ( + bool(expected_resource) + and expected_resource == actual.get("resource_id", "") + and _rules_equivalent(expected["rule_id"], actual["rule_id"]) + and _explicit_path_classification(expected, actual) is not None + ) - return matched, fp, fn + # Pass 3: a non-representational path difference pairs only when an explicit + # evidence classifier proves a more precise or genuinely alternative anchor. + # Unrelated same-rule/resource paths remain FP/FN instead of becoming false + # path mismatches. + classified_pairs, false_negatives, false_positives = pair_remaining( + false_negatives, + false_positives, + classified_path_occurrence, + ) + matched.extend(classified_pairs) + + return matched, false_positives, false_negatives # ── Report ─────────────────────────────────────────────────────────────────── @@ -656,7 +1574,7 @@ def fmt_diag(d, template): loc += f"-{d['end_line']}" parts.append(loc) parts.append(f"in `{template}`") - msg = d["message"][:200] + msg = d["message"][:200].rstrip() return f"- {' '.join(parts)}\n > {msg}" @@ -675,7 +1593,7 @@ def compute_template_coverage(cfnlint_all, engine_all): def run_single(): cfnlint_all = {**load_cfnlint_inline_results(), **load_cfnlint_results_from_files()} - engine_all = load_engine_results() + engine_all, engine_template_paths = load_engine_results() # Sort diagnostics within each template for deterministic comparison/output for key in cfnlint_all: @@ -684,67 +1602,186 @@ def run_single(): engine_all[key] = sorted(engine_all[key], key=_diag_sort_key) matched_keys, cfnlint_only, engine_only = compute_template_coverage(cfnlint_all, engine_all) + if not matched_keys: + raise RuntimeError( + "no comparable templates found between cfn-lint and engine outputs " + f"({len(cfnlint_only)} cfn-lint-only, {len(engine_only)} engine-only)" + ) # Aggregate per-template comparison - total_tp = total_fp = total_fn = total_ee = 0 + total_tp = total_fp = total_fn = total_ee = total_intentional_divergence = total_reference_suppressed = 0 + total_ri = total_multiplicity = total_reference_out_of_scope = 0 perfect_templates = 0 - # per-template: key -> {"tp": int, "fp": [...], "ee": [...], "fn": [...]} + # per-template: key -> {"tp": int, "fp": [...], "id": [...], "ee": [...], "fn": [...], "rs": [...], "ri": [...]} tpl_stats = {} # rule_id -> { "severity", "description", "source_url", - # "tp": [...], "fp": [...], "ee": [...], "fn": [...] } + # "tp": [...], "fp": [...], "id": [...], "ee": [...], "fn": [...], "ri": [...] } rules = defaultdict(lambda: {"severity": "", "description": "", "source_url": "", - "tp": [], "fp": [], "ee": [], "fn": []}) + "tp": [], "fp": [], "id": [], "ee": [], "fn": [], "ri": []}) - # Matched-pair divergence the (rule_id, resource_id, path) key cannot see: - # a pair whose start line differs is a wrong-location divergence - the - # diagnostic fired but not where it should. Severity and message are NOT - # compared: the engine deliberately re-severities some split rules and is - # free to word diagnostics differently, so neither is a defect. + # Paired quality differences remain true positives. Proven representational, + # engine-preferred, and non-comparable differences are rendered separately; + # only unclassified differences remain mismatch debt. + path_mismatches = [] # (key, exp, act, reference_path, engine_path) location_mismatches = [] # (key, exp, act) + span_mismatches = [] # (key, exp, act, description) + severity_mismatches = [] # (key, exp, act) + classified_paths = defaultdict(list) # kind -> (key, exp, act, paths, classification) + classified_spans = defaultdict(list) # kind -> (key, exp, act, description, classification) + multiplicity_differences = [] # (template key, side, diagnostic) + reference_suppressed_findings = [] # (template key, diagnostic) + reference_out_of_scope_findings = [] # (template key, diagnostic) + false_positive_causes = defaultdict(lambda: {"count": 0, "rules": set()}) + false_negative_causes = defaultdict(lambda: {"count": 0, "rules": set()}) for key in matched_keys: - m, fp_all, fn = compare_template(cfnlint_all[key], engine_all[key]) - # If cfn-lint reported a parse error (F0000/E0000), it stopped further - # validation. Engine findings beyond what cfn-lint reports are engine-extra. - cfnlint_has_parse_error = any( - d.get("rule_id") == "F0000" for d in cfnlint_all[key] + # Reference suppression precedes engine-extra classification + reference_suppressed = [ + d for d in engine_all[key] if _is_reference_suppressed_for_comparison(d) + ] + comparable_engine = [ + d for d in engine_all[key] if not _is_reference_suppressed_for_comparison(d) + ] + + # The flattened report key cannot recover underscores versus path + # separators, so retain the canonical path from the validated report load. + canonical_path = engine_template_paths[key] + + # Keep explicitly out-of-scope reference diagnostics visible while + # excluding them from candidate pairing and recall. + reference_out_of_scope = [ + d for d in cfnlint_all[key] if d.get("comparison_excluded_reason") + ] + cfnlint_scoped = [ + d for d in cfnlint_all[key] if not d.get("comparison_excluded_reason") + ] + + # Separate RI (Reference Incorrect) from real FN before comparison. + cfnlint_valid = [] + ri_findings = [] + for d in cfnlint_scoped: + if canonical_path and _is_reference_incorrect(canonical_path, d): + ri_findings.append(d) + else: + cfnlint_valid.append(d) + + candidate_matches, fp_all, fn = compare_template( + cfnlint_valid, comparable_engine ) - # E1028: the engine reports every undefined Fn::If condition; cfn-lint - # short-circuits nested chains and skips branches under parent schema - # failures. Unmatched engine E1028 is engine-extra only when cfn-lint - # fired E1028 on this template or quotes the same condition; else FP. - cfnlint_fired_e1028 = _cfnlint_fired_original_rule(cfnlint_all[key], "E1028") - - def _cfnlint_saw_condition(engine_diag): - m = re.search(r"Fn::If condition '([^']+)'", engine_diag.get("message", "")) - if not m: - return False - name = m.group(1) - return any( - "Fn::If" in d.get("message", "") and name in d.get("message", "") - for d in cfnlint_all[key] - ) + fp_all, engine_multiplicity = _partition_multiplicity( + fp_all, + cfnlint_valid, + _false_positive_root_cause, + ) + fn, reference_multiplicity = _partition_multiplicity( + fn, + comparable_engine, + _false_negative_root_cause, + ) + template_multiplicity = [ + *(('engine', diagnostic) for diagnostic in engine_multiplicity), + *(('reference', diagnostic) for diagnostic in reference_multiplicity), + ] + multiplicity_differences.extend( + (key, side, diagnostic) + for side, diagnostic in template_multiplicity + ) + m = candidate_matches + match_mismatches = _collect_match_mismatches(candidate_matches) + for ( + expected, + actual, + path_difference, + raw_span_description, + severity_mismatch, + location_mismatch, + ) in match_mismatches: + path_classification = None + if path_difference: + reference_path, engine_path = path_difference + path_classification = _classify_path_difference(expected, actual) + if path_classification: + classified_paths[path_classification.kind].append(( + key, + expected, + actual, + reference_path, + engine_path, + path_classification, + )) + else: + path_mismatches.append(( + key, expected, actual, reference_path, engine_path + )) + + span_classification = None + if raw_span_description: + span_classification = _classify_span_difference( + expected, actual, path_classification + ) + if span_classification: + classified_spans[span_classification.kind].append(( + key, + expected, + actual, + raw_span_description, + span_classification, + )) + else: + span_mismatches.append(( + key, expected, actual, raw_span_description + )) + if severity_mismatch: + severity_mismatches.append((key, expected, actual)) + if location_mismatch and span_classification is None: + location_mismatches.append((key, expected, actual)) + + fp = [] + intentional_divergences = [] + ee = [] + for diagnostic in fp_all: + # Intentional divergence precedes engine-extra classification. + if _is_intentional_divergence(diagnostic, cfnlint_valid): + intentional_divergences.append(diagnostic) + elif _is_engine_extra(diagnostic): + ee.append(diagnostic) + else: + fp.append(diagnostic) - def _extra(d): - if _is_engine_extra(d) or cfnlint_has_parse_error: - return True - if d.get("rule_id") != "E1028": - return False - return cfnlint_fired_e1028 or _cfnlint_saw_condition(d) + for diagnostic in fp: + cause = _false_positive_root_cause(diagnostic, cfnlint_valid) + false_positive_causes[cause]["count"] += 1 + false_positive_causes[cause]["rules"].add(diagnostic["rule_id"]) + for diagnostic in fn: + cause = _false_negative_root_cause(diagnostic, engine_all[key]) + false_negative_causes[cause]["count"] += 1 + false_negative_causes[cause]["rules"].add(diagnostic["rule_id"]) - fp = [d for d in fp_all if not _extra(d)] - ee = [d for d in fp_all if _extra(d)] total_tp += len(m) total_fp += len(fp) + total_intentional_divergence += len(intentional_divergences) total_ee += len(ee) total_fn += len(fn) - if not fp and not fn: + total_ri += len(ri_findings) + total_multiplicity += len(template_multiplicity) + total_reference_suppressed += len(reference_suppressed) + total_reference_out_of_scope += len(reference_out_of_scope) + reference_suppressed_findings.extend((key, d) for d in reference_suppressed) + reference_out_of_scope_findings.extend( + (key, d) for d in reference_out_of_scope + ) + if not fp and not fn and not match_mismatches and not template_multiplicity: perfect_templates += 1 tpl_stats[key] = { "tp": len(m), "fp": [(d["rule_id"], d) for d in fp], + "id": [(d["rule_id"], d) for d in intentional_divergences], "ee": [(d["rule_id"], d) for d in ee], "fn": [(d["rule_id"], d) for d in fn], + "multiplicity": template_multiplicity, + "rs": [(d["rule_id"], d) for d in reference_suppressed], + "oos": [(d["rule_id"], d) for d in reference_out_of_scope], + "ri": [(d["rule_id"], d) for d in ri_findings], } for exp, act in m: rid = exp["rule_id"] @@ -752,15 +1789,14 @@ def _extra(d): rules[rid]["severity"] = rules[rid]["severity"] or exp["severity"] rules[rid]["description"] = rules[rid]["description"] or exp.get("rule_description", "") rules[rid]["source_url"] = rules[rid]["source_url"] or exp.get("rule_source", "") - # A matched pair still diverges if the engine reports it at a - # different line even though the (rule_id, resource_id, path) key - # lined up. - if _location_diverges(exp, act): - location_mismatches.append((key, exp, act)) for d in fp: rid = d["rule_id"] rules[rid]["fp"].append((key, d)) rules[rid]["severity"] = rules[rid]["severity"] or d["severity"] + for d in intentional_divergences: + rid = d["rule_id"] + rules[rid]["id"].append((key, d)) + rules[rid]["severity"] = rules[rid]["severity"] or d["severity"] for d in ee: rid = d["rule_id"] rules[rid]["ee"].append((key, d)) @@ -771,8 +1807,14 @@ def _extra(d): rules[rid]["severity"] = rules[rid]["severity"] or d["severity"] rules[rid]["description"] = rules[rid]["description"] or d.get("rule_description", "") rules[rid]["source_url"] = rules[rid]["source_url"] or d.get("rule_source", "") + for d in ri_findings: + rid = d["rule_id"] + rules[rid]["ri"].append((key, d)) + rules[rid]["severity"] = rules[rid]["severity"] or d["severity"] + rules[rid]["description"] = rules[rid]["description"] or d.get("rule_description", "") precision = total_tp / (total_tp + total_fp) * 100 if (total_tp + total_fp) else 0 + # RI excluded from recall denominator: incorrect reference findings are not real misses recall = total_tp / (total_tp + total_fn) * 100 if (total_tp + total_fn) else 0 f1 = 2 * precision * recall / (precision + recall) if (precision + recall) else 0 @@ -782,11 +1824,12 @@ def _extra(d): # ── Header ─────────────────────────────────────────────────────────── w("# cloudformation-validate vs cfn-lint - Parity Report") w("") - w(f"> Generated: {datetime.now().strftime('%Y-%m-%d %H:%M:%S')} ") - w(f"> Engine: **{ENGINE_NAME}** ") - w(f"> Detail level: **{OUTPUT_FORMAT}** ") - w(f"> Matching: `(rule_id, resource_id, path)` two-pass with `(rule_id, resource_id)` fallback + aliases ") - w(f"> Templates compared: **{len(matched_keys)}** ") + w(f"> Engine: **{ENGINE_NAME}**") + w(f"> Detail level: **{OUTPUT_FORMAT}**") + w("> Candidate pairing: exact normalized anchors first, then same-path SAM " + "logical-ID equivalents, then only explicitly classified alternative anchors. " + "Arbitrary same-rule/resource paths remain unmatched") + w(f"> Templates compared: **{len(matched_keys)}**") w("") # ── Glossary ───────────────────────────────────────────────────────── @@ -794,50 +1837,76 @@ def _extra(d): w("") w("| Term | Meaning |") w("|------|---------|") - w("| **TP** (True Positive) | Engine and cfn-lint agree - correct finding |") + w("| **TP** (True Positive) | Engine and cfn-lint emit the same canonical rule/resource/property-path occurrence, or an explicitly proven transform-error identity; severity and span differences remain separately reported |") w("| **FP** (False Positive) | Engine reports it, cfn-lint doesn't - noise or engine bug |") - w("| **EE** (Engine Extra) | Correct engine finding that cfn-lint does not cover |") + w("| **ID** (Intentional Divergence) | Evidence-backed correct finding for an equivalent rule where cfn-lint misses this case |") + w("| **EE** (Engine Extra) | Correct engine finding for a check with no cfn-lint equivalent |") + w("| **RS** (Reference Suppressed) | Engine finding explicitly disabled by template-local cfn-lint configuration; excluded from parity scoring |") + w("| **OOS** (Reference Out of Scope) | Reference finding for an explicitly documented non-comparable check; rendered but excluded from recall |") + w("| **RI** (Reference Incorrect) | cfn-lint finding demonstrably wrong per CloudFormation behavior; excluded from FN and recall |") + w("| **Multiplicity** | Both tools report the same identity but emit a different number of diagnostics; excluded from FP/FN |") + w("| **Representational equivalence** | Different path or endpoint notation proven to identify the same logical node/range |") + w("| **Engine-preferred** | Authored-source evidence shows the engine anchor is more precise or the reference anchor is incorrect |") + w("| **Non-comparable** | Missing, generated, conditional, or multi-endpoint constructs have no single source token shared by both representations |") w("| **FN** (False Negative) | cfn-lint expects it, engine misses it - gap in coverage |") - w("| **Precision** | TP/(TP+FP) - excludes Engine Extra from noise count |") - w("| **Recall** | TP/(TP+FN) - how much of what cfn-lint expects the engine catches |") + w("| **Precision** | TP/(TP+FP) - excludes Intentional Divergence and Engine Extra from noise count |") + w("| **Recall** | TP/(TP+FN) - excludes RI from denominator; how much of what cfn-lint correctly expects the engine catches |") w("| **F1** | Harmonic mean of Precision and Recall - single quality score |") w("") # ── Summary ────────────────────────────────────────────────────────── w("## Summary") w("") - w("| Metric | Value |") - w("|--------|------:|") - w(f"| True Positives | {total_tp} |") - w(f"| False Positives (engine bugs) | {total_fp} |") - w(f"| Engine Extra (correct, cfn-lint gap) | {total_ee} |") - w(f"| False Negatives (engine misses) | {total_fn} |") - w(f"| Precision | {precision:.2f}% |") - w(f"| Recall | {recall:.2f}% |") - w(f"| F1 | {f1:.2f}% |") - w(f"| Unique rules detected | {len(rules)} |") - w(f"| Perfect templates | {perfect_templates}/{len(matched_keys)} |") - w(f"| Location mismatches (matched pairs) | {len(location_mismatches)} |") + w("Counts are diagnostic occurrences unless the row explicitly says templates, rules, or a percentage.") + w("") + w("| Population or calculation | Value |") + w("|---------------------------|------:|") + w(f"| Findings paired as the same occurrence (TP) | {total_tp} |") + w(f"| Unmatched comparable findings emitted only by the engine (FP) | {total_fp} |") + w(f"| Correct unmatched engine findings for rules with a reference equivalent (ID) | {total_intentional_divergence} |") + w(f"| Correct engine findings for rules with no reference equivalent (EE) | {total_ee} |") + w(f"| Engine findings disabled by template reference configuration; excluded from scoring (RS) | {total_reference_suppressed} |") + w(f"| Reference findings from checks outside comparison scope; excluded from scoring (OOS) | {total_reference_out_of_scope} |") + w(f"| Demonstrably incorrect reference findings; excluded from recall (RI) | {total_ri} |") + w(f"| Unpaired duplicate occurrences of an otherwise matched identity; excluded from FP/FN (Multiplicity) | {total_multiplicity} |") + w(f"| Unmatched comparable findings emitted only by the reference (FN) | {total_fn} |") + w(f"| Precision: TP / (TP + FP) | {precision:.2f}% |") + w(f"| Recall: TP / (TP + FN) | {recall:.2f}% |") + w(f"| F1: harmonic mean of precision and recall | {f1:.2f}% |") + w(f"| Canonical rule IDs represented in TP/FP/ID/EE/FN/RI populations | {len(rules)} |") + w(f"| Templates with no FP, FN, multiplicity, or matched path/span/severity difference | {perfect_templates}/{len(matched_keys)} |") + w(f"| Matched occurrences with notation-only path differences (representational) | {len(classified_paths[_REPRESENTATIONAL])} |") + w(f"| Matched occurrences where the engine path is more precise or correct | {len(classified_paths[_ENGINE_PREFERRED])} |") + w(f"| Matched occurrences with no unique shared path anchor | {len(classified_paths[_NON_COMPARABLE])} |") + w(f"| Matched occurrences with endpoint-notation-only span differences (representational) | {len(classified_spans[_REPRESENTATIONAL])} |") + w(f"| Matched occurrences where the engine source span is more precise or correct | {len(classified_spans[_ENGINE_PREFERRED])} |") + w(f"| Matched occurrences with no uniquely comparable source span | {len(classified_spans[_NON_COMPARABLE])} |") + w(f"| Paired occurrences with an unclassified path difference (unresolved) | {len(path_mismatches)} |") + w(f"| Paired occurrences with an unclassified start-line difference (unresolved) | {len(location_mismatches)} |") + w(f"| Paired occurrences with an unclassified full-span difference (unresolved) | {len(span_mismatches)} |") + w(f"| Matched occurrences with different severities | {len(severity_mismatches)} |") w("") # ── Per-severity summary ───────────────────────────────────────────── - sev_stats = defaultdict(lambda: [0, 0, 0, 0]) # tp, fp, fn, ee + sev_stats = defaultdict(lambda: [0, 0, 0, 0, 0, 0]) # tp, fp, fn, ee, intentional divergence, ri for rid, r in rules.items(): sev = r["severity"] or "Unknown" sev_stats[sev][0] += len(r["tp"]) sev_stats[sev][1] += len(r["fp"]) sev_stats[sev][2] += len(r["fn"]) sev_stats[sev][3] += len(r["ee"]) + sev_stats[sev][4] += len(r["id"]) + sev_stats[sev][5] += len(r["ri"]) w("### By Severity") w("") - w("| Severity | TP | FP | EE | FN | Precision | Recall |") - w("|----------|---:|---:|---:|---:|----------:|-------:|") + w("| Severity | TP | FP | ID | EE | RI | FN | Precision | Recall |") + w("|----------|---:|---:|---:|---:|---:|---:|----------:|-------:|") for sev in ["Fatal", "Error", "Warning", "Info"]: - tp, fp_s, fn_s, ee_s = sev_stats.get(sev, [0, 0, 0, 0]) + tp, fp_s, fn_s, ee_s, id_s, ri_s = sev_stats.get(sev, [0, 0, 0, 0, 0, 0]) p = tp / (tp + fp_s) * 100 if (tp + fp_s) else 0 rc = tp / (tp + fn_s) * 100 if (tp + fn_s) else 0 - w(f"| {sev} | {tp} | {fp_s} | {ee_s} | {fn_s} | {p:.2f}% | {rc:.2f}% |") + w(f"| {sev} | {tp} | {fp_s} | {id_s} | {ee_s} | {ri_s} | {fn_s} | {p:.2f}% | {rc:.2f}% |") w("") # ── False Negatives (grouped by rule) ──────────────────────────────── @@ -886,6 +1955,121 @@ def _extra(d): w(fmt_diag(d, tpl)) w("") + # ── Intentional divergences (grouped by rule) ──────────────────────── + intentional_divergence_rules = {rid: r for rid, r in rules.items() if r["id"]} + w(f"## Intentional Divergence - {total_intentional_divergence} correct findings across {len(intentional_divergence_rules)} rules") + w("") + w("These rules have cfn-lint equivalents, but authoritative CloudFormation") + w("or IAM behavior proves the unmatched cases are correct. They remain") + w("distinct from both false positives and engine-extra checks.") + w("") + + for rid in sorted(intentional_divergence_rules, key=lambda r: (-len(intentional_divergence_rules[r]["id"]), r)): + r = intentional_divergence_rules[rid] + header = f"### {rid} - {len(r['id'])} findings" + if r["description"]: + header += f" - {r['description']}" + w(header) + w("") + + by_tpl = defaultdict(list) + for tpl, d in r["id"]: + by_tpl[tpl].append(d) + for tpl in sorted(by_tpl): + for d in sorted(by_tpl[tpl], key=_diag_sort_key): + w(fmt_diag(d, tpl)) + w("") + + # ── Reference-suppressed findings ─────────────────────────────────── + if reference_suppressed_findings: + suppressed_by_rule = defaultdict(list) + for template, diagnostic in reference_suppressed_findings: + suppressed_by_rule[diagnostic["rule_id"]].append((template, diagnostic)) + + w(f"## Reference Suppressed - {total_reference_suppressed} findings excluded from parity scoring") + w("") + w("These engine diagnostics correspond to checks explicitly disabled by") + w("template-local cfn-lint configuration. They are shown for transparency") + w("but are neither false positives nor engine-extra findings.") + w("") + for rule_id in sorted(suppressed_by_rule, key=lambda rid: (-len(suppressed_by_rule[rid]), rid)): + findings = suppressed_by_rule[rule_id] + w(f"### {rule_id} - {len(findings)} findings") + w("") + for template, diagnostic in sorted(findings, key=lambda item: (item[0], _diag_sort_key(item[1]))): + w(fmt_diag(diagnostic, template)) + w("") + + # ── Reference findings outside comparison scope ───────────────────── + if reference_out_of_scope_findings: + out_of_scope_by_rule = defaultdict(list) + for template, diagnostic in reference_out_of_scope_findings: + out_of_scope_by_rule[diagnostic["rule_id"]].append( + (template, diagnostic) + ) + + w(f"## Reference Out of Scope - {total_reference_out_of_scope} findings excluded from recall") + w("") + w("These reference diagnostics belong to explicitly documented checks that") + w("are not comparable to offline template validation. They remain visible") + w("here and are never silently discarded or counted as false negatives.") + w("") + for rule_id in sorted( + out_of_scope_by_rule, + key=lambda rid: (-len(out_of_scope_by_rule[rid]), rid), + ): + findings = out_of_scope_by_rule[rule_id] + reason = findings[0][1].get("comparison_excluded_reason", "") + w(f"### {rule_id} - {len(findings)} findings") + w("") + if reason: + w(f"> Scope rationale: {reason}.") + w("") + for template, diagnostic in sorted( + findings, key=lambda item: (item[0], _diag_sort_key(item[1])) + ): + w(fmt_diag(diagnostic, template)) + w("") + + # ── Reference Incorrect (grouped by rule) ──────────────────────────── + ri_rules = {rid: r for rid, r in rules.items() if r["ri"]} + if ri_rules: + w(f"## Reference Incorrect - {total_ri} cfn-lint findings excluded from FN and recall across {len(ri_rules)} rules") + w("") + w("These are cfn-lint findings demonstrably wrong per CloudFormation's actual") + w("behavior. They are excluded from false negatives and recall calculation.") + w("") + + for rid in sorted(ri_rules, key=lambda r: (-len(ri_rules[r]["ri"]), r)): + r = ri_rules[rid] + header = f"### {rid} - {len(r['ri'])} incorrect findings" + if r["description"]: + header += f" - {r['description']}" + w(header) + w("") + + by_tpl = defaultdict(list) + for tpl, d in r["ri"]: + by_tpl[tpl].append(d) + for tpl in sorted(by_tpl): + for d in sorted(by_tpl[tpl], key=_diag_sort_key): + w(fmt_diag(d, tpl)) + w("") + + # ── Severity Mismatches ────────────────────────────────────────────── + if severity_mismatches: + w(f"## Severity Mismatches - {len(severity_mismatches)} matched identity pairs") + w("") + w("The same canonical diagnostic identity was paired, but severity differs") + w("between the reference and the engine. The pair remains a TP.") + w("") + for key, exp, act in sorted(severity_mismatches, key=lambda x: ( + x[1]["rule_id"], x[0], x[1].get("resource_id", ""), + )): + w(f"- **{exp['rule_id']}** `{exp.get('resource_id','')}` in `{key}`: " + f"reference {exp.get('severity','?')} vs engine {act.get('severity','?')}") + w("") + # ── Engine Extra (grouped by rule) ─────────────────────────────────── ee_rules = {rid: r for rid, r in rules.items() if r["ee"]} w(f"## Engine Extra - {total_ee} correct findings across {len(ee_rules)} rules") @@ -909,15 +2093,43 @@ def _extra(d): w(fmt_diag(d, tpl)) w("") + if multiplicity_differences: + w(f"## Multiplicity Differences - {total_multiplicity} unscored findings") + w("") + w("Both tools emitted an equivalent diagnostic identity, but one emitted") + w("additional occurrences. These are diagnostic-granularity differences,") + w("not behavioral false positives or false negatives.") + w("") + for template, side, diagnostic in sorted( + multiplicity_differences, + key=lambda item: (item[2]["rule_id"], item[0], item[1], _diag_sort_key(item[2])), + ): + w(f"- **{diagnostic['rule_id']}** extra on {side} side") + w(fmt_diag(diagnostic, template)) + w("") + # ── Per-Template Breakdown ─────────────────────────────────────────── - imperfect = [(k, s) for k, s in tpl_stats.items() if s["fp"] or s["fn"]] - imperfect.sort(key=lambda x: (-(len(x[1]["fp"]) + len(x[1]["fn"])), x[0])) + imperfect = [ + (key, stats) + for key, stats in tpl_stats.items() + if stats["fp"] or stats["fn"] or stats["multiplicity"] + ] + imperfect.sort( + key=lambda item: ( + -( + len(item[1]["fp"]) + + len(item[1]["fn"]) + + len(item[1]["multiplicity"]) + ), + item[0], + ) + ) - w(f"## Per-Template Breakdown - {len(imperfect)} templates with mismatches") + w(f"## Per-Template Breakdown - {len(imperfect)} templates with differences") w("") for key, s in imperfect: total_mis = len(s["fp"]) + len(s["fn"]) - w(f"### `{key}` - {total_mis} mismatches ({s['tp']} TP, {len(s['fp'])} FP, {len(s['ee'])} EE, {len(s['fn'])} FN)") + w(f"### `{key}` - {total_mis} behavioral mismatches ({s['tp']} TP, {len(s['fp'])} FP, {len(s['id'])} ID, {len(s['ee'])} EE, {len(s['multiplicity'])} multiplicity, {len(s['rs'])} RS, {len(s['ri'])} RI, {len(s['fn'])} FN)") w("") if s["fn"]: fn_rules_t = defaultdict(int) @@ -929,6 +2141,11 @@ def _extra(d): for rid, _ in s["fp"]: fp_rules_t[rid] += 1 w(f"- FP: {', '.join(f'`{r}` ×{n}' if n > 1 else f'`{r}`' for r, n in sorted(fp_rules_t.items(), key=lambda x: (-x[1], x[0])))}") + if s["id"]: + intentional_rules_t = defaultdict(int) + for rid, _ in s["id"]: + intentional_rules_t[rid] += 1 + w(f"- ID: {', '.join(f'`{r}` ×{n}' if n > 1 else f'`{r}`' for r, n in sorted(intentional_rules_t.items(), key=lambda x: (-x[1], x[0])))}") if s["ee"]: ee_rules_t = defaultdict(int) for rid, _ in s["ee"]: @@ -966,105 +2183,123 @@ def _extra(d): w("## Root-Cause Analysis") w("") - # FN root causes: group by rule prefix/category - fn_by_cause = defaultdict(lambda: {"count": 0, "rules": set()}) - for rid, r in rules.items(): - if not r["fn"]: - continue - n = len(r["fn"]) - if rid.startswith("E3012"): - # Sub-classify by message pattern - for _, d in r["fn"]: - msg = d["message"] - if "integer" in msg or "number" in msg: - fn_by_cause["Type coercion (string↔number)"]["count"] += 1 - fn_by_cause["Type coercion (string↔number)"]["rules"].add(rid) - elif "boolean" in msg: - fn_by_cause["Type coercion (string↔boolean)"]["count"] += 1 - fn_by_cause["Type coercion (string↔boolean)"]["rules"].add(rid) - else: - fn_by_cause["Other type mismatch"]["count"] += 1 - fn_by_cause["Other type mismatch"]["rules"].add(rid) - elif rid.startswith("E1"): - fn_by_cause["Intrinsic function validation"]["count"] += n - fn_by_cause["Intrinsic function validation"]["rules"].add(rid) - elif rid.startswith("E3"): - fn_by_cause["Resource property validation"]["count"] += n - fn_by_cause["Resource property validation"]["rules"].add(rid) - elif rid.startswith("W"): - fn_by_cause["Warning-level checks"]["count"] += n - fn_by_cause["Warning-level checks"]["rules"].add(rid) - elif rid.startswith("I"): - fn_by_cause["Informational checks"]["count"] += n - fn_by_cause["Informational checks"]["rules"].add(rid) - else: - fn_by_cause["Other"]["count"] += n - fn_by_cause["Other"]["rules"].add(rid) + w("Unmatched findings are classified from diagnostics emitted by the") + w("counterpart on the same template after exact canonical identities") + w("have been consumed. No cause is inferred from a rule prefix or severity.") + w("") w("### False Negative Root Causes") w("") w("| Cause | Count | % of FN | Rules |") w("|-------|------:|--------:|-------|") - for cause, info in sorted(fn_by_cause.items(), key=lambda x: (-x[1]["count"], x[0])): + for cause, info in sorted( + false_negative_causes.items(), + key=lambda item: (-item[1]["count"], item[0]), + ): pct = info["count"] / total_fn * 100 if total_fn else 0 rule_list = ", ".join(sorted(info["rules"])) w(f"| {cause} | {info['count']} | {pct:.2f}% | {rule_list} |") w("") - # FP root causes - fp_by_cause = defaultdict(lambda: {"count": 0, "rules": set()}) - for rid, r in rules.items(): - if not r["fp"]: - continue - n = len(r["fp"]) - if rid == "F0000": - fp_by_cause["Parse/resolver warnings surfaced as diagnostics"]["count"] += n - fp_by_cause["Parse/resolver warnings surfaced as diagnostics"]["rules"].add(rid) - elif rid == "W9003": - fp_by_cause["Type coercion warnings (W9003 - cfn-lint accepts silently)"]["count"] += n - fp_by_cause["Type coercion warnings (W9003 - cfn-lint accepts silently)"]["rules"].add(rid) - elif rid in ("I1022", "I3011"): - fp_by_cause["Stricter than cfn-lint (informational)"]["count"] += n - fp_by_cause["Stricter than cfn-lint (informational)"]["rules"].add(rid) - elif rid.startswith("W"): - fp_by_cause["Stricter than cfn-lint (warnings)"]["count"] += n - fp_by_cause["Stricter than cfn-lint (warnings)"]["rules"].add(rid) - elif rid.startswith("E3") or rid.startswith("E1"): - fp_by_cause["Over-reporting property/intrinsic errors"]["count"] += n - fp_by_cause["Over-reporting property/intrinsic errors"]["rules"].add(rid) - elif rid.startswith("I"): - fp_by_cause["Extra informational findings"]["count"] += n - fp_by_cause["Extra informational findings"]["rules"].add(rid) - else: - fp_by_cause["Other"]["count"] += n - fp_by_cause["Other"]["rules"].add(rid) - w("### False Positive Root Causes") w("") w("| Cause | Count | % of FP | Rules |") w("|-------|------:|--------:|-------|") - for cause, info in sorted(fp_by_cause.items(), key=lambda x: (-x[1]["count"], x[0])): + for cause, info in sorted( + false_positive_causes.items(), + key=lambda item: (-item[1]["count"], item[0]), + ): pct = info["count"] / total_fp * 100 if total_fp else 0 rule_list = ", ".join(sorted(info["rules"])) w(f"| {cause} | {info['count']} | {pct:.2f}% | {rule_list} |") w("") - # ── Location Mismatches (matched pairs) ─────────────────────────────── - # Reported last: these pairs matched on (rule_id, resource_id, path) - the - # two-pass key - yet disagree on line. The key alone counts them as clean true - # positives; surface them so wrong-location divergences are not silently - # accepted. Kept at the bottom because they are lower-severity than an FP/FN - # (the finding fired, just at a different line) and tend to be voluminous. - if location_mismatches: - w(f"## Location Mismatches - {len(location_mismatches)} matched pairs disagree on line") + path_section_titles = { + _REPRESENTATIONAL: "Representational Path Equivalences", + _ENGINE_PREFERRED: "Engine-Preferred Path Differences", + _NON_COMPARABLE: "Non-Comparable Path Anchors", + } + for kind in (_REPRESENTATIONAL, _ENGINE_PREFERRED, _NON_COMPARABLE): + entries = classified_paths[kind] + if not entries: + continue + w(f"## {path_section_titles[kind]} - {len(entries)}") + w("") + for key, expected, actual, reference_path, engine_path, classification in sorted( + entries, + key=lambda item: ( + item[1]["rule_id"], + item[0], + item[1].get("resource_id", ""), + item[3], + item[4], + ), + ): + resource_id = expected.get("resource_id", "") or "" + displayed_reference_path = reference_path or "" + displayed_engine_path = engine_path or "" + w( + f"- **{expected['rule_id']}** `{resource_id}` in `{key}`: " + f"reference `{displayed_reference_path}` vs engine " + f"`{displayed_engine_path}` — {classification.reason}" + ) + w("") + + if path_mismatches: + w(f"## Unresolved Path Mismatches - {len(path_mismatches)}") w("") - w("Same rule ID + resource + path, but the engine start line differs from") - w("the reference. (Messages are not compared - wording may differ freely.)") + w("These paired identities have no evidence-backed path classification.") w("") - w("Known benign class: on transformed (SAM) templates cfn-lint anchors") - w("findings at the resource's first line because the") - w("transform loses property line fidelity; the engine anchors at the") - w("actual property line - deliberately more precise, not a defect.") + for key, expected, actual, reference_path, engine_path in sorted( + path_mismatches, + key=lambda item: ( + item[1]["rule_id"], + item[0], + item[1].get("resource_id", ""), + item[3], + item[4], + ), + ): + resource_id = expected.get("resource_id", "") or "" + displayed_reference_path = reference_path or "" + displayed_engine_path = engine_path or "" + w( + f"- **{expected['rule_id']}** `{resource_id}` in `{key}`: " + f"reference `{displayed_reference_path}` vs " + f"engine `{displayed_engine_path}`" + ) + w("") + + span_section_titles = { + _REPRESENTATIONAL: "Representational Span Equivalences", + _ENGINE_PREFERRED: "Engine-Preferred Source Spans", + _NON_COMPARABLE: "Non-Comparable Source Spans", + } + for kind in (_REPRESENTATIONAL, _ENGINE_PREFERRED, _NON_COMPARABLE): + entries = classified_spans[kind] + if not entries: + continue + w(f"## {span_section_titles[kind]} - {len(entries)}") + w("") + for key, expected, actual, description, classification in sorted( + entries, + key=lambda item: ( + item[1]["rule_id"], + item[0], + item[1].get("resource_id", ""), + ), + ): + resource_id = expected.get("resource_id", "") or "" + w( + f"- **{expected['rule_id']}** `{resource_id}` in `{key}`: " + f"{description} — {classification.reason}" + ) + w("") + + if location_mismatches: + w(f"## Unresolved Location Mismatches - {len(location_mismatches)}") + w("") + w("These matched occurrences start on different lines without a proven source-span classification.") w("") for key, exp, act in sorted(location_mismatches, key=lambda x: ( x[1]["rule_id"], x[0], @@ -1077,13 +2312,44 @@ def _extra(d): f"reference L{exp.get('line','?')} vs engine L{act.get('line','?')}") w("") + if span_mismatches: + w(f"## Unresolved Span Mismatches - {len(span_mismatches)}") + w("") + w("These identity-paired ranges have no evidence-backed representation, precision, or non-comparability classification.") + w("") + for key, exp, act, desc in sorted(span_mismatches, key=lambda x: ( + x[1]["rule_id"], x[0], x[1].get("resource_id", ""), + )): + w(f"- **{exp['rule_id']}** `{exp.get('resource_id','')}` in `{key}`: {desc}") + w("") + # ── Write ──────────────────────────────────────────────────────────── OUTPUT_PATH.parent.mkdir(parents=True, exist_ok=True) OUTPUT_PATH.write_text("\n".join(lines) + "\n") print(f"\nReport written to {OUTPUT_PATH} ({len(lines)} lines)") print(f" Precision: {precision:.2f}% Recall: {recall:.2f}% F1: {f1:.2f}%") - print(f" TP={total_tp} FP={total_fp} EE={total_ee} FN={total_fn}") - print(f" LocationMismatch={len(location_mismatches)}") + print(f" TP={total_tp} FP={total_fp} ID={total_intentional_divergence} EE={total_ee} FN={total_fn}") + print( + f" RI={total_ri} Multiplicity={total_multiplicity} " + f"ReferenceSuppressed={total_reference_suppressed} " + f"ReferenceOutOfScope={total_reference_out_of_scope}" + ) + print( + " PathQuality=" + f"repr:{len(classified_paths[_REPRESENTATIONAL])}," + f"engine:{len(classified_paths[_ENGINE_PREFERRED])}," + f"noncomp:{len(classified_paths[_NON_COMPARABLE])} " + "SpanQuality=" + f"repr:{len(classified_spans[_REPRESENTATIONAL])}," + f"engine:{len(classified_spans[_ENGINE_PREFERRED])}," + f"noncomp:{len(classified_spans[_NON_COMPARABLE])}" + ) + print( + f" PathMismatch={len(path_mismatches)} " + f"LocationMismatch={len(location_mismatches)} " + f"SpanMismatch={len(span_mismatches)} " + f"SeverityMismatch={len(severity_mismatches)}" + ) print(f" Unmatched: {len(cfnlint_only)} cfn-lint-only, {len(engine_only)} engine-only (excluded from comparison)") diff --git a/scripts/snapshots/report_cel_detailed.md b/scripts/snapshots/report_cel_detailed.md index c3ae797e..eaf2f70b 100644 --- a/scripts/snapshots/report_cel_detailed.md +++ b/scripts/snapshots/report_cel_detailed.md @@ -1,1849 +1,75 @@ # cloudformation-validate vs cfn-lint - Parity Report -> Generated: 2026-08-16 17:50:40 -> Engine: **cel** -> Detail level: **detailed** -> Matching: `(rule_id, resource_id, path)` two-pass with `(rule_id, resource_id)` fallback + aliases -> Templates compared: **664** +> Engine: **cel** +> Detail level: **detailed** +> Candidate pairing: exact normalized anchors first, then same-path SAM logical-ID equivalents, then only explicitly classified alternative anchors. Arbitrary same-rule/resource paths remain unmatched +> Templates compared: **664** ## Terminology | Term | Meaning | |------|---------| -| **TP** (True Positive) | Engine and cfn-lint agree - correct finding | +| **TP** (True Positive) | Engine and cfn-lint emit the same canonical rule/resource/property-path occurrence, or an explicitly proven transform-error identity; severity and span differences remain separately reported | | **FP** (False Positive) | Engine reports it, cfn-lint doesn't - noise or engine bug | -| **EE** (Engine Extra) | Correct engine finding that cfn-lint does not cover | +| **ID** (Intentional Divergence) | Evidence-backed correct finding for an equivalent rule where cfn-lint misses this case | +| **EE** (Engine Extra) | Correct engine finding for a check with no cfn-lint equivalent | +| **RS** (Reference Suppressed) | Engine finding explicitly disabled by template-local cfn-lint configuration; excluded from parity scoring | +| **OOS** (Reference Out of Scope) | Reference finding for an explicitly documented non-comparable check; rendered but excluded from recall | +| **RI** (Reference Incorrect) | cfn-lint finding demonstrably wrong per CloudFormation behavior; excluded from FN and recall | +| **Multiplicity** | Both tools report the same identity but emit a different number of diagnostics; excluded from FP/FN | +| **Representational equivalence** | Different path or endpoint notation proven to identify the same logical node/range | +| **Engine-preferred** | Authored-source evidence shows the engine anchor is more precise or the reference anchor is incorrect | +| **Non-comparable** | Missing, generated, conditional, or multi-endpoint constructs have no single source token shared by both representations | | **FN** (False Negative) | cfn-lint expects it, engine misses it - gap in coverage | -| **Precision** | TP/(TP+FP) - excludes Engine Extra from noise count | -| **Recall** | TP/(TP+FN) - how much of what cfn-lint expects the engine catches | +| **Precision** | TP/(TP+FP) - excludes Intentional Divergence and Engine Extra from noise count | +| **Recall** | TP/(TP+FN) - excludes RI from denominator; how much of what cfn-lint correctly expects the engine catches | | **F1** | Harmonic mean of Precision and Recall - single quality score | ## Summary -| Metric | Value | -|--------|------:| -| True Positives | 3094 | -| False Positives (engine bugs) | 1037 | -| Engine Extra (correct, cfn-lint gap) | 8293 | -| False Negatives (engine misses) | 1290 | -| Precision | 74.90% | -| Recall | 70.57% | -| F1 | 72.67% | -| Unique rules detected | 237 | -| Perfect templates | 487/664 | -| Location mismatches (matched pairs) | 4 | +Counts are diagnostic occurrences unless the row explicitly says templates, rules, or a percentage. + +| Population or calculation | Value | +|---------------------------|------:| +| Findings paired as the same occurrence (TP) | 3998 | +| Unmatched comparable findings emitted only by the engine (FP) | 126 | +| Correct unmatched engine findings for rules with a reference equivalent (ID) | 216 | +| Correct engine findings for rules with no reference equivalent (EE) | 8089 | +| Engine findings disabled by template reference configuration; excluded from scoring (RS) | 4 | +| Reference findings from checks outside comparison scope; excluded from scoring (OOS) | 20 | +| Demonstrably incorrect reference findings; excluded from recall (RI) | 8 | +| Unpaired duplicate occurrences of an otherwise matched identity; excluded from FP/FN (Multiplicity) | 38 | +| Unmatched comparable findings emitted only by the reference (FN) | 325 | +| Precision: TP / (TP + FP) | 96.94% | +| Recall: TP / (TP + FN) | 92.48% | +| F1: harmonic mean of precision and recall | 94.66% | +| Canonical rule IDs represented in TP/FP/ID/EE/FN/RI populations | 231 | +| Templates with no FP, FN, multiplicity, or matched path/span/severity difference | 328/664 | +| Matched occurrences with notation-only path differences (representational) | 84 | +| Matched occurrences where the engine path is more precise or correct | 64 | +| Matched occurrences with no unique shared path anchor | 8 | +| Matched occurrences with endpoint-notation-only span differences (representational) | 499 | +| Matched occurrences where the engine source span is more precise or correct | 135 | +| Matched occurrences with no uniquely comparable source span | 110 | +| Paired occurrences with an unclassified path difference (unresolved) | 0 | +| Paired occurrences with an unclassified start-line difference (unresolved) | 0 | +| Paired occurrences with an unclassified full-span difference (unresolved) | 0 | +| Matched occurrences with different severities | 140 | ### By Severity -| Severity | TP | FP | EE | FN | Precision | Recall | -|----------|---:|---:|---:|---:|----------:|-------:| -| Fatal | 438 | 14 | 87 | 148 | 96.90% | 74.74% | -| Error | 850 | 69 | 12 | 136 | 92.49% | 86.21% | -| Warning | 1178 | 900 | 371 | 954 | 56.69% | 55.25% | -| Info | 628 | 54 | 7823 | 52 | 92.08% | 92.35% | +| Severity | TP | FP | ID | EE | RI | FN | Precision | Recall | +|----------|---:|---:|---:|---:|---:|---:|----------:|-------:| +| Fatal | 429 | 16 | 8 | 63 | 0 | 127 | 96.40% | 77.16% | +| Error | 830 | 89 | 4 | 5 | 8 | 119 | 90.32% | 87.46% | +| Warning | 2069 | 10 | 192 | 198 | 0 | 67 | 99.52% | 96.86% | +| Info | 670 | 11 | 12 | 7823 | 0 | 12 | 98.38% | 98.24% | -## False Negatives - 1290 missed findings across 95 rules +## False Negatives - 325 missed findings across 87 rules These are diagnostics cfn-lint expects but the engine does not report. -### W1020 - 897 missed - Sub isn't needed if it doesn't have a variable defined - -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L61 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L55 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L952 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L911 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L946 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9862 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9821 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9856 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9961 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9920 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9955 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10060 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10019 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10054 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10159 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10118 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10153 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10258 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10217 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10252 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10357 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10316 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10351 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10456 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10415 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10450 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10555 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10514 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10549 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10654 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10613 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10648 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10753 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10712 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10747 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1051 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1010 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1045 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10852 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10811 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10846 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10951 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10910 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10945 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11050 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11009 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11044 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11149 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11108 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11143 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11248 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11207 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11242 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11347 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11306 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11341 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11446 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11405 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11440 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11545 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11504 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11539 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11644 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11603 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11638 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11743 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11702 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11737 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1150 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1109 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1144 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11842 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11801 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11836 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11941 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11900 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11935 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12040 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11999 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12034 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12139 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12098 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12133 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12238 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12197 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12232 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12337 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12296 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12331 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12436 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12395 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12430 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12535 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12494 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12529 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12634 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12593 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12628 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12733 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12692 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12727 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1249 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1208 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1243 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12832 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12791 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12826 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12931 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12890 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12925 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13030 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12989 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13024 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13129 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13088 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13123 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13228 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13187 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13222 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13327 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13286 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13321 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13426 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13385 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13420 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13525 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13484 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13519 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13624 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13583 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13618 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13723 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13682 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13717 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1348 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1307 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1342 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13822 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13781 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13816 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13921 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13880 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13915 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14020 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13979 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14014 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14119 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14078 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14113 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14218 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14177 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14212 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14317 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14276 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14311 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14416 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14375 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14410 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14515 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14474 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14509 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14614 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14573 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14608 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14713 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14672 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14707 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1447 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1406 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1441 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14812 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14771 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14806 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14911 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14870 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14905 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15010 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14969 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15004 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15109 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15068 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15103 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15208 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15167 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15202 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15307 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15266 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15301 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15406 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15365 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15400 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15505 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15464 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15499 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15604 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15563 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15598 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15703 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15662 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15697 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1546 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1505 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1540 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15802 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15761 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15796 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15901 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15860 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15895 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16000 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15959 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15994 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16099 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16058 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16093 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16198 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16157 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16192 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16297 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16256 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16291 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16396 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16355 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16390 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16495 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16454 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16489 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16594 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16553 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16588 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16693 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16652 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16687 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1645 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1604 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1639 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16792 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16751 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16786 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16891 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16850 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16885 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16990 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16949 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16984 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17089 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17048 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17083 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17188 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17147 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17182 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17287 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17246 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17281 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17386 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17345 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17380 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17485 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17444 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17479 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17584 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17543 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17578 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17683 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17642 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17677 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1744 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1703 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1738 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17782 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17741 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17776 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17881 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17840 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17875 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17980 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17939 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17974 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18079 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18038 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18073 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18178 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18137 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18172 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18277 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18236 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18271 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18376 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18335 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18370 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18475 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18434 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18469 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18574 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18533 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18568 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18673 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18632 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18667 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1843 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1802 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1837 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18772 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18731 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18766 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18871 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18830 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18865 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18970 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18929 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18964 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19069 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19028 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19063 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19168 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19127 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19162 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19267 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19226 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19261 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19366 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19325 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19360 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19465 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19424 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19459 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19564 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19523 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19558 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19663 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19622 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19657 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L160 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L119 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L154 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1942 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1901 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1936 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19762 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19721 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19756 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19861 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19820 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19855 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19960 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19919 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19954 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20059 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20018 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20053 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20158 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20117 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20152 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20257 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20216 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20251 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20356 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20315 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20350 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20455 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20414 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20449 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20554 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20513 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20548 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20653 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20612 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20647 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2041 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2000 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2035 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20752 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20711 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20746 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20851 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20810 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20845 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20950 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20909 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20944 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21049 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21008 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21043 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21148 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21107 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21142 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21247 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21206 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21241 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21346 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21305 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21340 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21445 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21404 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21439 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21544 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21503 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21538 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21643 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21602 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21637 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2140 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2099 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2134 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21742 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21701 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21736 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21841 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21800 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21835 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21940 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21899 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21934 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22039 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21998 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22033 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22138 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22097 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22132 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22237 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22196 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22231 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22336 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22295 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22330 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22435 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22394 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22429 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22534 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22493 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22528 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22633 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22592 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22627 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2239 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2198 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2233 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22732 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22691 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22726 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22831 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22790 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22825 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22930 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22889 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22924 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23029 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22988 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23023 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23128 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23087 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23122 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23227 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23186 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23221 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23326 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23285 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23320 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23425 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23384 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23419 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23524 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23483 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23518 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23623 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23582 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23617 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2338 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2297 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2332 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23722 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23681 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23716 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23821 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23780 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23815 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23920 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23879 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23914 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24019 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23978 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24013 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24118 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24077 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24112 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24217 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24176 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24211 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24316 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24275 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24310 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24415 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24374 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24409 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24514 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24473 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24508 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24613 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24572 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24607 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2437 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2396 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2431 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24712 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24671 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24706 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24811 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24770 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24805 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24910 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24869 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24904 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25009 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24968 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25003 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25108 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25067 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25102 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25207 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25166 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25201 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25306 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25265 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25300 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25405 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25364 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25399 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25504 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25463 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25498 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25603 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25562 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25597 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2536 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2495 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2530 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25702 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25661 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25696 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25801 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25760 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25795 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25900 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25859 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25894 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25999 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25958 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25993 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26098 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26057 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26092 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26197 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26156 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26191 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26296 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26255 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26290 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26395 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26354 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26389 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26494 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26453 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26488 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26593 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26552 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26587 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2635 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2594 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2629 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26692 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26651 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26686 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26791 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26750 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26785 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26890 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26849 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26884 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26989 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26948 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26983 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27088 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27047 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27082 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27187 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27146 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27181 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27286 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27245 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27280 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27385 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27344 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27379 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27484 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27443 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27478 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27583 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27542 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27577 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2734 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2693 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2728 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27682 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27641 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27676 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27781 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27740 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27775 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27880 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27839 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27874 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27979 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27938 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27973 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28078 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28037 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28072 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28177 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28136 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28171 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28276 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28235 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28270 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28375 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28334 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28369 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28474 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28433 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28468 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28573 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28532 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28567 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2833 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2792 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2827 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28672 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28631 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28666 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28771 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28730 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28765 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28870 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28829 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28864 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28969 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28928 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28963 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29068 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29027 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29062 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29167 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29126 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29161 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29266 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29225 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29260 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29365 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29324 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29359 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29464 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29423 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29458 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29563 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29522 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29557 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L259 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L218 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L253 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2932 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2891 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2926 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3031 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2990 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3025 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3130 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3089 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3124 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3229 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3188 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3223 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3328 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3287 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3322 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3427 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3386 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3421 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3526 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3485 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3520 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3625 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3584 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3619 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3724 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3683 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3718 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3823 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3782 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3817 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L358 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L317 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L352 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3922 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3881 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3916 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4021 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3980 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4015 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4120 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4079 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4114 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4219 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4178 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4213 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4318 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4277 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4312 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4417 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4376 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4411 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4516 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4475 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4510 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4615 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4574 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4609 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4714 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4673 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4708 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4813 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4772 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4807 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L457 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L416 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L451 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4912 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4871 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4906 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5011 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4970 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5005 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5110 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5069 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5104 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5209 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5168 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5203 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5308 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5267 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5302 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5407 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5366 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5401 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5506 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5465 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5500 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5605 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5564 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5599 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5704 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5663 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5698 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5803 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5762 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5797 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L556 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L515 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L550 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5902 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5861 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5896 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6001 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5960 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5995 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6100 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6059 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6094 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6199 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6158 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6193 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6298 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6257 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6292 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6397 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6356 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6391 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6496 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6455 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6490 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6595 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6554 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6589 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6694 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6653 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6688 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6793 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6752 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6787 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L655 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L614 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L649 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6892 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6851 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6886 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6991 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6950 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6985 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7090 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7049 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7084 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7189 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7148 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7183 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7288 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7247 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7282 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7387 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7346 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7381 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7486 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7445 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7480 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7585 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7544 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7579 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7684 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7643 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7678 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7783 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7742 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7777 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L754 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L713 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L748 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7882 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7841 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7876 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7981 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7940 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7975 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8080 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8039 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8074 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8179 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8138 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8173 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8278 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8237 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8272 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8377 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8336 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8371 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8476 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8435 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8470 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8575 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8534 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8569 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8674 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8633 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8668 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8773 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8732 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8767 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L853 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L812 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L847 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8872 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8831 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8866 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8971 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8930 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8965 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9070 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9029 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9064 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9169 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9128 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9163 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9268 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9227 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9262 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9367 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9326 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9361 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9466 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9425 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9460 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9565 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9524 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9559 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9664 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9623 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9658 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9763 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9722 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9757 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables - -### F3003 - 61 missed - Required Resource properties are missing +### F3003 - 58 missed - Required Resource properties are missing - **F3003** (cfn-lint: E3003) `MissingTemplateSourceInOneWorld` → `Properties` L7 in `bad_F3018_conditional_required_novalue_yaml` > 'TemplateBody' is a required property @@ -1851,12 +77,6 @@ These are diagnostics cfn-lint expects but the engine does not report. > 'TemplateURL' is a required property - **F3003** (cfn-lint: E3003) `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1` L46-48 in `bad_core_conditions_yaml` > 'DeviceName' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'PolicyName' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'Roles' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'Users' is a required property - **F3003** (cfn-lint: E3003) `PolicyEmptyAction` → `Properties` L15 in `bad_resources_iam_identity_policy_e3510_yaml` > 'Groups' is a required property - **F3003** (cfn-lint: E3003) `PolicyEmptyAction` → `Properties` L15 in `bad_resources_iam_identity_policy_e3510_yaml` @@ -1968,92 +188,32 @@ These are diagnostics cfn-lint expects but the engine does not report. - **F3003** (cfn-lint: E3003) `MyApi` → `Properties` L8 in `lsp_test-template_yaml` > 'StageName' is a required property -### I1022 - 42 missed - Use Sub instead of Join - -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join.0` L870 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join.0` L888 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L933 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L951 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L994 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1011 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/scripts/watchmaker-install.sh.content.Fn::Join.0` L1039 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join.0` L1102 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0` L1120 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0` L1138 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0` L1156 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L1174 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1192 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0` L1227 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0` L1245 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0` L1263 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L1281 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1299 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join.0` L1317 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.Tags.0.Value.Fn::Join.0` L1441 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.88.Fn::If.1.Fn::Join.0` L1597 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.89.Fn::If.1.Fn::Join.0` L1614 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.98.Fn::If.1.Fn::Join.0` L1643 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.99.Fn::If.1.Fn::Join.0` L1660 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0` L245 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L256 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/cfn-hup.conf.content.Fn::Join.0` L265 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.0` L285 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.0` L325 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Properties.UserData.Fn::Base64.Fn::Join.0` L389 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L442 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Metadata.AWS::CloudFormation::Init.nginx.files./tmp/nginx/default.conf.content.Fn::Join.0` L451 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Properties.UserData.Fn::Base64.Fn::Join.0` L521 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L505 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Properties.UserData.Fn::Base64.Fn::Join.0` L528 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `AnsibleConfigServer` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L305 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `AnsibleConfigServer` → `Metadata.AWS::CloudFormation::Init.SetPrivateKey.files./root/.ssh/id_rsa.content.Fn::Join.0` L328 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftEtcdLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L873 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftMasterASLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L1098 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftNodesLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L1427 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L706 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Properties.UserData.Fn::Base64.Fn::Join.0` L660 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter +### W1030 - 12 missed - Validate the values that come from a Ref function + +- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` + > {'Ref': 'BucketNameChoice'} is longer than 63 when 'Ref' is resolved +- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` + > {'Ref': 'BucketNameChoice'} is not a 'AWS::S3::Bucket.Name' with pattern '^(?![.\\-])(?!.*\\.\\.)(?!.*\\-\\.)(?!.*\\.\\-)[a-z0-9.\\-]{3,63}(? {'Ref': 'AWS::StackId'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] when 'Ref' is resolved +- **W1030** `StackIdPolicies` → `UpdateReplacePolicy.Ref` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` + > {'Ref': 'AWS::StackId'} is not one of ['Delete', 'Retain'] when 'Ref' is resolved +- **W1030** `PolicyDynamicActionBadEffect` → `Properties.PolicyDocument.Statement.0.Action.Ref` L82 in `bad_resources_iam_identity_policy_e3510_yaml` + > 'arn' is not one of ['a2c', 'a4b', 'access-analyzer', 'account', 'acm', 'acm-pca', 'aco-automation', 'action-recommendations', 'activate', 'agentaccess-mcp', 'aidevops', 'aiops', 'airflow', 'airflow-s +- **W1030** `rNatInstanceEni` → `Properties.GroupSet.0.Ref` L82 in `quickstart_nat-instance_json` + > {'Ref': 'pSecurityGroupSSHFromVpc'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.GroupSet.1.Ref` L84 in `quickstart_nat-instance_json` + > {'Ref': 'pSecurityGroupVpcNat'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` + > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^[\\.\\-_\\/#A-Za-z0-9]{1,512}\\Z' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` + > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^subnet-(([0-9A-Fa-f]{8})|([0-9A-Fa-f]{17}))$' when 'Ref' is resolved +- **W1030** → `Parameters.pSecurityAlarmTopic.Default` L198 in `quickstart_nist_application_yaml` + > {'Ref': 'pSecurityAlarmTopic'} does not match '^(arn:(aws[A-Za-z\\-]*?|\\*):[^:]+:[^:]*(:(?:\\d{12}|\\*|aws)?:.+|)|\\*)$' when 'Ref' is resolved at 'Resources/rPostProcInstanceRole/Properties/Policies +- **W1030** `rAutoScalingConfigApp` → `Properties.KeyName.Ref` L383 in `quickstart_nist_application_yaml` + > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved +- **W1030** `rAutoScalingConfigWeb` → `Properties.KeyName.Ref` L515 in `quickstart_nist_application_yaml` + > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved ### W1031 - 12 missed - Validate the values that come from a Fn::Sub function @@ -2107,28 +267,51 @@ These are diagnostics cfn-lint expects but the engine does not report. - **F3014** (cfn-lint: E3014) `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1.VirtualName` L48 in `good_core_conditions_yaml` > Only one of ['VirtualName', 'Ebs', 'NoDevice'] is a required property -### W1030 - 10 missed - Validate the values that come from a Ref function +### E8004 - 10 missed - Check Fn::And structure for validity + +- **E8004** → `Conditions.IsHighAvailability.Fn::And.1.Condition` L11 in `bad_E8007_condition_undefined_in_expr_yaml` + > 'DoesNotExist' is not one of ['IsProd', 'IsHighAvailability'] +- **E8004** → `Conditions.TestAndBadArray.Fn::And.0` L20 in `bad_conditions_and_yaml` + > 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.1` L20 in `bad_conditions_and_yaml` + > 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.0` L19 in `bad_conditions_and_yaml` + > {'Condition': 'TestAndToMany', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.1` L19 in `bad_conditions_and_yaml` + > {'Bad': 'TestAndToMany'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.0` L11 in `bad_conditions_condition_functions_json` + > 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.1` L11 in `bad_conditions_condition_functions_json` + > 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.0` L14 in `bad_conditions_condition_functions_json` + > {'Condition': 'TestAndString', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.1` L15 in `bad_conditions_condition_functions_json` + > {'Bad': 'TestAndString'} is not of type 'boolean' +- **E8004** → `Conditions.isPrimaryAndProduction.Fn::And.1.Condition` L11 in `bad_core_conditions_missing_yaml` + > 'isPrimary' is not one of ['isProduction', 'isPrimaryAndProduction'] + +### F3012 - 10 missed - Check resource properties values -- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` - > {'Ref': 'BucketNameChoice'} is longer than 63 when 'Ref' is resolved -- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` - > {'Ref': 'BucketNameChoice'} is not a 'AWS::S3::Bucket.Name' with pattern '^(?![.\\-])(?!.*\\.\\.)(?!.*\\-\\.)(?!.*\\.\\-)[a-z0-9.\\-]{3,63}(? 'arn' is not one of ['a2c', 'a4b', 'access-analyzer', 'account', 'acm', 'acm-pca', 'aco-automation', 'action-recommendations', 'activate', 'agentaccess-mcp', 'aidevops', 'aiops', 'airflow', 'airflow-s -- **W1030** `rNatInstanceEni` → `Properties.GroupSet.0.Ref` L82 in `quickstart_nat-instance_json` - > {'Ref': 'pSecurityGroupSSHFromVpc'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.GroupSet.1.Ref` L84 in `quickstart_nat-instance_json` - > {'Ref': 'pSecurityGroupVpcNat'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` - > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^[\\.\\-_\\/#A-Za-z0-9]{1,512}\\Z' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` - > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^subnet-(([0-9A-Fa-f]{8})|([0-9A-Fa-f]{17}))$' when 'Ref' is resolved -- **W1030** → `Parameters.pSecurityAlarmTopic.Default` L198 in `quickstart_nist_application_yaml` - > {'Ref': 'pSecurityAlarmTopic'} does not match '^(arn:(aws[A-Za-z\\-]*?|\\*):[^:]+:[^:]*(:(?:\\d{12}|\\*|aws)?:.+|)|\\*)$' when 'Ref' is resolved at 'Resources/rPostProcInstanceRole/Properties/Policies -- **W1030** `rAutoScalingConfigApp` → `Properties.KeyName.Ref` L383 in `quickstart_nist_application_yaml` - > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved -- **W1030** `rAutoScalingConfigWeb` → `Properties.KeyName.Ref` L515 in `quickstart_nist_application_yaml` - > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved +- **F3012** (cfn-lint: E3012) `ExampleLambda` → `Properties.Environment.Variables` L14 in `bad_resources_properties_primitive_types_map_yaml` + > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' +- **F3012** (cfn-lint: E3012) `ExampleLambda1` → `Properties.Environment.Variables.Fn::If.1` L34-37 in `bad_resources_properties_primitive_types_map_yaml` + > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' +- **F3012** (cfn-lint: E3012) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` + > [{'AttributeName': 'String', 'KeyType': 'String'}] is not of type 'object', 'string' +- **F3012** (cfn-lint: E3012) `DynamicProperties` → `Properties` L250 in `gh-issues_issue-235_yaml` + > '{{resolve:ssm:/rds/properties}}' is not of type object +- **F3012** (cfn-lint: E3012) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` + > 'EDGE' is not of type 'object' +- **F3012** (cfn-lint: E3012) `App2` → `Properties.Location` L10 in `good_transform_applications_location_yaml` + > {'ApplicationId': '1'} is not of type 'string' +- **F3012** (cfn-lint: E3012) `CloudFront1` → `Properties.Ref` L39 in `integration_ref-no-value_yaml` + > {'Ref': 'AWS::NoValue'} is not of type object +- **F3012** (cfn-lint: E3012) `IamRole2` → `Properties.Ref` L26 in `integration_ref-no-value_yaml` + > {'Ref': 'AWS::NoValue'} is not of type object +- **F3012** (cfn-lint: E3012) `Database` → `Properties.MultiAZ` L679 in `lsp_comprehensive_json` + > {'Condition': 'IsProduction'} is not of type 'boolean' +- **F3012** (cfn-lint: E3012) `Database` → `Properties.MultiAZ` L280 in `lsp_comprehensive_yaml` + > {'Condition': 'IsProduction'} is not of type 'boolean' ### F0000 - 9 missed - Parsing error found when parsing the template @@ -2154,121 +337,24 @@ but found another document - **F0000** (cfn-lint: E0000) L12 in `bad_template_yaml` > did not find expected key -### F3016 - 9 missed - Check DeletionPolicy values for Resources - -- **F3016** (cfn-lint: E3035) `DynamicObjectPolicy` → `DeletionPolicy` L40 in `bad_lifecycle_conditional_invalid_policies_yaml` - > {'Value': {'Ref': 'Policy'}} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ListPolicies` → `DeletionPolicy` L10 in `bad_lifecycle_policy_shapes_yaml` - > ['Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ObjectPolicies` → `DeletionPolicy` L15 in `bad_lifecycle_policy_shapes_yaml` - > {'Value': 'Retain'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `InvalidMapping` → `DeletionPolicy` L44 in `bad_resources_deletionpolicy_yaml` - > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] -- **F3016** (cfn-lint: E3035) `PolicyList` → `DeletionPolicy` L17 in `bad_resources_deletionpolicy_yaml` - > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] -- **F3016** (cfn-lint: E3035) `UnsupportedIntrinsic` → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` - > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `CorrelatedConditionalPolicies` → `DeletionPolicy.Fn::If.2` L50 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L55 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ImpossibleResourcePolicies` → `DeletionPolicy` L61 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] - -### E0002 - 8 missed - Error processing rule on the template - -- **E0002** L1 in `bad_core_E3001_resource_shape_yaml` - > Unknown exception while processing rule E1029: "'str_node' object has no attribute 'get'" -- **E0002** L1 in `bad_core_conditions_list_yaml` - > Unknown exception while processing rule W8001: "'list_node' object has no attribute 'items'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule E3007: "argument of type 'NoneType' is not iterable" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W2001: "'NoneType' object has no attribute 'keys'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W2501: "'NoneType' object has no attribute 'keys'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W7001: "'list_node' object has no attribute 'items'" -- **E0002** L1 in `bad_functions_foreach_no_transform_yaml` - > Unknown exception while processing rule E1029: "'list_node' object has no attribute 'get'" -- **E0002** L1 in `gh-issues_issue-235_yaml` - > Unknown exception while processing rule I3100: "'str_node' object has no attribute 'get'" - -### E3043 - 8 missed - Validate parameters for in a nested stack - -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "One" is not specified when condition "IsUsEast1" is False and when condition "IsUsWest2" is True -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified when condition "IsUsEast1" is False and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified when condition "IsUsEast1" is True and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsEast1" is False and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsEast1" is False and when condition "IsUsWest2" is True -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Zero" doesn't exist in nested stack template when condition "IsUsEast1" is True and when condition "IsUsWest2" is False -- **E3043** `StackNormal` → `Properties.Parameters` L10 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified at Resources/StackNormal/Properties/Parameters -- **E3043** `StackNormal` → `Properties.Parameters.Three` L12 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template at Resources/StackNormal/Properties/Parameters/Three - -### F0018 - 8 missed - Check UpdateReplacePolicy values for Resources - -- **F0018** (cfn-lint: E3036) `ListPolicies` → `UpdateReplacePolicy` L11 in `bad_lifecycle_policy_shapes_yaml` - > ['Retain'] is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ObjectPolicies` → `UpdateReplacePolicy` L17 in `bad_lifecycle_policy_shapes_yaml` - > {'Value': 'Retain'} is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `InvalidMapping` → `UpdateReplacePolicy` L44 in `bad_resources_updatereplacepolicy_yaml` - > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'Snapshot'] -- **F0018** (cfn-lint: E3036) `PolicyList` → `UpdateReplacePolicy` L17 in `bad_resources_updatereplacepolicy_yaml` - > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'Snapshot'] -- **F0018** (cfn-lint: E3036) `UnsupportedIntrinsic` → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` - > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `CorrelatedConditionalPolicies` → `UpdateReplacePolicy.Fn::If.2` L51 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L56 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ImpossibleResourcePolicies` → `UpdateReplacePolicy` L62 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] - -### F2015 - 8 missed - Default value is within parameter constraints - -- **F2015** (cfn-lint: E2015) → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLSingleElementNotAllowed.Default` L7 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLWhitespaceTrimsToInvalid.Default` L28 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLAllowedValues.Default` L47 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.myAllowedValue.Default` L18 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues - -### F3012 - 8 missed - Check resource properties values +### W1001 - 8 missed - Ref/GetAtt to resource that is available when conditions are applied -- **F3012** (cfn-lint: E3012) `ExampleLambda` → `Properties.Environment.Variables` L14 in `bad_resources_properties_primitive_types_map_yaml` - > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' -- **F3012** (cfn-lint: E3012) `ExampleLambda1` → `Properties.Environment.Variables.Fn::If.1` L34-37 in `bad_resources_properties_primitive_types_map_yaml` - > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' -- **F3012** (cfn-lint: E3012) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` - > [{'AttributeName': 'String', 'KeyType': 'String'}] is not of type 'object', 'string' -- **F3012** (cfn-lint: E3012) `DynamicProperties` → `Properties` L250 in `gh-issues_issue-235_yaml` - > '{{resolve:ssm:/rds/properties}}' is not of type object -- **F3012** (cfn-lint: E3012) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` - > 'EDGE' is not of type 'object' -- **F3012** (cfn-lint: E3012) `App2` → `Properties.Location` L10 in `good_transform_applications_location_yaml` - > {'ApplicationId': '1'} is not of type 'string' -- **F3012** (cfn-lint: E3012) `CloudFront1` → `Properties.Ref` L39 in `integration_ref-no-value_yaml` - > {'Ref': 'AWS::NoValue'} is not of type object -- **F3012** (cfn-lint: E3012) `IamRole2` → `Properties.Ref` L26 in `integration_ref-no-value_yaml` - > {'Ref': 'AWS::NoValue'} is not of type object +- **W1001** `AMIIDLookup` → `Properties.Role.Fn::If.1` L102 in `bad_core_conditions_yaml` + > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Resources/AMIIDLookup/Properties/Role/Fn::If/1 +- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `bad_core_conditions_yaml` + > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 +- **W1001** → `Outputs.lambdaArn.Value` L63 in `bad_functions_relationship_conditions_yaml` + > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Outputs/lambdaArn/Value +- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `good_core_conditions_yaml` + > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L586-588 in `lsp_comprehensive_json` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L589-591 in `lsp_comprehensive_json` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L243 in `lsp_comprehensive_yaml` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L243 in `lsp_comprehensive_yaml` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId ### E1021 - 7 missed - Base64 validation of parameters @@ -2287,22 +373,22 @@ but found another document - **E1021** `LaunchConfiguration` → `Properties.UserData.Fn::Base64.Fn::Sub` L27 in `good_parameters_used_transforms_yaml` > {'Fn::Transform': {'Name': 'DynamicUserData'}} is not of type 'array', 'string' -### W1001 - 7 missed - Ref/GetAtt to resource that is available when conditions are applied - -- **W1001** `AMIIDLookup` → `Properties.Role.Fn::If.1` L102 in `bad_core_conditions_yaml` - > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Resources/AMIIDLookup/Properties/Role/Fn::If/1 -- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `bad_core_conditions_yaml` - > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 -- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `good_core_conditions_yaml` - > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L587-589 in `lsp_comprehensive_json` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L590-592 in `lsp_comprehensive_json` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L244 in `lsp_comprehensive_yaml` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L244 in `lsp_comprehensive_yaml` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId +### E8003 - 7 missed - Check Fn::Equals structure for validity + +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals.0` L24 in `bad_conditions_condition_functions_json` + > [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals.1` L25 in `bad_conditions_condition_functions_json` + > {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals.0` L11 in `bad_conditions_equals_yaml` + > [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals.1` L11 in `bad_conditions_equals_yaml` + > {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.TestWrongType.Fn::Equals.1` L12 in `bad_conditions_equals_yaml` + > ['Not a List'] is not of type 'string' +- **E8003** → `Conditions.ToManyFunctions.Fn::Equals.1` L19-21 in `bad_conditions_equals_yaml` + > {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' +- **E8003** → `Conditions.primaryRegion.Fn::Equals.0` L4 in `bad_functions_import_value_yaml` + > {'Fn::ImportValue': 'PrimaryRegion'} is not of type 'string' ### E3530 - 6 missed - Validate IAM trust polices @@ -2334,18 +420,33 @@ but found another document - **W1036** `lambdaMap1` → `Properties.SecurityGroupIngress.Fn::GetAZs` L198 in `bad_generic_yaml` > 'us-east-1f' is not of type 'object' when 'Fn::GetAZs' is resolved -### E1001 - 5 missed - Basic CloudFormation Template Configuration - -- **E1001** L1 in `bad_empty_file_yaml` - > 'Resources' is a required property -- **E1001** L2-3 in `bad_not_cloudformation_yaml` - > 'Resources' is a required property -- **E1001** → `Globals` L2 in `bad_sam_globals_not_dict_yaml` - > 'notadict' is not of type 'object' -- **E1001** → `AWSTemplateFormatVersion` L1 in `bad_templates_base_null_yaml` - > None is not one of ['2010-09-09'] -- **E1001** L1-7 in `gh-issues_issue-201_json` - > 'Resources' is a required property +### W2506 - 6 missed - Check if ImageId Parameters have the correct type + +- **W2506** → `Parameters.SsmStringImageParam.Type` L8 in `gh-issues_issue-34_json` + > 'AWS::SSM::Parameter::Value' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pNatAmi.Type` L49 in `quickstart_nat-instance_json` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pAppAmi.Type` L128 in `quickstart_nist_application_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pWebServerAMI.Type` L216 in `quickstart_nist_application_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pBastionAmi.Type` L195 in `quickstart_nist_vpc_management_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pBastionAmi.Type` L136 in `quickstart_vpc-management_json` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] + +### E1005 - 5 missed - Validate Transform configuration + +- **E1005** → `Transform.key` L3 in `bad_templates_base_yaml` + > Additional properties are not allowed ('key' was unexpected) +- **E1005** → `Transform.1` L2 in `bad_templates_transform_invalid_entries_yaml` + > 42 is not of type 'string', 'array', 'object' +- **E1005** → `Transform.1` L2 in `bad_templates_transform_invalid_entries_yaml` + > 42 is not of type 'string', 'object' +- **E1005** → `Transform.2.Parameters` L6 in `bad_templates_transform_invalid_entries_yaml` + > 'not-an-object' is not of type 'object' +- **E1005** → `Transform.3.Name` L7 in `bad_templates_transform_invalid_entries_yaml` + > ['AWS::Include'] is not of type 'string' ### E3024 - 5 missed - Validate tag configuration @@ -2373,31 +474,18 @@ but found another document - **E3026** `ThirdReplicationGroup` → `Properties.CacheParameterGroupName.Ref.NumCacheClusters` L77 in `bad_resources_elasticache_cache_cluster_failover_yaml` > "NumCacheClusters" must be greater than one when creating a cluster at Resources/ThirdReplicationGroup/Properties/CacheParameterGroupName/Ref/NumCacheClusters -### E3048 - 5 missed - Validate ECS Fargate tasks have required properties and values - -- **E3048** `ThirtyTwoVcpuUnsupportedSixtyFourGb` → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' -- **E3048** `ThirtyTwoVcpuUnsupportedTwoFortyGb` → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > 32768 is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] -- **E3048** `ThirtyTwoVcpuOneTwentyGb` → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` - > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] -- **E3048** `ThirtyTwoVcpuSixtyGb` → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` - > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' -- **E3048** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` - > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] - -### F0013 - 5 missed - Conditions have appropriate properties +### F0018 - 5 missed - Check UpdateReplacePolicy values for Resources -- **F0013** (cfn-lint: E8001) → `Conditions.NullCondition` L51 in `bad_conditions_yaml` - > None is not of type 'boolean' -- **F0013** (cfn-lint: E8001) → `Conditions` L6 in `bad_core_conditions_list_yaml` - > [{'isProduction': {'Fn::Equals': [{'Ref': 'myEnvironment'}, 'prod']}}] is not of type 'object' -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.AlarmName.Fn::If.0` L172-175 in `lsp_condition-usage_yaml` - > {'Fn::And': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB' -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.Threshold.Fn::If.0` L184-187 in `lsp_condition-usage_yaml` - > {'Fn::Or': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.TreatMissingData.Fn::If.0` L192-194 in `lsp_condition-usage_yaml` - > {'Fn::Not': [{'Condition': 'IsProduction'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', 'NotProduction', 'ComplexCondition'] +- **F0018** (cfn-lint: E3036) `CorrelatedConditionalPolicies` → `UpdateReplacePolicy.Fn::If.2` L89 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L94 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `ImpossibleResourcePolicies` → `UpdateReplacePolicy` L100 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `JoinPolicies` → `UpdateReplacePolicy` L83 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Dele', 'e']]} is not of type 'string' +- **F0018** (cfn-lint: E3036) `JoinPolicies` → `UpdateReplacePolicy` L83 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Dele', 'e']]} is not one of ['Delete', 'Retain'] ### F3006 - 5 missed - Validate the CloudFormation resource type @@ -2412,27 +500,31 @@ but found another document - **F3006** (cfn-lint: E3006) `UnbundledAmznType` → `Type` L14 in `good_unknown_resource_types_ignored_yaml` > Resource type 'AMZN::Internal::UnbundledType' does not exist in 'us-east-1' -### E2001 - 4 missed - Parameters have appropriate properties +### F3016 - 5 missed - Check DeletionPolicy values for Resources -- **E2001** → `Parameters.NullParamType` L35 in `bad_parameters_configuration_yaml` - > 'Type' is a required property -- **E2001** → `Parameters.allowedValuesAListofBadTypes.AllowedValues.0` L10-11 in `bad_parameters_configuration_yaml` - > {'key': 'value'} is not of type 'string' -- **E2001** → `Parameters.maxLengthIsNotString.MaxLength` L16 in `bad_parameters_configuration_yaml` - > 'MaxLength' is not one of ['AllowedValues', 'ConstraintDescription', 'Default', 'Description', 'MaxValue', 'MinValue', 'NoEcho', 'Type'] -- **E2001** → `Parameters.myInvalidParameter.NotType` L27 in `bad_parameters_configuration_yaml` - > Additional properties are not allowed ('NotType' was unexpected) +- **F3016** (cfn-lint: E3035) `CorrelatedConditionalPolicies` → `DeletionPolicy.Fn::If.2` L88 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L93 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `ImpossibleResourcePolicies` → `DeletionPolicy` L99 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `JoinPolicies` → `DeletionPolicy` L82 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Re', 'ain']]} is not of type 'string' +- **F3016** (cfn-lint: E3035) `JoinPolicies` → `DeletionPolicy` L82 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Re', 'ain']]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -### E3001 - 4 missed - Basic CloudFormation Resource Check +### W1028 - 5 missed - Check Fn::If has a path that cannot be reached -- **E3001** `NonObjectBody` → `Resources.NonObjectBody` L8 in `bad_core_E3001_resource_shape_yaml` - > Exception "'str_node' object has no attribute 'get'" raised while validating 'cfnLint' -- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` - > True is not one of ['*'] -- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` - > True is not valid under any of the given schemas -- **E3001** `ImpossibleResourcePolicies` → `Resources.ImpossibleResourcePolicies` L58 in `good_lifecycle_intrinsic_scenarios_yaml` - > Exception "When setting condition 'Never' to True" raised while validating 'cfnLint' +- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Listeners.0.Fn::If.2` L161-164 in `bad_generic_yaml` + > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True +- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Tags.0.Fn::If.2` L178-180 in `bad_generic_yaml` + > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True +- **W1028** `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L93 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True +- **W1028** `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L94 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True +- **W1028** `ImpossibleCreationPolicyBranch` → `CreationPolicy.Fn::If.1` L49 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True ### E3023 - 4 missed - Validate Route53 RecordSets @@ -2445,6 +537,17 @@ but found another document - **E3023** `GroupUnreachableInvalid` → `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` L61 in `good_route53_conditional_record_arrays_yaml` > 'unreachable-group-invalid' is not a 'ipv4' +### E3055 - 4 missed - Check CreationPolicy values for Resources + +- **E3055** `ScalarCreationPolicy` → `CreationPolicy` L8 in `bad_core_resource_attributes_yaml` + > 'invalid' is not of type 'object' +- **E3055** `CreationConditionalInvalid` → `CreationPolicy.Fn::If.2` L51 in `bad_lifecycle_policy_shapes_yaml` + > 'invalid' is not of type 'object' +- **E3055** `CorrelatedCreationPolicy` → `CreationPolicy.Fn::If.2` L45 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'invalid' is not of type 'object' +- **E3055** `ImpossibleCreationPolicyBranch` → `CreationPolicy.Fn::If.1` L49 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'invalid' is not of type 'object' + ### E3513 - 4 missed - Validate ECR repository policy - **E3513** `ecr1` → `Properties.RepositoryPolicyText.Statement.0.BadProperty` L16 in `bad_resources_iam_resource_policy_yaml` @@ -2478,17 +581,6 @@ but found another document - **E3724** → `Globals.Function.CodeUri` L9 in `good_parameters_used_transforms_yaml` > {'Bucket': 'somebucket', 'Key': {'Fn::Sub': 'lambda/code/lambda-${Version}-shaded.jar'}} is not of type 'string' -### F1020 - 4 missed - Ref validation of value - -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > {'Ref': 'BadType'} is not of type 'string' -- **F1020** (cfn-lint: E1020) → `Conditions.TagEnvironments.Fn::Not.0.Fn::Equals.1` L15 in `bad_conditions_equals_yaml` - > {'Ref': 'Environments'} is not of type 'string' -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.Tags.0.Value.Ref` L34 in `lsp_constants_json` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.Tags.0.Value.Ref` L21 in `lsp_constants_yaml` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] - ### F6101 - 4 missed - Validate that outputs values are a string - **F6101** (cfn-lint: E6101) → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251-256 in `lsp_condition-usage_yaml` @@ -2511,17 +603,6 @@ but found another document - **I3010** `Memory` → `Properties.MemoryStrategies.3` L36-49 in `gh-issues_issue-38_json` > 'Resources/Memory/Properties/MemoryStrategies/3' is approaching the limit of 1 properties -### W1028 - 4 missed - Check Fn::If has a path that cannot be reached - -- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Listeners.0.Fn::If.2` L161-164 in `bad_generic_yaml` - > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True -- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Tags.0.Fn::If.2` L178-180 in `bad_generic_yaml` - > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True -- **W1028** `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L55 in `good_lifecycle_intrinsic_scenarios_yaml` - > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True -- **W1028** `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L56 in `good_lifecycle_intrinsic_scenarios_yaml` - > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True - ### W1032 - 4 missed - Validate the values that come from a Fn::Join function - **W1032** `Bucket2` → `Properties.BucketName.Fn::Join` L42 in `lsp_parameter_usage_json` @@ -2535,21 +616,21 @@ but found another document ### E1011 - 3 missed - FindInMap validation of configuration -- **E1011** `Bucket` → `Properties.Tags.0.Value.Fn::FindInMap.0` L9 in `bad_findinmap_bad_yaml` - > 'NonExistentMap' is not one of [] - **E1011** `Topic` → `Properties.DisplayName.Fn::FindInMap` L15 in `bad_functions_findinmap_default_value_no_transform_yaml` > expected maximum item count: 3, found: 4 - **E1011** `lambdaMap2` → `Properties.SecurityGroupIngress.0` L206-207 in `bad_generic_yaml` > {'Fn::FindInMap': ['runtime', {'Ref': 'AWS::Region'}, 'production']} is not of type 'object' +- **E1011** `CreationRootFindInMap` → `CreationPolicy` L34 in `bad_lifecycle_policy_shapes_yaml` + > {'Fn::FindInMap': ['CreationValues', 'Primary', 'Policy']} is not of type 'object' -### E3047 - 3 missed - Validate ECS Fargate tasks have the right combination of CPU and memory +### E2001 - 3 missed - Parameters have appropriate properties -- **E3047** `ThirtyTwoVcpuOneTwentyGb` → `Properties` L71 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32768' is not compatible with memory '122880' -- **E3047** `ThirtyTwoVcpuSixtyGb` → `Properties` L55 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32 vCPU' is not compatible with memory '60 GB' -- **E3047** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties` L87 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32768' is not compatible with memory '244 GB' +- **E2001** → `Parameters.NullParamType` L35 in `bad_parameters_configuration_yaml` + > 'Type' is a required property +- **E2001** → `Parameters.allowedValuesAListofBadTypes.AllowedValues.0` L10-11 in `bad_parameters_configuration_yaml` + > {'key': 'value'} is not of type 'string' +- **E2001** → `Parameters.maxLengthIsNotString.MaxLength` L16 in `bad_parameters_configuration_yaml` + > 'MaxLength' is not one of ['AllowedValues', 'ConstraintDescription', 'Default', 'Description', 'MaxValue', 'MinValue', 'NoEcho', 'Type'] ### E3692 - 3 missed - Validate Multi-AZ DB cluster configuration @@ -2560,32 +641,14 @@ but found another document - **E3692** `Cluster` → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` > 'StorageType' is a required property -### E5001 - 3 missed - Check that Modules resources are valid - -- **E5001** `MyModule` → `CreationPolicy` L6 in `bad_modules_bad_has_create_policy_yaml` - > CreationPolicy is not permitted within Modules -- **E5001** `MyModule` → `UpdatePolicy` L5 in `bad_modules_bad_has_update_policy_yaml` - > UpdatePolicy is not permitted within Modules -- **E5001** `MyModule` → `Metadata.AWS::CloudFormation::Module.{'something': 'true'}` L7 in `bad_modules_bad_uses_module_metadata_yaml` - > The Metadata key AWS::CloudFormation::Module is reserved +### F1020 - 3 missed - Ref validation of value -### E7001 - 3 missed - Mappings are appropriately configured - -- **E7001** → `Mappings.BadMap.Key1` L4 in `bad_invalid_mapping_structure_yaml` - > 'value_not_a_map' is not of type 'object' -- **E7001** → `Mappings.myMap.us-east-1.32` L7 in `good_functions_findinmap_yaml` - > 32 does not match any of the regexes: '^[a-zA-Z0-9]+$' -- **E7001** → `Mappings.myMap.us-east-1.64` L7 in `good_functions_findinmap_yaml` - > 64 does not match any of the regexes: '^[a-zA-Z0-9]+$' - -### F1018 - 3 missed - Sub validation of parameters - -- **F1018** (cfn-lint: E1019) `myInstanceSub` → `Properties.UserData.Fn::Sub` L218 in `bad_resources_circular_dependency_yaml` - > {'Test': 'bad configuration'} is not of type 'array', 'string' -- **F1018** (cfn-lint: E1019) `Bucket` → `Properties.BucketName.Fn::Sub` L28 in `lsp_constants_json` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] -- **F1018** (cfn-lint: E1019) `Bucket` → `Properties.BucketName.Fn::Sub` L18 in `lsp_constants_yaml` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] +- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > {'Ref': 'BadType'} is not of type 'string' +- **F1020** (cfn-lint: E1020) → `Conditions.TagEnvironments.Fn::Not.0.Fn::Equals.1` L15 in `bad_conditions_equals_yaml` + > {'Ref': 'Environments'} is not of type 'string' +- **F1020** (cfn-lint: E1020) `CreationRootRef` → `CreationPolicy` L30 in `bad_lifecycle_policy_shapes_yaml` + > {'Ref': 'Policy'} is not of type 'object' ### F3002 - 3 missed - Resource properties are invalid @@ -2632,14 +695,14 @@ but found another document - **W1034** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` → `Properties.Runtime.Fn::FindInMap` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` > Runtime {'Fn::FindInMap': ['LatestNodeRuntimeMap', {'Ref': 'AWS::Region'}, 'value']} was deprecated on '2026-04-30'. Creation was disabled on '2027-02-01' and update on '2027-03-03'. Please consider u -### W2010 - 3 missed - NoEcho parameters are not masked when used in Metadata and Outputs +### W2001 - 3 missed - Check if Parameters are Used -- **W2010** `SNSTopicWithSecretNameInRef` → `Metadata.NoEchoParamInMetadata.Ref` L13 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** `SNSTopicWithSecretNameInSub` → `Metadata.NoEchoParamInMetadata.Fn::Sub` L19 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9.Ref` L343 in `quickstart_nist_application_yaml` - > Don't use 'NoEcho' parameter 'pDBPassword' in resource metadata +- **W2001** → `Parameters.NullParameter` L34 in `bad_parameters_configuration_yaml` + > Parameter NullParameter not used. +- **W2001** → `Parameters.DBPolicy` L6 in `bad_resources_deletionpolicy_yaml` + > Parameter DBPolicy not used. +- **W2001** → `Parameters.DBPolicy` L6 in `bad_resources_updatereplacepolicy_yaml` + > Parameter DBPolicy not used. ### E1016 - 2 missed - ImportValue validation of parameters @@ -2657,9 +720,9 @@ but found another document ### E1701 - 2 missed - Validate the configuration of Assertions -- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L313 in `lsp_comprehensive_json` +- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L312 in `lsp_comprehensive_json` > {'Fn::Implies': [{'Fn::Equals': [{'Ref': 'BooleanParameter'}, 'true']}, {'Fn::And': [{'Fn::Not': [{'Fn::Equals': [{'Ref': 'InstanceCount'}, 1]}]}, {'Fn::Not': [{'Fn::Equals': [{'Ref': 'SSMParameter'}, -- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L131 in `lsp_comprehensive_yaml` +- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L130 in `lsp_comprehensive_yaml` > {'Fn::Implies': [{'Fn::Equals': [{'Ref': 'BooleanParameter'}, 'true']}, {'Fn::And': [{'Fn::Not': [{'Fn::Equals': [{'Ref': 'InstanceCount'}, 1]}]}, {'Fn::Not': [{'Fn::Equals': [{'Ref': 'SSMParameter'}, ### E2531 - 2 missed - Validate if lambda runtime is deprecated @@ -2683,19 +746,12 @@ but found another document - **E3510** `myPolicy2` → `Properties.Fn::If.2.PolicyDocument` L22 in `bad_resources_properties_atleastone_yaml` > 'Statement' is a required property -### E8003 - 2 missed - Check Fn::Equals structure for validity - -- **E8003** → `Conditions.TestEqualNull.Fn::Equals` L28 in `bad_conditions_condition_functions_json` - > None is not of type 'array' -- **E8003** → `Conditions.ToManyFunctions.Fn::Equals.1` L19-21 in `bad_conditions_equals_yaml` - > {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' - -### E8004 - 2 missed - Check Fn::And structure for validity +### E7001 - 2 missed - Mappings are appropriately configured -- **E8004** → `Conditions.TestAndNull.Fn::And` L22 in `bad_conditions_and_yaml` - > None is not of type 'array' -- **E8004** → `Conditions.TestAndNull.Fn::And` L18 in `bad_conditions_condition_functions_json` - > None is not of type 'array' +- **E7001** → `Mappings.myMap.us-east-1.32` L7 in `good_functions_findinmap_yaml` + > 32 does not match any of the regexes: '^[a-zA-Z0-9]+$' +- **E7001** → `Mappings.myMap.us-east-1.64` L7 in `good_functions_findinmap_yaml` + > 64 does not match any of the regexes: '^[a-zA-Z0-9]+$' ### E9004 - 2 missed - GetAtt validation of parameters @@ -2704,6 +760,20 @@ but found another document - **E9004** (cfn-lint: E1010) `SsmParameter` → `Properties.Value.Fn::GetAtt` L18 in `integration_getatt-types_yaml` > {'Fn::GetAtt': ['CapacityReservation', 'InstanceCount']} is not of type 'string' +### F0013 - 2 missed - Conditions have appropriate properties + +- **F0013** (cfn-lint: E8001) → `Conditions.TestIfNotArray` L31 in `bad_conditions_condition_functions_json` + > {'Fn::If': 'string'} is not of type 'boolean' +- **F0013** (cfn-lint: E8001) → `Conditions.TestIfWrongCount` L32 in `bad_conditions_condition_functions_json` + > {'Fn::If': ['c', 't']} is not of type 'boolean' + +### F1018 - 2 missed - Sub validation of parameters + +- **F1018** (cfn-lint: E1019) `CreationRootSub` → `CreationPolicy` L45 in `bad_lifecycle_policy_shapes_yaml` + > {'Fn::Sub': ['${Value}', {'Value': 'not-an-object'}]} is not of type 'object' +- **F1018** (cfn-lint: E1019) `myInstanceSub` → `Properties.UserData.Fn::Sub` L218 in `bad_resources_circular_dependency_yaml` + > {'Test': 'bad configuration'} is not of type 'array', 'string' + ### F3017 - 2 missed - Check Properties that need at least one of a list of properties - **F3017** (cfn-lint: E3017) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` @@ -2716,7 +786,7 @@ but found another document - **F3018** (cfn-lint: E3018) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` > [{'AttributeName': 'String', 'KeyType': 'String'}] is not valid under any of the given schemas - **F3018** (cfn-lint: E3018) `ConditionalTemplateSource` → `Properties` L7 in `good_stackset_conditional_template_source_yaml` - > {'StackSetName': 'conditional-template-source', 'PermissionModel': 'SELF_MANAGED', 'TemplateBody': {'Fn::If': ['UseInlineTemplate', '{"AWSTemplateFormatVersion":"2010-09-09","Resources":{}}', {'Ref': + > {'StackSetName': 'conditional-template-source', 'PermissionModel': 'SELF_MANAGED', 'TemplateBody': {'Fn::If': ['UseInlineTemplate', '{"AWSTemplateFormatVersion":"2010-09-09","Resources":{}}', {'Ref': ### F3037 - 2 missed - Check if a list has duplicate values @@ -2725,6 +795,13 @@ but found another document - **F3037** (cfn-lint: E3037) `IamGroupWithConditions` → `Properties.ManagedPolicyArns` L22 in `bad_resources_properties_list_duplicates_yaml` > ['arn:aws:iam::aws:policy/AdministratorPolicy', 'arn:aws:iam::aws:policy/AdministratorPolicy', {'Ref': 'IamPolicy'}, {'Ref': 'IamPolicy'}] has non-unique elements +### I3011 - 2 missed - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy + +- **I3011** `myFunctionRole` → `Resources.myFunctionRole` L66 in `bad_transform_serverless_template_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `myFunctionRole` → `Resources.myFunctionRole` L66 in `bad_transform_serverless_template_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) + ### W3037 - 2 missed - Check IAM Permission configuration - **W3037** `myRoleToWriteToS3` → `Properties.Policies.0.PolicyDocument.Statement.2.Action` L140 in `bad_resources_circular_dependency_yaml` @@ -2739,6 +816,18 @@ but found another document - **W3698** `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1.VirtualName` L48 in `good_core_conditions_yaml` > 'VirtualName' is ignored when 'Ebs' is specified +### W8003 - 2 missed - Fn::Equals will always return true or false + +- **W8003** → `Conditions.cApprovedAMIsRule.Fn::Not.0` L39-41 in `quickstart_config-rules_json` + > ['', ''] will always return True or False +- **W8003** → `Conditions.cApprovedAMIsRule.Fn::Not.0` L5-8 in `quickstart_nist_config_rules_yaml` + > ['', ''] will always return True or False + +### E1001 - 1 missed - Basic CloudFormation Template Configuration + +- **E1001** → `Globals` L2 in `bad_sam_globals_not_dict_yaml` + > 'notadict' is not of type 'object' + ### E1002 - 1 missed - Validate if a template size is too large - **E1002** → `Template` L1 in `bad_limit_size_yaml` @@ -2749,11 +838,6 @@ but found another document - **E1003** → `Description` L1 in `bad_limit_size_yaml` > expected maximum length: 1024, found: 1026 -### E1005 - 1 missed - Validate Transform configuration - -- **E1005** → `Transform.3.Name` L7 in `bad_templates_transform_invalid_entries_yaml` - > ['AWS::Include'] is not of type 'string' - ### E1017 - 1 missed - Select validation of parameters - **E1017** `myInstance1` → `Properties.AvailabilityZone.Fn::Select.1` L21 in `bad_functions_select_yaml` @@ -2774,6 +858,11 @@ but found another document - **E2533** `myFunction` → `Properties.Runtime` L9 in `bad_transform_serverless_template_yaml` > Runtime 'nodejs4.3' was deprecated on '2020-03-05'. Creation was disabled on '2020-02-03' and update on '2020-03-05'. Please consider updating to 'nodejs24.x' +### E3001 - 1 missed - Basic CloudFormation Resource Check + +- **E3001** `ImpossibleResourcePolicies` → `Resources.ImpossibleResourcePolicies` L96 in `good_lifecycle_intrinsic_scenarios_yaml` + > Exception "When setting condition 'Never' to True" raised while validating 'cfnLint' + ### E3005 - 1 missed - Check DependsOn values for Resources - **E3005** `ValidResource` → `DependsOn.0` L31 in `bad_core_E3001_resource_shape_yaml` @@ -2789,11 +878,6 @@ but found another document - **E3039** `myFunctionRole` → `Properties` L68 in `bad_transform_serverless_template_yaml` > The set of Attributes in AttributeDefinitions: [] and KeySchemas: ['String'] must match at Resources/myFunctionRole/Properties -### E3055 - 1 missed - Check CreationPolicy values for Resources - -- **E3055** `ScalarCreationPolicy` → `CreationPolicy` L8 in `bad_core_resource_attributes_yaml` - > 'invalid' is not of type 'object' - ### E3065 - 1 missed - Check if a list has more unique values than allowed - **E3065** `CloudWatchAlarm` → `Properties.AlarmActions` L15 in `bad_resources_properties_string_size_yaml` @@ -2869,6 +953,11 @@ but found another document - **E3720** `KmsKeyWithoutEncryption` → `Properties` L37 in `gh-issues_issue-235_yaml` > 'StorageEncrypted' is a required property +### E5001 - 1 missed - Check that Modules resources are valid + +- **E5001** `MyModule` → `Metadata.AWS::CloudFormation::Module.{'something': 'true'}` L7 in `bad_modules_bad_uses_module_metadata_yaml` + > The Metadata key AWS::CloudFormation::Module is reserved + ### E6001 - 1 missed - Check the properties of Outputs - **E6001** → `Outputs.Fn::ForEach::BucketOutputs` L33 in `bad_functions_foreach_no_transform_yaml` @@ -2879,25 +968,10 @@ but found another document - **E6010** → `Outputs` L1407 in `bad_limit_numbers_yaml` > 'Outputs' has more than 200 properties -### E7010 - 1 missed - Max number of properties for Mappings - -- **E7010** → `Mappings.Mapping201.Key` L2412 in `bad_limit_numbers_yaml` - > 'Mappings/Mapping201/Key' has more than 200 properties - -### E8005 - 1 missed - Check Fn::Not structure for validity +### F0001 - 1 missed - Basic CloudFormation Template Configuration -- **E8005** → `Conditions.TestNotNull.Fn::Not` L30 in `bad_conditions_condition_functions_json` - > None is not of type 'array' - -### F1031 - 1 missed - ToJsonString validation of parameters - -- **F1031** (cfn-lint: E1031) `Topic` → `Metadata.Custom` L14 in `bad_functions_tojsonstring_no_transform_yaml` - > Fn::ToJsonString is not supported without 'AWS::LanguageExtensions' transform - -### W2001 - 1 missed - Check if Parameters are Used - -- **W2001** → `Parameters.NullParameter` L34 in `bad_parameters_configuration_yaml` - > Parameter NullParameter not used. +- **F0001** (cfn-lint: E1001) L1 in `bad_empty_file_yaml` + > 'Resources' is a required property ### W2002 - 1 missed - Parameter type is not officially supported by CloudFormation @@ -2909,1899 +983,10 @@ but found another document - **W3691** `RDSE0E96D00` → `Properties` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` > Engine version '8.0.16' for engine 'mysql' is deprecated and cannot be used to create new RDS DB instances -### W6001 - 1 missed - Check Outputs using ImportValue - -- **W6001** → `Outputs.ImportedValue.Value.Fn::ImportValue` L39 in `good_output_value_string_yaml` - > The output value {'Fn::ImportValue': 'SomeExportedName'} is an import from another output - -## False Positives - 1037 extra findings across 20 rules +## False Positives - 126 extra findings across 26 rules These are diagnostics the engine reports but cfn-lint does not expect (potential bugs). -### W1020 - 897 extra - Sub isn't needed if it doesn't have a variable defined - -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables - -### I1022 - 42 extra - Use Sub instead of Join - -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.01-get-cloudwatch-agent.command.Fn::Join` L647 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.02-extract-cloudwatch-agent.command.Fn::Join` L662 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.10-install-cloudwatch-agent.command.Fn::Join` L673 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L816 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L833 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join` L869 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join` L887 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.scripts.watchmaker-install.sh.content.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join` L1101 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L1119 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L1137 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join` L1155 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join` L1173 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join` L1191 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L1226 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L1244 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join` L1262 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join` L1280 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join` L1298 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join` L1316 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L430 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L255 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L441 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_cfn.files..etc.cfn.cfn-hup.conf.content.Fn::Join` L261 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_cfn.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join` L261 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_wordpress.files..tmp.create-wp-config.content.Fn::Join` L324 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.nginx.files..tmp.nginx.default.conf.content.Fn::Join` L447 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.LandingPageURL.Value.Fn::Join` L92 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.WebsiteURL.Value.Fn::Join` L105 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L491 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L504 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files..root..ssh.public.key.content.Fn::Join` L1094 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files..root..ssh.public.key.content.Fn::Join` L1423 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.SetPrivateKey.files..root..ssh.id_rsa.content.Fn::Join` L324 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.ContainerAccessELBName.Value.Fn::Join` L123 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.OpenShiftUI.Value.Fn::Join` L132 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L687 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L705 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter - ### E0001 - 34 extra - **E0001** `MyApi` (AWS::Serverless::Api) → `Properties/StageName` L3 in `bad_sam_api_missing_stagename_yaml` @@ -4873,32 +1058,30 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E0001** `myFunction` (AWS::Serverless::Function) → `Properties/Events/MyTimer` L39 in `bad_transform_serverless_template_yaml` > Error transforming template: Resource with id [myFunctionMyTimer] is invalid. Missing required property 'Schedule'. -### I3011 - 12 extra - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy - -- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +### I3042 - 11 extra - ARNs should use correctly placed Pseudo Parameters + +- **I3042** `SubBlock` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L125 in `good_both_forms_yaml` + > ARN in Resource SubBlock contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithBase64` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L85 in `good_both_forms_yaml` + > ARN in Resource WithBase64 contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithCidr` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L115 in `good_both_forms_yaml` + > ARN in Resource WithCidr contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithFindInMap` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L75 in `good_both_forms_yaml` + > ARN in Resource WithFindInMap contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithGetAZs` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L108 in `good_both_forms_yaml` + > ARN in Resource WithGetAZs contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithGetAtt` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L36 in `good_both_forms_yaml` + > ARN in Resource WithGetAtt contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithIf` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L65 in `good_both_forms_yaml` + > ARN in Resource WithIf contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithImport` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L101 in `good_both_forms_yaml` + > ARN in Resource WithImport contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithJoin` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L47 in `good_both_forms_yaml` + > ARN in Resource WithJoin contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithSelect` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L56 in `good_both_forms_yaml` + > ARN in Resource WithSelect contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithSplit` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L92 in `good_both_forms_yaml` + > ARN in Resource WithSplit contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters ### E3639 - 10 extra - When BillingMode is Provisioned you must specify ProvisionedThroughput @@ -4923,6 +1106,42 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3639** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.ProvisionedThroughput` L20 in `good_resources_dynamodb_attributes_transform_yaml` > ProvisionedThroughput is required when BillingMode defaults to 'PROVISIONED' +### E8004 - 8 extra - Check Fn::And structure for validity + +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L20 in `bad_conditions_and_yaml` + > Fn::And: element 0: 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L20 in `bad_conditions_and_yaml` + > Fn::And: element 1: 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L19 in `bad_conditions_and_yaml` + > Fn::And: element 0: {'Condition': 'TestAndToMany', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L19 in `bad_conditions_and_yaml` + > Fn::And: element 1: {'Bad': 'TestAndToMany'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L11 in `bad_conditions_condition_functions_json` + > Fn::And: element 0: 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L11 in `bad_conditions_condition_functions_json` + > Fn::And: element 1: 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L13 in `bad_conditions_condition_functions_json` + > Fn::And: element 0: {'Condition': 'TestAndString', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L13 in `bad_conditions_condition_functions_json` + > Fn::And: element 1: {'Bad': 'TestAndString'} is not of type 'boolean' + +### E8003 - 7 extra - Check Fn::Equals structure for validity + +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals` L23 in `bad_conditions_condition_functions_json` + > Fn::Equals: argument 0: [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals` L23 in `bad_conditions_condition_functions_json` + > Fn::Equals: argument 1: {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals` L11 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 0: [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals` L11 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 1: {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.TestWrongType.Fn::Equals` L12 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 1: ['Not a List'] is not of type 'string' +- **E8003** → `Conditions.ToManyFunctions.Fn::Equals` L18 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 0: {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' +- **E8003** → `Conditions.primaryRegion.Fn::Equals` L4 in `bad_functions_import_value_yaml` + > Fn::Equals: argument 1: {'Fn::ImportValue': 'PrimaryRegion'} is not of type 'string' + ### E3023 - 6 extra - Validate Route53 RecordSets - **E3023** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.RecordSets.0.ResourceRecords.1` L117 in `bad_route53_conditional_record_arrays_yaml` @@ -4938,6 +1157,21 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3023** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.ResourceRecords` L125 in `bad_route53_conditional_record_arrays_yaml` > CNAME records must have at most 1 ResourceRecord +### W2506 - 6 extra - Check if ImageId Parameters have the correct type + +- **W2506** → `Parameters.SsmStringImageParam` L7 in `gh-issues_issue-34_json` + > Parameter 'SsmStringImageParam' is used as an ImageId but has Type 'AWS::SSM::Parameter::Value' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pNatAmi` L47 in `quickstart_nat-instance_json` + > Parameter 'pNatAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pAppAmi` L125 in `quickstart_nist_application_yaml` + > Parameter 'pAppAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pWebServerAMI` L213 in `quickstart_nist_application_yaml` + > Parameter 'pWebServerAMI' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pBastionAmi` L192 in `quickstart_nist_vpc_management_yaml` + > Parameter 'pBastionAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pBastionAmi` L134 in `quickstart_vpc-management_json` + > Parameter 'pBastionAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' + ### E3019 - 4 extra - Validate that all resources have unique primary identifiers - **E3019** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` @@ -4971,14 +1205,25 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3055** `MyBucket` (AWS::S3::Bucket) → `CreationPolicy` L5 in `bad_resources_creation_policy_unsupported_e3055_yaml` > CreationPolicy is not supported on resource type 'AWS::S3::Bucket' -### E3510 - 3 extra - Validate identity based IAM polices +### F2012 - 4 extra -- **E3510** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument` L38 in `bad_resources_iam_iam_policy_yaml` - > [{"Statement":{}}] is not of type 'object' -- **E3510** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyDocument.Id` L47 in `bad_resources_iam_identity_policy_e3510_yaml` - > Additional properties are not allowed ('Id' was unexpected) -- **E3510** `WildcardServicePolicy` (AWS::IAM::ManagedPolicy) → `Properties.PolicyDocument.Statement.0.Resource` L13 in `bad_resources_iam_identity_policy_wildcard_service_yaml` - > 'arn:aws:*:::example-bucket/*' does not match '^(arn:(aws[A-Za-z\-]*?|[A-Za-z?*\-]*[?*][A-Za-z?*\-]*):[^:*?]+:[^:]*(:(?:\d{12}|\*|aws)?:.+|)|\*)$' +- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` + > Parameter 'CDLAllowedValues' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` + > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] + +### E1005 - 3 extra - Validate Transform configuration + +- **E1005** → `Transform` L4 in `bad_templates_transform_invalid_entries_yaml` + > Transform entry must be a transform name or a {Name, Parameters} object, got a number +- **E1005** → `Transform` L6 in `bad_templates_transform_invalid_entries_yaml` + > Transform 'Parameters' must be an object, got a string +- **E1005** → `Transform` L7 in `bad_templates_transform_invalid_entries_yaml` + > Transform 'Name' must be a string, got a list ### F0018 - 3 extra - Check UpdateReplacePolicy values for Resources @@ -5007,14 +1252,12 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **F3017** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` > 'rdsadmin' at 'MasterUsername' does not satisfy the composition branch constraint (none of ['rdsadmin']): 'rdsadmin' must not be one of ['rdsadmin'] -### W2010 - 3 extra - NoEcho parameters are not masked when used in Metadata and Outputs +### E3001 - 2 extra - Basic CloudFormation Resource Check -- **W2010** (AWS::SNS::Topic) → `Metadata.NoEchoParamInMetadata` L13 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** (AWS::SNS::Topic) → `Metadata.NoEchoParamInMetadata` L19 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_wordpress.files..tmp.create-wp-config.content.Fn::Join.1.9` L343 in `quickstart_nist_application_yaml` - > Don't use 'NoEcho' parameter 'pDBPassword' in resource metadata +- **E3001** `UnsupportedAttributes` (AWS::S3::Bucket) → `Connectors` L20 in `bad_core_resource_attributes_yaml` + > Resource 'UnsupportedAttributes' has invalid property 'Connectors'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, Crea +- **E3001** `mySnsTopic` (AWS::SNS::Topic) → `Parameters` L15 in `bad_duplicate_yaml` + > Resource 'mySnsTopic' has invalid property 'Parameters'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, CreationPolicy, ### E3029 - 2 extra - Validate Route53 record set aliases @@ -5023,15570 +1266,64 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3029** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.AliasTarget` L48 in `bad_route53_conditional_scenarios_yaml` > AliasTarget cannot be used with record type 'SOA' -### F1018 - 2 extra - Sub validation of parameters +### E8007 - 2 extra + +- **E8007** L11 in `bad_E8007_condition_undefined_in_expr_yaml` + > Condition 'IsHighAvailability' references undefined condition 'DoesNotExist' +- **E8007** L8 in `bad_core_conditions_missing_yaml` + > Condition 'isPrimaryAndProduction' references undefined condition 'isPrimary' + +### F0013 - 2 extra - Conditions have appropriate properties -- **F1018** (AWS::S3::Bucket) → `Metadata.Test` L19 in `lsp_constants_json` - > Fn::Sub variable '${sub}' does not reference a valid resource, parameter, or pseudo-parameter -- **F1018** (AWS::S3::Bucket) → `Metadata.Test` L15 in `lsp_constants_yaml` - > Fn::Sub variable '${sub}' does not reference a valid resource, parameter, or pseudo-parameter +- **F0013** → `Conditions.TestIfNotArray.Fn::If` L31 in `bad_conditions_condition_functions_json` + > Fn::If: 'string' is not of type 'array' +- **F0013** → `Conditions.TestIfWrongCount.Fn::If` L32 in `bad_conditions_condition_functions_json` + > Fn::If: must have exactly 3 elements, got 2 -### F1020 - 2 extra - Ref validation of value +### W8003 - 2 extra - Fn::Equals will always return true or false -- **F1020** (AWS::S3::Bucket) → `Metadata.TestObj` L22 in `lsp_constants_json` - > 'obj' is not one of ['AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix', 'Bucket', 'PersonalS3'] -- **F1020** (AWS::S3::Bucket) → `Metadata.TestObj` L16 in `lsp_constants_yaml` - > 'obj' is not one of ['AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix', 'Bucket', 'PersonalS3'] +- **W8003** → `Conditions.cApprovedAMIsRule` L38 in `quickstart_config-rules_json` + > Fn::Equals in condition 'cApprovedAMIsRule' will always return True +- **W8003** → `Conditions.cApprovedAMIsRule` L3 in `quickstart_nist_config_rules_yaml` + > Fn::Equals in condition 'cApprovedAMIsRule' will always return True + +### E1028 - 1 extra + +- **E1028** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument.0.Fn::If.0` L40 in `bad_resources_iam_iam_policy_yaml` + > Fn::If condition 'cCondition' does not exist in Conditions section ### E1155 - 1 extra - **E1155** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` > 'invalid ${literal' does not match format 'AWS::Logs::LogGroup.Name' -### E3001 - 1 extra - Basic CloudFormation Resource Check +### E3510 - 1 extra - Validate identity based IAM polices -- **E3001** `myBucketFirstAndLastPass` (AWS::S3::Bucket) L19 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastPass' has invalid property 'BadProperty'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, +- **E3510** `WildcardServicePolicy` (AWS::IAM::ManagedPolicy) → `Properties.PolicyDocument.Statement.0.Resource` L13 in `bad_resources_iam_identity_policy_wildcard_service_yaml` + > 'arn:aws:*:::example-bucket/*' does not match '^(arn:(aws[A-Za-z\-]*?|[A-Za-z?*\-]*[?*][A-Za-z?*\-]*):[^:*?]+:[^:]*(:(?:\d{12}|\*|aws)?:.+|)|\*)$' -### F1031 - 1 extra - ToJsonString validation of parameters +### F1012 - 1 extra -- **F1031** (AWS::SNS::Topic) → `Metadata.Custom` L14 in `bad_functions_tojsonstring_no_transform_yaml` - > Fn::ToJsonString requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1012** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId.Fn::FindInMap.0` L9 in `bad_functions_base64_yaml` + > Fn::FindInMap references non-existent mapping 'amimap' -## Engine Extra - 8293 correct findings across 43 rules +### W1001 - 1 extra - Ref/GetAtt to resource that is available when conditions are applied -These are correct diagnostics the engine reports that cfn-lint does not cover. +- **W1001** → `Outputs.lambdaArn.Value.Fn::GetAtt` L63 in `bad_functions_relationship_conditions_yaml` + > Reference to 'LambdaExecutionRole' which is conditional on 'isPrimary' - target may not exist -### I9001 - 5465 findings +### W2509 - 1 extra -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `bad_E1050_dynamic_ref_malformed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L11 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `A` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `B` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `C` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `D` (AWS::S3::Bucket) → `Properties.BucketName` L21 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `JoinBucket` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralA` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralB` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `RefBucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L19 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L20 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L24 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `bad_E3023_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `bad_E3023_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `bad_E3023_conditional_record_items_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerLiteral` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L21 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerParam` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L40 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L29 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L28 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L27 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L48 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L47 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L46 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerB` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L20 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L28 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.ResourceId` L27 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.RestApiId` L26 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `GoodCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L34 in `bad_F3006_invalid_aws_namespaces_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `bad_F3018_conditional_required_novalue_yaml` - > Property 'PermissionModel' is create-only; updating it will cause resource replacement -- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `bad_F3018_conditional_required_novalue_yaml` - > Property 'StackSetName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `VpcControl` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `bad_I9001_conditional_create_only_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.CidrBlock` L8 in `bad_I9001_conditional_create_only_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `bad_I9001_conditional_create_only_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_W1028_allowedvalues_excludes_literal_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L8 in `bad_W1053_dynref_spaces_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_W1054_raw_pseudo_param_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L13 in `bad_W3010_full_coverage_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L45 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.AvailabilityZone` L17 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L18 in `bad_W3010_full_coverage_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L22 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `bad_W3010_full_coverage_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `bad_W3010_full_coverage_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.AvailabilityZone` L63 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.Engine` L65 in `bad_W3010_full_coverage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L36 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L35 in `bad_W3010_full_coverage_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L34 in `bad_W3010_full_coverage_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L54 in `bad_W3010_full_coverage_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L55 in `bad_W3010_full_coverage_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L56 in `bad_W3010_full_coverage_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L15 in `bad_W3030_enum_case_insensitive_mismatch_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `bad_W3030_enum_case_insensitive_mismatch_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L10 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `bad_aurora_with_allocated_storage_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `bad_aurora_with_allocated_storage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L56 in `bad_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.Device` L75 in `bad_conditions_yaml` - > Property 'Device' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.InstanceId` L73 in `bad_conditions_yaml` - > Property 'InstanceId' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.VolumeId` L74 in `bad_conditions_yaml` - > Property 'VolumeId' is create-only; updating it will cause resource replacement -- **I9001** `BadConditionType` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ValidResource` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L92 in `bad_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L87 in `bad_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `bad_core_conditions_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L36 in `bad_core_conditions_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L65 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L66 in `bad_core_conditions_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `bad_core_conditions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `bad_core_conditions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L21 in `bad_core_config_configure_e3012_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L17 in `bad_core_config_configure_e3012_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L10 in `bad_cross_resource_task10_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L42 in `bad_cross_resource_task10_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BadFargateService` (AWS::ECS::Service) → `Properties.LaunchType` L76 in `bad_cross_resource_task10_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L55 in `bad_cross_resource_task10_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.PackageType` L56 in `bad_cross_resource_task10_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L20 in `bad_cross_resource_task10_yaml` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L14 in `bad_cross_resource_task10_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L15 in `bad_cross_resource_task10_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L35 in `bad_cross_resource_task10_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L36 in `bad_cross_resource_task10_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L37 in `bad_cross_resource_task10_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `bad_cross_resource_task10_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `bad_cross_resource_task10_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `bad_cross_resource_task10_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_cross_resource_task10_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_cross_resource_task10_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MySNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L26 in `bad_duplicate_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_duplicate_primary_id_multi_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `bad_duplicate_primary_id_multi_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_duplicate_primary_id_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_duplicate_primary_id_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_attribute_mismatch_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_attribute_mismatch_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_prod_no_kms_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.TableName` L7 in `bad_dynamodb_prod_no_kms_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L15 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L16 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L17 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `bad_ecs_fargate_mismatch_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `bad_ecs_fargate_mismatch_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L8 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L9 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `bad_ecs_fargate_mismatch_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `bad_ecs_role_no_boundary_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L27 in `bad_ecs_role_no_boundary_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L26 in `bad_ecs_role_no_boundary_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L6 in `bad_elb_http_443_yaml` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.Cluster` L9 in `bad_fargate_daemon_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.LaunchType` L6 in `bad_fargate_daemon_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L7 in `bad_fargate_daemon_yaml` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `bad_fargate_daemon_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L16 in `bad_fargate_daemon_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `bad_fargate_daemon_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L17 in `bad_fargate_daemon_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L18 in `bad_fargate_daemon_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L14 in `bad_fargate_daemon_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_findinmap_bad_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_formatters_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L9 in `bad_formatters_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_base64_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L10 in `bad_functions_base64_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L11 in `bad_functions_findinmap_enhanced_invalid_key_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L22 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L33 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L31 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `bad_functions_import_value_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L12 in `bad_functions_import_value_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_join_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L10 in `bad_functions_join_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `bad_functions_join_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.UserData` L20 in `bad_functions_join_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L54 in `bad_functions_ref_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L51 in `bad_functions_ref_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L52 in `bad_functions_ref_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L53 in `bad_functions_ref_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L62 in `bad_functions_ref_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L65 in `bad_functions_ref_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L35 in `bad_functions_ref_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_functions_ref_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L33 in `bad_functions_ref_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L34 in `bad_functions_ref_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L43 in `bad_functions_ref_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L46 in `bad_functions_ref_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `bad_functions_ref_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L12 in `bad_functions_ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_functions_ref_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `bad_functions_ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L30 in `bad_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `bad_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L10 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L18 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L17 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L27 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L35 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AdditionalInfo` L12 in `bad_functions_sub_needed_yaml` - > Property 'AdditionalInfo' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `bad_functions_sub_needed_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `mySnsTopic` (AWS::SNS::Topic) → `Properties.TopicName` L33 in `bad_functions_sub_needed_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L113 in `bad_generic_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L122 in `bad_generic_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L48 in `bad_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L43 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L44 in `bad_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L45 in `bad_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L63 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L222 in `bad_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.ImageId` L219 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.InstanceType` L220 in `bad_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.KeyName` L221 in `bad_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L223 in `bad_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L212 in `bad_generic_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L213 in `bad_generic_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L105 in `bad_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L81 in `bad_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L139 in `bad_generic_yaml` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L196 in `bad_generic_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L204 in `bad_generic_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `myAcl` (AWS::WAFRegional::WebACL) → `Properties.Name` L143 in `bad_generic_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L15 in `bad_hard_coded_arn_properties_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L36 in `bad_hard_coded_arn_properties_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_hardcoded_partition_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L10 in `bad_hardcoded_partition_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `Role` (AWS::IAM::Role) → `Properties.Path` L6 in `bad_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `R` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_if_wrong_arity_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.EngineName` L6 in `bad_issues_yaml` - > Property 'EngineName' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.MajorEngineVersion` L7 in `bad_issues_yaml` - > Property 'MajorEngineVersion' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.OptionGroupDescription` L8 in `bad_issues_yaml` - > Property 'OptionGroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Fn` (AWS::Lambda::Function) → `Properties.PackageType` L11 in `bad_lambda_image_handler_intrinsic_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_no_snapstart_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `bad_lambda_permission_no_source_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `bad_lambda_permission_no_source_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `bad_lambda_permission_no_source_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `bad_lambda_permission_no_source_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_snapstart_bad_runtime_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L21 in `bad_lambda_sqs_timeout_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zip_no_handler_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zipfile_java_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.ImageId` L89 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.InstanceType` L90 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.UserData` L91 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.ImageId` L980 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.InstanceType` L981 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.UserData` L982 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.ImageId` L9890 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.InstanceType` L9891 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.UserData` L9892 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.ImageId` L9989 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.InstanceType` L9990 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.UserData` L9991 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.ImageId` L10088 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.InstanceType` L10089 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.UserData` L10090 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.ImageId` L10187 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.InstanceType` L10188 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.UserData` L10189 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.ImageId` L10286 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.InstanceType` L10287 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.UserData` L10288 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.ImageId` L10385 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.InstanceType` L10386 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.UserData` L10387 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.ImageId` L10484 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.InstanceType` L10485 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.UserData` L10486 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.ImageId` L10583 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.InstanceType` L10584 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.UserData` L10585 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.ImageId` L10682 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.InstanceType` L10683 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.UserData` L10684 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.ImageId` L10781 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.InstanceType` L10782 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.UserData` L10783 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.ImageId` L1079 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.InstanceType` L1080 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.UserData` L1081 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.ImageId` L10880 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.InstanceType` L10881 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.UserData` L10882 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.ImageId` L10979 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.InstanceType` L10980 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.UserData` L10981 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.ImageId` L11078 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.InstanceType` L11079 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.UserData` L11080 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.ImageId` L11177 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.InstanceType` L11178 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.UserData` L11179 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.ImageId` L11276 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.InstanceType` L11277 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.UserData` L11278 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.ImageId` L11375 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.InstanceType` L11376 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.UserData` L11377 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.ImageId` L11474 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.InstanceType` L11475 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.UserData` L11476 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.ImageId` L11573 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.InstanceType` L11574 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.UserData` L11575 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.ImageId` L11672 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.InstanceType` L11673 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.UserData` L11674 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.ImageId` L11771 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.InstanceType` L11772 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.UserData` L11773 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.ImageId` L1178 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.InstanceType` L1179 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.UserData` L1180 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.ImageId` L11870 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.InstanceType` L11871 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.UserData` L11872 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.ImageId` L11969 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.InstanceType` L11970 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.UserData` L11971 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.ImageId` L12068 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.InstanceType` L12069 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.UserData` L12070 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.ImageId` L12167 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.InstanceType` L12168 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.UserData` L12169 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.ImageId` L12266 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.InstanceType` L12267 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.UserData` L12268 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.ImageId` L12365 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.InstanceType` L12366 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.UserData` L12367 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.ImageId` L12464 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.InstanceType` L12465 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.UserData` L12466 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.ImageId` L12563 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.InstanceType` L12564 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.UserData` L12565 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.ImageId` L12662 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.InstanceType` L12663 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.UserData` L12664 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.ImageId` L12761 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.InstanceType` L12762 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.UserData` L12763 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.ImageId` L1277 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.InstanceType` L1278 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.UserData` L1279 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.ImageId` L12860 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.InstanceType` L12861 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.UserData` L12862 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.ImageId` L12959 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.InstanceType` L12960 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.UserData` L12961 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.ImageId` L13058 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.InstanceType` L13059 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.UserData` L13060 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.ImageId` L13157 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.InstanceType` L13158 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.UserData` L13159 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.ImageId` L13256 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.InstanceType` L13257 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.UserData` L13258 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.ImageId` L13355 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.InstanceType` L13356 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.UserData` L13357 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.ImageId` L13454 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.InstanceType` L13455 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.UserData` L13456 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.ImageId` L13553 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.InstanceType` L13554 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.UserData` L13555 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.ImageId` L13652 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.InstanceType` L13653 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.UserData` L13654 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.ImageId` L13751 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.InstanceType` L13752 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.UserData` L13753 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.ImageId` L1376 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.InstanceType` L1377 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.UserData` L1378 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.ImageId` L13850 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.InstanceType` L13851 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.UserData` L13852 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.ImageId` L13949 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.InstanceType` L13950 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.UserData` L13951 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.ImageId` L14048 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.InstanceType` L14049 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.UserData` L14050 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.ImageId` L14147 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.InstanceType` L14148 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.UserData` L14149 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.ImageId` L14246 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.InstanceType` L14247 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.UserData` L14248 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.ImageId` L14345 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.InstanceType` L14346 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.UserData` L14347 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.ImageId` L14444 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.InstanceType` L14445 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.UserData` L14446 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.ImageId` L14543 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.InstanceType` L14544 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.UserData` L14545 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.ImageId` L14642 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.InstanceType` L14643 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.UserData` L14644 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.ImageId` L14741 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.InstanceType` L14742 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.UserData` L14743 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.ImageId` L1475 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.InstanceType` L1476 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.UserData` L1477 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.ImageId` L14840 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.InstanceType` L14841 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.UserData` L14842 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.ImageId` L14939 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.InstanceType` L14940 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.UserData` L14941 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.ImageId` L15038 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.InstanceType` L15039 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.UserData` L15040 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.ImageId` L15137 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.InstanceType` L15138 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.UserData` L15139 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.ImageId` L15236 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.InstanceType` L15237 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.UserData` L15238 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.ImageId` L15335 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.InstanceType` L15336 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.UserData` L15337 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.ImageId` L15434 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.InstanceType` L15435 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.UserData` L15436 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.ImageId` L15533 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.InstanceType` L15534 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.UserData` L15535 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.ImageId` L15632 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.InstanceType` L15633 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.UserData` L15634 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.ImageId` L15731 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.InstanceType` L15732 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.UserData` L15733 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.ImageId` L1574 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.InstanceType` L1575 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.UserData` L1576 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.ImageId` L15830 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.InstanceType` L15831 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.UserData` L15832 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.ImageId` L15929 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.InstanceType` L15930 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.UserData` L15931 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.ImageId` L16028 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.InstanceType` L16029 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.UserData` L16030 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.ImageId` L16127 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.InstanceType` L16128 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.UserData` L16129 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.ImageId` L16226 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.InstanceType` L16227 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.UserData` L16228 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.ImageId` L16325 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.InstanceType` L16326 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.UserData` L16327 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.ImageId` L16424 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.InstanceType` L16425 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.UserData` L16426 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.ImageId` L16523 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.InstanceType` L16524 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.UserData` L16525 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.ImageId` L16622 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.InstanceType` L16623 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.UserData` L16624 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.ImageId` L16721 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.InstanceType` L16722 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.UserData` L16723 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.ImageId` L1673 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.InstanceType` L1674 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.UserData` L1675 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.ImageId` L16820 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.InstanceType` L16821 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.UserData` L16822 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.ImageId` L16919 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.InstanceType` L16920 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.UserData` L16921 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.ImageId` L17018 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.InstanceType` L17019 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.UserData` L17020 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.ImageId` L17117 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.InstanceType` L17118 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.UserData` L17119 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.ImageId` L17216 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.InstanceType` L17217 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.UserData` L17218 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.ImageId` L17315 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.InstanceType` L17316 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.UserData` L17317 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.ImageId` L17414 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.InstanceType` L17415 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.UserData` L17416 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.ImageId` L17513 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.InstanceType` L17514 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.UserData` L17515 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.ImageId` L17612 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.InstanceType` L17613 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.UserData` L17614 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.ImageId` L17711 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.InstanceType` L17712 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.UserData` L17713 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.ImageId` L1772 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.InstanceType` L1773 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.UserData` L1774 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.ImageId` L17810 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.InstanceType` L17811 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.UserData` L17812 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.ImageId` L17909 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.InstanceType` L17910 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.UserData` L17911 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.ImageId` L18008 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.InstanceType` L18009 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.UserData` L18010 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.ImageId` L18107 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.InstanceType` L18108 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.UserData` L18109 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.ImageId` L18206 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.InstanceType` L18207 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.UserData` L18208 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.ImageId` L18305 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.InstanceType` L18306 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.UserData` L18307 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.ImageId` L18404 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.InstanceType` L18405 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.UserData` L18406 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.ImageId` L18503 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.InstanceType` L18504 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.UserData` L18505 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.ImageId` L18602 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.InstanceType` L18603 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.UserData` L18604 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.ImageId` L18701 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.InstanceType` L18702 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.UserData` L18703 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.ImageId` L1871 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.InstanceType` L1872 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.UserData` L1873 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.ImageId` L18800 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.InstanceType` L18801 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.UserData` L18802 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.ImageId` L18899 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.InstanceType` L18900 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.UserData` L18901 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.ImageId` L18998 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.InstanceType` L18999 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.UserData` L19000 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.ImageId` L19097 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.InstanceType` L19098 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.UserData` L19099 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.ImageId` L19196 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.InstanceType` L19197 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.UserData` L19198 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.ImageId` L19295 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.InstanceType` L19296 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.UserData` L19297 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.ImageId` L19394 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.InstanceType` L19395 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.UserData` L19396 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.ImageId` L19493 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.InstanceType` L19494 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.UserData` L19495 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.ImageId` L19592 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.InstanceType` L19593 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.UserData` L19594 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.ImageId` L19691 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.InstanceType` L19692 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.UserData` L19693 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.ImageId` L188 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.InstanceType` L189 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.UserData` L190 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.ImageId` L1970 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.InstanceType` L1971 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.UserData` L1972 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.ImageId` L19790 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.InstanceType` L19791 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.UserData` L19792 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.ImageId` L19889 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.InstanceType` L19890 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.UserData` L19891 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.ImageId` L19988 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.InstanceType` L19989 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.UserData` L19990 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.ImageId` L20087 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.InstanceType` L20088 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.UserData` L20089 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.ImageId` L20186 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.InstanceType` L20187 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.UserData` L20188 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.ImageId` L20285 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.InstanceType` L20286 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.UserData` L20287 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.ImageId` L20384 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.InstanceType` L20385 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.UserData` L20386 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.ImageId` L20483 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.InstanceType` L20484 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.UserData` L20485 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.ImageId` L20582 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.InstanceType` L20583 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.UserData` L20584 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.ImageId` L20681 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.InstanceType` L20682 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.UserData` L20683 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.ImageId` L2069 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.InstanceType` L2070 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.UserData` L2071 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.ImageId` L20780 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.InstanceType` L20781 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.UserData` L20782 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.ImageId` L20879 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.InstanceType` L20880 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.UserData` L20881 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.ImageId` L20978 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.InstanceType` L20979 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.UserData` L20980 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.ImageId` L21077 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.InstanceType` L21078 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.UserData` L21079 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.ImageId` L21176 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.InstanceType` L21177 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.UserData` L21178 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.ImageId` L21275 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.InstanceType` L21276 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.UserData` L21277 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.ImageId` L21374 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.InstanceType` L21375 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.UserData` L21376 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.ImageId` L21473 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.InstanceType` L21474 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.UserData` L21475 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.ImageId` L21572 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.InstanceType` L21573 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.UserData` L21574 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.ImageId` L21671 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.InstanceType` L21672 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.UserData` L21673 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.ImageId` L2168 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.InstanceType` L2169 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.UserData` L2170 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.ImageId` L21770 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.InstanceType` L21771 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.UserData` L21772 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.ImageId` L21869 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.InstanceType` L21870 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.UserData` L21871 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.ImageId` L21968 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.InstanceType` L21969 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.UserData` L21970 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.ImageId` L22067 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.InstanceType` L22068 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.UserData` L22069 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.ImageId` L22166 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.InstanceType` L22167 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.UserData` L22168 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.ImageId` L22265 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.InstanceType` L22266 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.UserData` L22267 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.ImageId` L22364 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.InstanceType` L22365 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.UserData` L22366 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.ImageId` L22463 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.InstanceType` L22464 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.UserData` L22465 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.ImageId` L22562 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.InstanceType` L22563 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.UserData` L22564 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.ImageId` L22661 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.InstanceType` L22662 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.UserData` L22663 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.ImageId` L2267 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.InstanceType` L2268 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.UserData` L2269 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.ImageId` L22760 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.InstanceType` L22761 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.UserData` L22762 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.ImageId` L22859 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.InstanceType` L22860 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.UserData` L22861 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.ImageId` L22958 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.InstanceType` L22959 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.UserData` L22960 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.ImageId` L23057 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.InstanceType` L23058 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.UserData` L23059 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.ImageId` L23156 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.InstanceType` L23157 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.UserData` L23158 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.ImageId` L23255 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.InstanceType` L23256 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.UserData` L23257 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.ImageId` L23354 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.InstanceType` L23355 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.UserData` L23356 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.ImageId` L23453 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.InstanceType` L23454 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.UserData` L23455 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.ImageId` L23552 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.InstanceType` L23553 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.UserData` L23554 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.ImageId` L23651 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.InstanceType` L23652 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.UserData` L23653 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.ImageId` L2366 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.InstanceType` L2367 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.UserData` L2368 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.ImageId` L23750 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.InstanceType` L23751 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.UserData` L23752 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.ImageId` L23849 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.InstanceType` L23850 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.UserData` L23851 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.ImageId` L23948 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.InstanceType` L23949 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.UserData` L23950 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.ImageId` L24047 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.InstanceType` L24048 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.UserData` L24049 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.ImageId` L24146 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.InstanceType` L24147 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.UserData` L24148 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.ImageId` L24245 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.InstanceType` L24246 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.UserData` L24247 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.ImageId` L24344 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.InstanceType` L24345 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.UserData` L24346 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.ImageId` L24443 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.InstanceType` L24444 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.UserData` L24445 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.ImageId` L24542 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.InstanceType` L24543 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.UserData` L24544 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.ImageId` L24641 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.InstanceType` L24642 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.UserData` L24643 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.ImageId` L2465 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.InstanceType` L2466 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.UserData` L2467 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.ImageId` L24740 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.InstanceType` L24741 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.UserData` L24742 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.ImageId` L24839 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.InstanceType` L24840 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.UserData` L24841 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.ImageId` L24938 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.InstanceType` L24939 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.UserData` L24940 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.ImageId` L25037 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.InstanceType` L25038 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.UserData` L25039 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.ImageId` L25136 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.InstanceType` L25137 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.UserData` L25138 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.ImageId` L25235 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.InstanceType` L25236 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.UserData` L25237 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.ImageId` L25334 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.InstanceType` L25335 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.UserData` L25336 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.ImageId` L25433 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.InstanceType` L25434 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.UserData` L25435 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.ImageId` L25532 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.InstanceType` L25533 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.UserData` L25534 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.ImageId` L25631 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.InstanceType` L25632 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.UserData` L25633 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.ImageId` L2564 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.InstanceType` L2565 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.UserData` L2566 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.ImageId` L25730 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.InstanceType` L25731 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.UserData` L25732 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.ImageId` L25829 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.InstanceType` L25830 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.UserData` L25831 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.ImageId` L25928 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.InstanceType` L25929 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.UserData` L25930 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.ImageId` L26027 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.InstanceType` L26028 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.UserData` L26029 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.ImageId` L26126 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.InstanceType` L26127 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.UserData` L26128 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.ImageId` L26225 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.InstanceType` L26226 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.UserData` L26227 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.ImageId` L26324 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.InstanceType` L26325 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.UserData` L26326 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.ImageId` L26423 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.InstanceType` L26424 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.UserData` L26425 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.ImageId` L26522 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.InstanceType` L26523 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.UserData` L26524 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.ImageId` L26621 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.InstanceType` L26622 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.UserData` L26623 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.ImageId` L2663 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.InstanceType` L2664 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.UserData` L2665 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.ImageId` L26720 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.InstanceType` L26721 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.UserData` L26722 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.ImageId` L26819 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.InstanceType` L26820 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.UserData` L26821 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.ImageId` L26918 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.InstanceType` L26919 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.UserData` L26920 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.ImageId` L27017 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.InstanceType` L27018 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.UserData` L27019 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.ImageId` L27116 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.InstanceType` L27117 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.UserData` L27118 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.ImageId` L27215 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.InstanceType` L27216 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.UserData` L27217 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.ImageId` L27314 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.InstanceType` L27315 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.UserData` L27316 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.ImageId` L27413 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.InstanceType` L27414 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.UserData` L27415 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.ImageId` L27512 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.InstanceType` L27513 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.UserData` L27514 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.ImageId` L27611 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.InstanceType` L27612 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.UserData` L27613 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.ImageId` L2762 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.InstanceType` L2763 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.UserData` L2764 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.ImageId` L27710 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.InstanceType` L27711 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.UserData` L27712 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.ImageId` L27809 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.InstanceType` L27810 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.UserData` L27811 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.ImageId` L27908 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.InstanceType` L27909 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.UserData` L27910 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.ImageId` L28007 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.InstanceType` L28008 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.UserData` L28009 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.ImageId` L28106 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.InstanceType` L28107 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.UserData` L28108 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.ImageId` L28205 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.InstanceType` L28206 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.UserData` L28207 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.ImageId` L28304 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.InstanceType` L28305 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.UserData` L28306 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.ImageId` L28403 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.InstanceType` L28404 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.UserData` L28405 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.ImageId` L28502 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.InstanceType` L28503 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.UserData` L28504 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.ImageId` L28601 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.InstanceType` L28602 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.UserData` L28603 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.ImageId` L2861 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.InstanceType` L2862 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.UserData` L2863 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.ImageId` L28700 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.InstanceType` L28701 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.UserData` L28702 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.ImageId` L28799 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.InstanceType` L28800 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.UserData` L28801 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.ImageId` L28898 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.InstanceType` L28899 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.UserData` L28900 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.ImageId` L28997 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.InstanceType` L28998 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.UserData` L28999 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.ImageId` L29096 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.InstanceType` L29097 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.UserData` L29098 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.ImageId` L29195 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.InstanceType` L29196 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.UserData` L29197 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.ImageId` L29294 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.InstanceType` L29295 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.UserData` L29296 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.ImageId` L29393 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.InstanceType` L29394 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.UserData` L29395 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.ImageId` L29492 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.InstanceType` L29493 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.UserData` L29494 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.ImageId` L29591 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.InstanceType` L29592 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.UserData` L29593 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.ImageId` L287 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.InstanceType` L288 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.UserData` L289 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.ImageId` L2960 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.InstanceType` L2961 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.UserData` L2962 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.ImageId` L3059 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.InstanceType` L3060 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.UserData` L3061 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.ImageId` L3158 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.InstanceType` L3159 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.UserData` L3160 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.ImageId` L3257 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.InstanceType` L3258 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.UserData` L3259 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.ImageId` L3356 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.InstanceType` L3357 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.UserData` L3358 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.ImageId` L3455 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.InstanceType` L3456 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.UserData` L3457 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.ImageId` L3554 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.InstanceType` L3555 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.UserData` L3556 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.ImageId` L3653 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.InstanceType` L3654 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.UserData` L3655 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.ImageId` L3752 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.InstanceType` L3753 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.UserData` L3754 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.ImageId` L3851 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.InstanceType` L3852 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.UserData` L3853 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.ImageId` L386 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.InstanceType` L387 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.UserData` L388 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.ImageId` L3950 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.InstanceType` L3951 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.UserData` L3952 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.ImageId` L4049 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.InstanceType` L4050 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.UserData` L4051 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.ImageId` L4148 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.InstanceType` L4149 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.UserData` L4150 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.ImageId` L4247 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.InstanceType` L4248 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.UserData` L4249 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.ImageId` L4346 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.InstanceType` L4347 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.UserData` L4348 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.ImageId` L4445 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.InstanceType` L4446 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.UserData` L4447 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.ImageId` L4544 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.InstanceType` L4545 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.UserData` L4546 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.ImageId` L4643 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.InstanceType` L4644 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.UserData` L4645 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.ImageId` L4742 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.InstanceType` L4743 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.UserData` L4744 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.ImageId` L4841 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.InstanceType` L4842 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.UserData` L4843 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.ImageId` L485 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.InstanceType` L486 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.UserData` L487 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.ImageId` L4940 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.InstanceType` L4941 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.UserData` L4942 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.ImageId` L5039 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.InstanceType` L5040 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.UserData` L5041 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.ImageId` L5138 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.InstanceType` L5139 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.UserData` L5140 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.ImageId` L5237 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.InstanceType` L5238 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.UserData` L5239 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.ImageId` L5336 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.InstanceType` L5337 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.UserData` L5338 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.ImageId` L5435 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.InstanceType` L5436 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.UserData` L5437 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.ImageId` L5534 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.InstanceType` L5535 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.UserData` L5536 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.ImageId` L5633 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.InstanceType` L5634 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.UserData` L5635 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.ImageId` L5732 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.InstanceType` L5733 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.UserData` L5734 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.ImageId` L5831 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.InstanceType` L5832 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.UserData` L5833 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.ImageId` L584 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.InstanceType` L585 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.UserData` L586 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.ImageId` L5930 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.InstanceType` L5931 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.UserData` L5932 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.ImageId` L6029 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.InstanceType` L6030 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.UserData` L6031 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.ImageId` L6128 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.InstanceType` L6129 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.UserData` L6130 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.ImageId` L6227 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.InstanceType` L6228 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.UserData` L6229 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.ImageId` L6326 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.InstanceType` L6327 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.UserData` L6328 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.ImageId` L6425 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.InstanceType` L6426 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.UserData` L6427 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.ImageId` L6524 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.InstanceType` L6525 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.UserData` L6526 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.ImageId` L6623 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.InstanceType` L6624 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.UserData` L6625 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.ImageId` L6722 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.InstanceType` L6723 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.UserData` L6724 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.ImageId` L6821 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.InstanceType` L6822 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.UserData` L6823 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.ImageId` L683 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.InstanceType` L684 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.UserData` L685 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.ImageId` L6920 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.InstanceType` L6921 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.UserData` L6922 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.ImageId` L7019 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.InstanceType` L7020 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.UserData` L7021 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.ImageId` L7118 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.InstanceType` L7119 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.UserData` L7120 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.ImageId` L7217 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.InstanceType` L7218 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.UserData` L7219 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.ImageId` L7316 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.InstanceType` L7317 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.UserData` L7318 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.ImageId` L7415 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.InstanceType` L7416 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.UserData` L7417 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.ImageId` L7514 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.InstanceType` L7515 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.UserData` L7516 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.ImageId` L7613 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.InstanceType` L7614 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.UserData` L7615 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.ImageId` L7712 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.InstanceType` L7713 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.UserData` L7714 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.ImageId` L7811 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.InstanceType` L7812 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.UserData` L7813 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.ImageId` L782 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.InstanceType` L783 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.UserData` L784 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.ImageId` L7910 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.InstanceType` L7911 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.UserData` L7912 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.ImageId` L8009 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.InstanceType` L8010 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.UserData` L8011 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.ImageId` L8108 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.InstanceType` L8109 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.UserData` L8110 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.ImageId` L8207 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.InstanceType` L8208 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.UserData` L8209 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.ImageId` L8306 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.InstanceType` L8307 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.UserData` L8308 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.ImageId` L8405 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.InstanceType` L8406 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.UserData` L8407 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.ImageId` L8504 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.InstanceType` L8505 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.UserData` L8506 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.ImageId` L8603 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.InstanceType` L8604 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.UserData` L8605 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.ImageId` L8702 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.InstanceType` L8703 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.UserData` L8704 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.ImageId` L8801 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.InstanceType` L8802 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.UserData` L8803 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.ImageId` L881 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.InstanceType` L882 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.UserData` L883 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.ImageId` L8900 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.InstanceType` L8901 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.UserData` L8902 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.ImageId` L8999 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.InstanceType` L9000 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.UserData` L9001 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.ImageId` L9098 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.InstanceType` L9099 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.UserData` L9100 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.ImageId` L9197 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.InstanceType` L9198 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.UserData` L9199 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.ImageId` L9296 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.InstanceType` L9297 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.UserData` L9298 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.ImageId` L9395 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.InstanceType` L9396 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.UserData` L9397 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.ImageId` L9494 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.InstanceType` L9495 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.UserData` L9496 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.ImageId` L9593 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.InstanceType` L9594 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.UserData` L9595 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.ImageId` L9692 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.InstanceType` L9693 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.UserData` L9694 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.ImageId` L9791 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.InstanceType` L9792 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.UserData` L9793 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `bad_mappings_used_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `bad_mappings_used_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L18 in `bad_override_complete_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `bad_override_complete_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myS3BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L17 in `bad_override_include_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L9 in `bad_override_include_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `bad_override_include_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L6 in `bad_pipeline_no_source_first_stage_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_previous_gen_instance_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L6 in `bad_previous_gen_instance_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Engine` L17 in `bad_previous_generation_instances_yaml` - > Property 'Engine' is create-only; updating it will cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L27 in `bad_previous_generation_instances_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L8 in `bad_previous_generation_instances_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L7 in `bad_previous_generation_instances_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L12 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_properties_ebs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L11 in `bad_properties_ebs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L27 in `bad_properties_ebs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L33 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L45 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L43 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L44 in `bad_properties_ebs_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L21 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L22 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Engine` L30 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L31 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L39 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L40 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L42 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L44 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L72 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L74 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L58 in `bad_properties_rt_association_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L63 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L65 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L33 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L35 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L50 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L52 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L25 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L27 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L58 in `bad_properties_sg_ingress_yaml` - > Property 'CidrIp' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L56 in `bad_properties_sg_ingress_yaml` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L54 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L55 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L57 in `bad_properties_sg_ingress_yaml` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L79 in `bad_properties_sg_ingress_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L80 in `bad_properties_sg_ingress_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L62 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L63 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L64 in `bad_properties_sg_ingress_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L68 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L69 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L70 in `bad_properties_sg_ingress_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L74 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupName` L75 in `bad_properties_sg_ingress_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_properties_sg_ingress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L31 in `bad_properties_sg_ingress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L32 in `bad_properties_sg_ingress_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L10 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Db` (AWS::RDS::DBInstance) → `Properties.Engine` L8 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L7 in `bad_rds_public_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L8 in `bad_rds_public_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L10 in `bad_rds_public_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L34 in `bad_redshift_internet_accessible_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L33 in `bad_redshift_internet_accessible_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `bad_redshift_internet_accessible_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `bad_redshift_internet_accessible_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `bad_redshift_internet_accessible_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_redshift_internet_accessible_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_redshift_internet_accessible_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_redshift_internet_accessible_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L29 in `bad_refs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_refs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L27 in `bad_refs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L28 in `bad_refs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L37 in `bad_refs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L40 in `bad_refs_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L10 in `bad_refs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_refs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L8 in `bad_refs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L9 in `bad_refs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L18 in `bad_refs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_refs_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myBucket` (AWS::S3::Bucket) → `Properties.BucketName` L71 in `bad_resources_circular_dependency_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L75 in `bad_resources_circular_dependency_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L54 in `bad_resources_circular_dependency_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L55 in `bad_resources_circular_dependency_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_resources_circular_dependency_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L149 in `bad_resources_circular_dependency_yaml` - > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L150 in `bad_resources_circular_dependency_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.ImageId` L216 in `bad_resources_circular_dependency_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.UserData` L217 in `bad_resources_circular_dependency_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Path` L110 in `bad_resources_circular_dependency_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.RoleName` L100 in `bad_resources_circular_dependency_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L26 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L27 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L36 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L37 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L44 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L45 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L226 in `bad_resources_circular_dependency_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L223 in `bad_resources_circular_dependency_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Volumes` L258 in `bad_resources_circular_dependency_yaml` - > Property 'Volumes' is create-only; updating it will cause resource replacement -- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `bad_resources_codepipeline_stages_second_stage_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_resources_creation_policy_unsupported_e3055_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_deletionpolicy_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L27 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L43 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L25 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L24 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L84 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L74 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L64 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L53 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L36 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L10 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L206 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L204 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L205 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L203 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L195 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L193 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L194 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L192 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L139 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L137 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L134 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L138 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L136 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L135 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L167 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L165 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L162 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L166 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L164 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L163 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L153 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L151 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Family` L148 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Memory` L152 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L150 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L149 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L125 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L123 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L120 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L124 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L122 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L121 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L182 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L179 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L176 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L180 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L178 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L181 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L177 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L44 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L42 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L38 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L43 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L41 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L39 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L94 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L92 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L93 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L91 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L110 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L107 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L103 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L108 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L106 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L109 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L104 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L62 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L57 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L53 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L58 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L59 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L54 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L77 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Family` L71 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L29 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L23 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L24 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L104 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L102 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Family` L99 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L103 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L101 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L100 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L117 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L115 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Family` L112 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L116 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L114 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L113 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L13 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L65 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L63 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L60 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L64 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L62 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L61 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L78 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L76 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L73 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L77 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L75 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L74 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L91 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L89 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L86 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L90 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L24 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L21 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L25 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L23 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L22 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L39 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L34 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L38 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L36 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L35 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L47 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L51 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L49 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L48 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L41 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L46 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L96 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L100 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L22 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L30 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L14 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L60 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L64 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L79 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L82 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `rIamRole` (AWS::IAM::Role) → `Properties.RoleName` L9 in `bad_resources_iam_iam_policy_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L89 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'InstanceArn' is create-only; updating it will cause resource replacement -- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Name` L90 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyName` L44 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.RoleName` L45 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.GroupName` L76 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.PolicyName` L77 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `bad_resources_iam_managed_policy_description_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `bad_resources_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `bad_resources_iam_ref_with_path_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `bad_resources_iam_ref_with_path_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `bad_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `bad_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L73 in `bad_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `bad_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L9 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Function2` (AWS::Lambda::Function) → `Properties.PackageType` L22 in `bad_resources_lambda_required_properties_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L150 in `bad_resources_primary_identifiers_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Project1` (AWS::CodeBuild::Project) → `Properties.Name` L168 in `bad_resources_primary_identifiers_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Project2` (AWS::CodeBuild::Project) → `Properties.Name` L188 in `bad_resources_primary_identifiers_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.Path` L39 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.RoleName` L40 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L62 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L63 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L85 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L86 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.Path` L108 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.RoleName` L109 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.Path` L130 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.RoleName` L131 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L27 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L34 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Engine` L53 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Engine` L60 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_resources_rds_not_enum_master_username_join_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L9 in `bad_resources_rds_not_enum_master_username_join_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.Engine` L6 in `bad_resources_rds_not_enum_master_username_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyTopic` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `bad_resources_sns_topic_name_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_resources_update_policy_unsupported_e3016_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_updatereplacepolicy_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GroupInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L61 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L105 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMixedInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L89 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupUnresolvedCnameCardinality` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L131 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L26 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L27 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L15 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L16 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L49 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L50 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L37 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L38 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L121 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.Name` L122 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L45 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.Name` L46 in `bad_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRecordSetsInvalidFirst` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L54 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRecordSetsInvalidSecond` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L68 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L50 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L51 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L40 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L41 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L110 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L111 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L64 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L65 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L75 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L76 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L86 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.Name` L87 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyHostedZone` (AWS::Route53::HostedZone) → `Properties.Name` L19 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L99 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L100 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyRecordSetGroup` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L121 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L27 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L28 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PoorlyConfiguredRoute53` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L174 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.ValidationSpecification` L35 in `bad_sagemaker_instance_types_yaml` - > Property 'ValidationSpecification' is create-only; updating it will cause resource replacement -- **I9001** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.JobResources` L15 in `bad_sagemaker_instance_types_yaml` - > Property 'JobResources' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_additional_props_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Name` L8 in `bad_schema_composition_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L12 in `bad_schema_conditional_type_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_enum_violation_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `bad_schema_format_violation_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L8 in `bad_schema_format_violation_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SubnetId` L7 in `bad_schema_format_violation_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L37 in `bad_schema_lifecycle_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EolLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L26 in `bad_schema_lifecycle_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L19 in `bad_schema_lifecycle_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L20 in `bad_schema_lifecycle_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.MeshName` L13 in `bad_schema_lifecycle_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_schema_numeric_bounds_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Name` L22 in `bad_schema_property_constraints_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PatternBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_property_constraints_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateAuthorityArn` L11 in `bad_schema_property_constraints_yaml` - > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateSigningRequest` L12 in `bad_schema_property_constraints_yaml` - > Property 'CertificateSigningRequest' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.SigningAlgorithm` L13 in `bad_schema_property_constraints_yaml` - > Property 'SigningAlgorithm' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.Validity` L14 in `bad_schema_property_constraints_yaml` - > Property 'Validity' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L14 in `bad_schema_required_xor_conditional_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L17 in `bad_schema_required_xor_conditional_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L18 in `bad_schema_required_xor_conditional_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L16 in `bad_schema_required_xor_conditional_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L19 in `bad_schema_required_xor_conditional_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `Lambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_schema_string_length_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L26 in `bad_schema_structural_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L29 in `bad_schema_structural_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L30 in `bad_schema_structural_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L28 in `bad_schema_structural_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L31 in `bad_schema_structural_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L37 in `bad_schema_structural_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L39 in `bad_schema_structural_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.VpcId` L20 in `bad_schema_structural_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_type_mismatch_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.CertificateAuthorityArn` L7 in `bad_schema_write_only_yaml` - > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement -- **I9001** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_security_issues_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_bad_port_range_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_open_egress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_simple_sub_param_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `bad_sns_cross_account_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L81 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `bad_sqs_fifo_no_suffix_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DLQ` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L11 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.QueueName` L10 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `bad_ssm_document_invalid_yaml` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `bad_ssm_document_invalid_yaml` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_sub_needed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_sub_nested_intrinsic_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_outside_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_outside_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_outside_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L17 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L16 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L15 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L23 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L22 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L29 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L28 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.VpcId` L27 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L35 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.CidrBlock` L34 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.VpcId` L33 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `bad_subnet_overlap_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_overlap_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `bad_subnet_overlap_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `bad_subnet_overlap_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `BadBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_unknown_properties_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L95 in `cdk_DemoStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L80 in `cdk_DemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.TableName` L86 in `cdk_DemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L127 in `cdk_DemoStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Name` L12 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L69 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L24 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'BrokerName' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L25 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'DeploymentMode' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EncryptionOptions` L26 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EncryptionOptions' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L29 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EngineType' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L32 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement -- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L202 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L1077 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.AppId` L17 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Property 'AppId' is create-only; updating it will cause resource replacement -- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.BranchName` L23 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Property 'BranchName' is create-only; updating it will cause resource replacement -- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentFEC31BD04feb54db86e2f8eed94e1b28001143ce` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L738 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L764 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.StageName` L767 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.ParentId` L779 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.PathPart` L785 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L786 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L882 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L910 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L913 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Action` L797 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.FunctionName` L798 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Principal` L804 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.SourceArn` L805 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Action` L841 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.FunctionName` L842 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Principal` L848 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.SourceArn` L849 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1052 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1082 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1085 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Action` L924 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.FunctionName` L925 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Principal` L931 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.SourceArn` L932 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Action` L968 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.FunctionName` L969 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.SourceArn` L976 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1009 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1037 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1040 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1096 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1099 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1100 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1450 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1478 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1481 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Action` L1365 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.FunctionName` L1366 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Principal` L1372 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.SourceArn` L1373 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Action` L1409 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.FunctionName` L1410 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Principal` L1416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.SourceArn` L1417 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1196 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1224 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1227 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Action` L1111 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.FunctionName` L1112 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Principal` L1118 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.SourceArn` L1119 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Action` L1155 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1156 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Principal` L1162 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1163 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1493 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1523 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1526 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1323 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1351 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1354 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Action` L1238 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.FunctionName` L1239 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Principal` L1245 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.SourceArn` L1246 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Action` L1282 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.FunctionName` L1283 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Principal` L1289 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.SourceArn` L1290 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentDA408F9D41ab700bc8db89ed7cb2c6250ab97c0a` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L230 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L269 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.StageName` L272 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.ParentId` L284 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.PathPart` L290 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L291 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L371 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L419 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L422 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Action` L302 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.FunctionName` L303 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Principal` L309 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.SourceArn` L310 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Action` L338 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.FunctionName` L339 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Principal` L345 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.SourceArn` L346 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.ParentId` L433 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.PathPart` L436 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L437 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L449 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L498 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L501 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Action` L305 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.FunctionName` L306 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Principal` L312 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.SourceArn` L313 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `operationalAuthorizer363A7D2B` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L392 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentB29CB257026bd226d852d73169d333911fdd4fa6` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L431 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L473 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.StageName` L476 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.ParentId` L485 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.PathPart` L491 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L492 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L595 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L598 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Action` L539 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.FunctionName` L540 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Principal` L546 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.SourceArn` L547 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Action` L503 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.FunctionName` L504 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Principal` L510 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.SourceArn` L511 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L87 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L95 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L352 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L360 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L807 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L891 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L897 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeployment92F2CB49668bc8f388b84571173cc408b70fc6fa` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L725 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L745 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.StageName` L748 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.ParentId` L908 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.PathPart` L914 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L915 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L927 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.ResourceId` L931 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.RestApiId` L934 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L644 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `nestedstackvpcVPCGWA39BF2BE` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTable5302591F` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableEA03EC80` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTable518786D0` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableF3884194` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L7 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `chatappapideployment` (AWS::ApiGatewayV2::Deployment) → `Properties.ApiId` L675 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L691 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L698 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.TableName` L33 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `connectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L504 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `connectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L603 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `disconnectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L537 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `disconnectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L627 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `messagelambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L570 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `messageroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L651 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L583 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L493 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L500 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L554 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L557 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L569 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `ASGScalingPolicyAModestLoadC5714E5A` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L621 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L704 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L721 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L789 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L802 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L803 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L810 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L811 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L736 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L746 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L758 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L764 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L765 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L771 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L772 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.ApiId` L170 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.Name` L182 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.ApiId` L276 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.Name` L288 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CarApiSchema8E4784D9` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L93 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `CarsFunction7C2F2ED2` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L304 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DefectsFunction929174B7` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L332 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L61 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.TableName` L71 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.ApiId` L360 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.FieldName` L369 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.TypeName` L385 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.ApiId` L397 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.FieldName` L406 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.TypeName` L422 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `AppSync2EventBridgeApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L16 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Action` L237 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.FunctionName` L238 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Principal` L244 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.SourceArn` L245 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L89 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L118 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ItemsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L30 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L134 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L141 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L144 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L139 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L147 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L152 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L89 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L97 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L102 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L64 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L72 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L77 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `PostsApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L16 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L45 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L54 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PostsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L30 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L114 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L122 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L127 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `IncomingDataBucketPolicyCA22042A` (AWS::S3::BucketPolicy) → `Properties.Bucket` L32 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L641 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Domain' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L624 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'ServerId' is create-only; updating it will cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L581 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L424 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L641 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Domain' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L624 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'ServerId' is create-only; updating it will cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L581 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L424 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vault23237E5B` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L216 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupVaultName' is create-only; updating it will cause resource replacement -- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L253 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupPlanId' is create-only; updating it will cause resource replacement -- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L259 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupSelection' is create-only; updating it will cause resource replacement -- **I9001** `testBucketPolicy47484917` (AWS::S3::BucketPolicy) → `Properties.Bucket` L40 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L568 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L576 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1084 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceRole` L749 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.InstanceRole' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceTypes` L755 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.InstanceTypes' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.SecurityGroupIds` L764 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L772 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L780 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L789 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L850 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.RepositoryName` L10 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.CidrBlock` L21 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L24 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L317 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.RouteTableId` L321 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTable3DBEEA60` (AWS::EC2::RouteTable) → `Properties.VpcId` L292 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L303 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L306 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L251 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.CidrBlock` L259 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.VpcId` L275 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L398 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.RouteTableId` L402 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTable7EFB668D` (AWS::EC2::RouteTable) → `Properties.VpcId` L373 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L384 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L387 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L332 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.CidrBlock` L340 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.VpcId` L356 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L107 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.RouteTableId` L111 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L140 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L146 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L93 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L96 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableDADE381A` (AWS::EC2::RouteTable) → `Properties.VpcId` L82 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L41 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L49 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.VpcId` L65 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L233 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.RouteTableId` L237 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTable29142B7F` (AWS::EC2::RouteTable) → `Properties.VpcId` L208 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L219 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L222 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L167 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L175 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.VpcId` L191 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCVPCGWDD05DB82` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L430 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L583 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L493 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L500 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L554 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L557 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L569 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L667 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L682 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L691 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L621 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L631 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L643 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L649 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L650 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L656 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L657 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Name` L394 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Name` L409 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteBucketPolicyE10E3262` (AWS::S3::BucketPolicy) → `Properties.Bucket` L40 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Content` L154 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Description` L160 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1641 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1642 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1643 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1651 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Name` L2309 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipelineArtifactsBucketEncryptionKeyAliasC52C67EF` (AWS::KMS::Alias) → `Properties.AliasName` L2074 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AliasName' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipelineArtifactsBucketPolicyC49383E9` (AWS::S3::BucketPolicy) → `Properties.Bucket` L2122 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.CidrBlock` L1097 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L1100 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1489 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.RouteTableId` L1493 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTable4D91A516` (AWS::EC2::RouteTable) → `Properties.VpcId` L1456 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1474 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1411 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1419 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.VpcId` L1435 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1586 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.RouteTableId` L1590 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTable918A9411` (AWS::EC2::RouteTable) → `Properties.VpcId` L1553 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1568 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1571 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1508 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1516 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.VpcId` L1532 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1197 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.RouteTableId` L1201 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1236 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1242 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableA4D922A0` (AWS::EC2::RouteTable) → `Properties.VpcId` L1164 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1179 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1182 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1127 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.VpcId` L1143 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1343 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.RouteTableId` L1347 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1382 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1388 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTable12CC8384` (AWS::EC2::RouteTable) → `Properties.VpcId` L1310 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1325 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1328 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1273 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.VpcId` L1289 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcVPCGW361426E5` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L1626 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.ApplicationName` L1954 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ApplicationName' is create-only; updating it will cause resource replacement -- **I9001** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.ComputePlatform` L1942 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ComputePlatform' is create-only; updating it will cause resource replacement -- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L1780 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L1792 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L1805 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.ServiceName` L1836 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1853 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1861 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L1879 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L1880 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L1886 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L1887 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L1893 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L181 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L182 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L188 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L189 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L190 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L191 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L194 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1662 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1663 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1664 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1671 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1672 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L1717 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L1734 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L1757 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1683 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1700 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `cfnAuth` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L365 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentCB1FF57464f3e9f368e40968a1aeabdb5bcc9580` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L133 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L152 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.StageName` L155 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.ParentId` L167 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.PathPart` L173 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L174 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L273 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L301 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L304 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.FunctionName` L186 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.SourceArn` L193 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `DemoResource5B5C546C` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L140 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `DemoResourceResource1DB79ECAB` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L166 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.QueueName` L70 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.TopicName` L27 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.KeySchema` L88 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L259 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L270 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.KeySchema` L507 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L480 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L491 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L565 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.ImageId` L576 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.InstanceType` L579 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L580 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SubnetId` L594 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.UserData` L603 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Content` L353 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Description` L359 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `EC2assetBucketPolicy31C0B372` (AWS::S3::BucketPolicy) → `Properties.Bucket` L276 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L541 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.CidrBlock` L7 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L238 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L91 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTable140320E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.CidrBlock` L33 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L175 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableD6971BF3` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.CidrBlock` L117 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW3AFA48F6` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L210 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableE62E4ED6` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTable3E531D9B` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L246 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.ImageId` L257 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.InstanceType` L260 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L261 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SubnetId` L269 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.UserData` L278 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L156 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L196 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.AutoScalingGroupProvider.AutoScalingGroupArn` L691 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AutoScalingGroupProvider.AutoScalingGroupArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L678 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L633 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L646 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L591 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L594 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L597 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L598 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L606 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L200 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L213 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L214 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L221 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L222 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L61 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L122 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L130 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L169 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L176 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L179 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L180 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L146 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L153 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L156 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L47 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L67 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L80 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L81 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L88 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L89 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L61 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L120 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L128 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L167 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L173 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L174 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L178 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L143 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L144 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L150 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L151 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L47 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Cluster` L1112 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.LaunchType` L1125 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1126 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L1027 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L1033 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1034 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1035 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1038 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Cluster` L1079 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.LaunchType` L1092 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1114 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1049 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1068 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Family` L1030 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1031 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1032 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1035 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L1041 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L1054 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1070 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L1022 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1023 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1024 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1027 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Cluster` L728 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.LaunchType` L742 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L495 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L563 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L576 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L577 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L584 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L585 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L510 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L520 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L532 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L538 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L539 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L545 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L546 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L789 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L797 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L812 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L813 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L819 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L820 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L826 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L616 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L641 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L642 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Family` L648 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Memory` L649 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L650 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L651 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L654 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L487 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L510 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L523 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L524 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L525 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L526 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Cluster` L669 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.LaunchType` L683 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L730 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L738 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L801 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L803 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ResourceId` L754 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ScalableDimension` L788 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ServiceNamespace` L789 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L557 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L582 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L583 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Family` L589 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Memory` L590 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L591 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L592 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L595 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L598 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L611 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L647 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L655 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L492 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L511 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L512 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L518 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L519 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L520 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L521 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L524 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Action` L140 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L141 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Principal` L147 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L148 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Endpoint` L15 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Protocol` L18 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.TopicArn` L19 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeployment0905F2A51149e52ed55821cdb6db0214e7f00a2c` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L76 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L96 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.StageName` L99 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.ParentId` L111 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.PathPart` L117 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L118 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L129 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L132 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L133 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L145 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.ResourceId` L157 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.RestApiId` L160 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L239 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Components` L50 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Components' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ContainerType` L76 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'ContainerType' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.DockerfileTemplateData` L77 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'DockerfileTemplateData' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Name` L78 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ParentImage` L79 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'ParentImage' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.TargetRepository` L91 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'TargetRepository' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Version` L97 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L30 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L31 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L32 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L33 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L6 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L7 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L8 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L9 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Name` L212 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Name` L188 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L18 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L19 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L20 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L21 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Action` L95 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.FunctionName` L96 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Principal` L102 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.SourceArn` L103 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Action` L40 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.FunctionName` L41 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Principal` L47 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.SourceArn` L48 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.DashboardName` L150 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Property 'DashboardName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L85 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L92 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Content` L9 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Description` L15 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L69 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L61 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.FunctionName` L87 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeployment406A9BD66039252bdc49ee37076fc3c8f3a2eed8` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L206 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L228 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.StageName` L231 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L328 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.ResourceId` L359 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.RestApiId` L365 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Action` L243 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.FunctionName` L244 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Principal` L250 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.SourceArn` L251 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Action` L287 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.FunctionName` L288 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Principal` L294 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.SourceArn` L295 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.ParentId` L376 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.PathPart` L382 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L383 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Action` L648 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.FunctionName` L649 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Principal` L655 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.SourceArn` L656 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Action` L692 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L693 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Principal` L699 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L700 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L733 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.ResourceId` L761 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.RestApiId` L764 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L606 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.ResourceId` L634 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.RestApiId` L637 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Action` L521 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.FunctionName` L522 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Principal` L528 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.SourceArn` L529 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Action` L565 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.FunctionName` L566 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Principal` L572 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.SourceArn` L573 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L479 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.ResourceId` L507 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.RestApiId` L510 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Action` L394 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.FunctionName` L395 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Principal` L401 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.SourceArn` L402 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Action` L438 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.FunctionName` L439 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Principal` L445 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.SourceArn` L446 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.QueueName` L87 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Endpoint` L139 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Protocol` L135 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.TopicArn` L136 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.QueueName` L15 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Endpoint` L67 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Protocol` L63 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.TopicArn` L64 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L441 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L295 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeployment0A3D40CC3de72833f42963bffb25d554063d867d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L515 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L533 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.StageName` L548 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.ContentType` L694 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.Name` L695 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.RestApiId` L691 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.ContentType` L671 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.Name` L672 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.RestApiId` L668 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L557 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L563 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L564 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.ResourceId` L576 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.RestApiId` L579 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L176 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteDefaultRouteIntegration9F0AC785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L225 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteF9949FE6` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L244 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.FunctionName` L186 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.SourceArn` L193 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L267 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L270 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Name` L6 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Action` L173 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.FunctionName` L174 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Principal` L180 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.SourceArn` L181 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.FunctionName` L142 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.Qualifier` L145 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Qualifier' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Endpoint` L196 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Protocol` L192 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.TopicArn` L193 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.EventBusName` L462 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Action` L494 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.FunctionName` L495 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Principal` L501 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.SourceArn` L502 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Action` L345 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.FunctionName` L346 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Principal` L352 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.SourceArn` L353 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.EventBusName` L305 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentC364859Eae40584f53d9b7bb31907a57bb781ad3` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L576 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L594 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.StageName` L609 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.ContentType` L755 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.Name` L756 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.RestApiId` L752 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.ContentType` L732 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.Name` L733 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.RestApiId` L729 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L618 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L624 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L625 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L636 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.ResourceId` L637 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.RestApiId` L640 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeployment8F20C3E380de34421a04eed5e7cc4a28266c5690` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L246 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L264 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.StageName` L279 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.ContentType` L422 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.Name` L423 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.RestApiId` L419 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.ParentId` L288 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.PathPart` L294 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L295 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L306 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L307 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L310 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.ContentType` L399 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.Name` L400 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.RestApiId` L396 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L171 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L177 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L894 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L895 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L901 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Action` L854 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.FunctionName` L855 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Principal` L861 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.SourceArn` L862 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Action` L810 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.FunctionName` L811 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Principal` L817 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.SourceArn` L818 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeployment318525DA98cf1fe46f6a8379cb8241a5e412a297` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L633 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L650 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L656 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L665 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L671 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L672 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Action` L727 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.FunctionName` L728 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Principal` L734 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.SourceArn` L735 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Action` L683 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.FunctionName` L684 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Principal` L690 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.SourceArn` L691 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L767 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L768 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L771 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Action` L251 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.FunctionName` L252 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Principal` L258 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.SourceArn` L259 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Action` L401 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.FunctionName` L402 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Principal` L408 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.SourceArn` L409 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Action` L551 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.FunctionName` L552 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Principal` L558 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.SourceArn` L559 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Action` L718 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L719 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Principal` L725 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L726 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Action` L674 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.FunctionName` L675 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Principal` L681 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.SourceArn` L682 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L758 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L759 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L765 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeployment9F2A82FA10260421dc831e654354d72baa60bfb0` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L497 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L514 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.StageName` L520 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L529 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L535 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L536 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L631 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.ResourceId` L632 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.RestApiId` L635 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Action` L591 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.FunctionName` L592 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Principal` L598 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.SourceArn` L599 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Action` L547 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.FunctionName` L548 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Principal` L554 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.SourceArn` L555 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Action` L415 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.FunctionName` L416 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Principal` L422 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.SourceArn` L423 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L745 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L794 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L795 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Family` L801 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Memory` L802 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L803 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L804 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L807 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L213 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L216 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L544 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L541 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L527 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L530 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L510 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L479 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L475 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L476 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L625 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L622 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L591 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L608 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L611 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L560 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L556 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L557 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L297 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L330 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L336 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L266 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L283 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L286 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L235 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L231 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L232 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L422 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L419 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L452 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L458 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L388 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L405 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L408 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L353 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L354 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L651 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L1107 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Action` L1484 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.FunctionName` L1485 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Principal` L1491 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.SourceArn` L1492 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Action` L1626 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1627 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Principal` L1633 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1634 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Action` L1275 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.FunctionName` L1276 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Principal` L1282 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.SourceArn` L1283 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteCB8326BD` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L247 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteDefaultRouteIntegrationF55AEBDB` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L228 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.FunctionName` L189 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.SourceArn` L196 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L270 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Action` L1836 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L1837 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Principal` L1843 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L1844 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Action` L1792 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.FunctionName` L1793 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Principal` L1799 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.SourceArn` L1800 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1876 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1877 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1883 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeployment96972FE77ef5b9d25f9d7a35316435e48684bb49` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L1615 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L1632 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.StageName` L1638 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1647 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1653 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1654 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1749 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1750 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1753 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Action` L1709 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.FunctionName` L1710 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Principal` L1716 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.SourceArn` L1717 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Action` L1665 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.FunctionName` L1666 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Principal` L1672 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.SourceArn` L1673 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L679 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L680 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L686 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Action` L639 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.FunctionName` L640 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Principal` L646 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.SourceArn` L647 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Action` L595 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.FunctionName` L596 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Principal` L602 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.SourceArn` L603 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeployment318525DAd36b722f04bf6c9ce03a896415e5529d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L418 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L435 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L441 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L450 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L456 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L457 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Action` L512 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.FunctionName` L513 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Principal` L519 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.SourceArn` L520 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Action` L468 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.FunctionName` L469 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Principal` L475 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.SourceArn` L476 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L552 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L553 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L556 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L344 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Action` L193 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.FunctionName` L194 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Principal` L200 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.SourceArn` L201 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.ApiId` L156 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.Name` L162 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ApiDefaultApiKeyF991C37B` (AWS::AppSync::ApiKey) → `Properties.ApiId` L74 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.ApiId` L379 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.Name` L385 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.ApiId` L234 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.FieldName` L240 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.TypeName` L241 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.ApiId` L306 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.FieldName` L312 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.TypeName` L313 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.ApiId` L258 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.FieldName` L264 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.TypeName` L265 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.ApiId` L282 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.FieldName` L288 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.TypeName` L289 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.ApiId` L210 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.FieldName` L216 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.TypeName` L217 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.ApiId` L186 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.FieldName` L192 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.TypeName` L193 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.ApiId` L409 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.FieldName` L415 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.TypeName` L416 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiSchema510EECD7` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L59 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.KeySchema` L447 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `thesimplegraphqlserviceapikey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L433 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteB7B22F2B` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L247 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteDefaultRouteIntegration4584A785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L228 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.FunctionName` L189 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.SourceArn` L196 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L270 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultRoute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L294 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `Integ` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L266 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L190 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L244 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L253 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L256 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentDDF5787C50cd54e1b820c67ddfe6e24991b1dd3f` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L164 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L180 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.StageName` L201 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.ParentId` L210 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.PathPart` L216 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L217 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L312 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.ResourceId` L313 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.RestApiId` L316 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Action` L228 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.FunctionName` L229 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Principal` L235 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.SourceArn` L236 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Action` L272 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.FunctionName` L273 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Principal` L279 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.SourceArn` L280 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Scope` L9 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'Scope' is create-only; updating it will cause resource replacement -- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.ResourceArn` L105 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'ResourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.WebACLArn` L124 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'WebACLArn' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Action` L189 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Endpoint` L212 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Protocol` L208 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Region` L218 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.TopicArn` L209 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Action` L130 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.FunctionName` L131 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Principal` L137 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.SourceArn` L138 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Endpoint` L153 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Protocol` L149 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Region` L159 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.TopicArn` L150 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Action` L160 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.FunctionName` L161 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Principal` L167 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.SourceArn` L168 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Endpoint` L183 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Protocol` L179 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Region` L189 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.TopicArn` L180 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L353 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Action` L153 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.FunctionName` L154 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Principal` L160 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.SourceArn` L161 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Endpoint` L176 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Protocol` L172 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Region` L182 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.TopicArn` L173 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Action` L327 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.FunctionName` L328 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Principal` L334 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.SourceArn` L335 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Endpoint` L350 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Protocol` L346 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.TopicArn` L347 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentB3CB89A0a689bf68bef2302d0715c2d1a50794fc` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L75 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L94 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.StageName` L109 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.ContentType` L352 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.Name` L353 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.RestApiId` L349 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L119 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.ResourceId` L120 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.RestApiId` L126 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.ContentType` L329 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.Name` L330 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.RestApiId` L326 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.ParentId` L215 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.PathPart` L221 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L222 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L233 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.ResourceId` L234 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.RestApiId` L237 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeployment248C0700a88c9b4f7fb5eae343fa3265f3ea5ffe` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L133 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L153 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.StageName` L156 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L168 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L174 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L175 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Action` L273 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.FunctionName` L274 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Principal` L280 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.SourceArn` L281 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L314 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.ResourceId` L358 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.RestApiId` L361 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L188 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.ResourceId` L215 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.RestApiId` L218 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentD1A021868a8af37caaafdc0f762b784f7555ad86` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L551 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L570 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.StageName` L573 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.ParentId` L585 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.PathPart` L591 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L592 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Action` L603 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.FunctionName` L604 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Principal` L610 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.SourceArn` L611 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Action` L647 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.FunctionName` L648 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Principal` L654 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.SourceArn` L655 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L688 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.ResourceId` L716 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.RestApiId` L719 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Action` L181 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.FunctionName` L182 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Principal` L188 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.SourceArn` L189 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Action` L291 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.FunctionName` L292 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Principal` L298 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.SourceArn` L299 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L149 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.ResourceId` L153 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.RestApiId` L159 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeployment621CA0B04c89657aa92ebebc2018c4cd4a761ecd` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L113 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L133 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.StageName` L136 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L170 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L176 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L177 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L189 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.ResourceId` L246 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.RestApiId` L249 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L358 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Database` L681 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Name` L682 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L683 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L684 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `gluecrawlerroleB13EEB29` (AWS::IAM::Role) → `Properties.RoleName` L555 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `logauditingworkgroup` (AWS::Athena::WorkGroup) → `Properties.Name` L618 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `logsbucketE18563D9` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `logsbucketPolicy6C60198C` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `logscrawler` (AWS::Glue::Crawler) → `Properties.Name` L571 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L651 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L652 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L653 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L654 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `queryoutputbucket3DDDB997` (AWS::S3::Bucket) → `Properties.BucketName` L184 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `queryoutputbucketPolicy2BC02580` (AWS::S3::BucketPolicy) → `Properties.Bucket` L215 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Content` L292 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Description` L298 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L666 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L667 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L668 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L669 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.RoleName` L19 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.RoleName` L83 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Description` L55 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Path` L56 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L11 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'S3BucketArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L26 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'S3BucketArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.DestinationLocationArn` L37 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'DestinationLocationArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.SourceLocationArn` L43 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'SourceLocationArn' is create-only; updating it will cause resource replacement -- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L256 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L273 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L290 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L303 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L304 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L311 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L312 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L130 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L147 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L20 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L32 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L33 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L39 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L40 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L46 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L94 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L97 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L100 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L101 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L102 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L116 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L222 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L168 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L169 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L186 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L198 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L199 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L205 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L206 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L212 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.RouteTableId` L304 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L286 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L289 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableF6513BC2` (AWS::EC2::RouteTable) → `Properties.VpcId` L275 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L234 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.VpcId` L258 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L381 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.RouteTableId` L385 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTable9AC81FAC` (AWS::EC2::RouteTable) → `Properties.VpcId` L356 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L367 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L370 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L315 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.CidrBlock` L323 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.VpcId` L339 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTable17DA183D` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTable3609F42C` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCVPCGWC9B93E30` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L413 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L97 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Engine` L100 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L114 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `RDSSecretAttachment39FC3A79` (AWS::SecretsManager::SecretTargetAttachment) → `Properties.SecretId` L79 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'SecretId' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L7 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `efsstorage` (AWS::EFS::FileSystem) → `Properties.Encrypted` L6 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'Encrypted' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L15 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L16 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L33 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Action` L314 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.FunctionName` L315 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Principal` L321 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.SourceArn` L322 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Action` L292 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.FunctionName` L293 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Principal` L299 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.SourceArn` L300 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L1011 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupPlanId' is create-only; updating it will cause resource replacement -- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L1017 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupSelection' is create-only; updating it will cause resource replacement -- **I9001** `BackupVault3A9C5852` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L939 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupVaultName' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L605 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.ImageId` L616 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.InstanceType` L619 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L620 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SubnetId` L628 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.UserData` L637 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L504 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L527 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Action` L828 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.FunctionName` L829 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Principal` L835 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.SourceArn` L836 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L652 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L653 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L684 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableB5578A45` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTable5CB16C6C` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTable0BDD81D8` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableF7A722BD` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L474 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L492 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L493 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKVPCGW6C4E6589` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L734 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L742 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.ImageId` L755 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.InstanceType` L758 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.KeyName` L759 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L760 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SubnetId` L768 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.UserData` L777 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTable3887499F` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTable30EC1F5C` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableC0F77754` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTable5A43F858` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCVPCGW60A84FEA` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.RepositoryName` L17 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.RepositoryName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Cluster` L473 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.LaunchType` L482 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.ServiceName` L518 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L337 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L366 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L367 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Family` L373 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Memory` L374 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L375 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L376 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L379 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.ClusterName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Name` L29 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Vpc` L30 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Vpc' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L219 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L238 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L251 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L257 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L258 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L264 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L41 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L602 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L619 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L636 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Cluster` L401 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.LaunchType` L411 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.ServiceName` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L273 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L302 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L303 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Family` L309 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Memory` L310 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L311 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L312 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L315 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.ListenerArn` L667 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ListenerArn' is create-only; updating it will cause resource replacement -- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L550 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L566 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L567 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L568 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L581 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Applications` L317 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Applications' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Configurations` L322 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Configurations' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.JobFlowRole` L365 in `cdk_py-emr--emr-cluster.template_json` - > Property 'JobFlowRole' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.LogUri` L366 in `cdk_py-emr--emr-cluster.template_json` - > Property 'LogUri' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Name` L378 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ReleaseLabel` L379 in `cdk_py-emr--emr-cluster.template_json` - > Property 'ReleaseLabel' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ServiceRole` L380 in `cdk_py-emr--emr-cluster.template_json` - > Property 'ServiceRole' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Steps` L383 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Steps' is create-only; updating it will cause resource replacement -- **I9001** `emrjobflowprofile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L303 in `cdk_py-emr--emr-cluster.template_json` - > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement -- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-emr--emr-cluster.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `vpcVPCGW7984C166` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L209 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-emr--emr-cluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableA38152FE` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-emr--emr-cluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-emr--emr-cluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_py-emr--emr-cluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableA6135437` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_py-emr--emr-cluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_py-emr--emr-cluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.PolicyName` L416 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.Principal` L417 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.Principal` L447 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.ThingName` L469 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ThingName' is create-only; updating it will cause resource replacement -- **I9001** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.FunctionName` L76 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L519 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `CfnPolicy` (AWS::IoT::Policy) → `Properties.PolicyName` L407 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `CfnRole` (AWS::IAM::Role) → `Properties.RoleName` L510 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `IoTCertCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L338 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MyCdkThing` (AWS::IoT::Thing) → `Properties.ThingName` L6 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ThingName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L85 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L92 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.FunctionName` L51 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.PackageType` L53 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Content` L11 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Description` L17 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L452 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.ResourceId` L476 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.RestApiId` L482 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Action` L419 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.FunctionName` L420 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Principal` L426 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.SourceArn` L427 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Action` L383 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.FunctionName` L384 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Principal` L390 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.SourceArn` L391 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeployment97FF782966d8a7a27285a49d048d420aab9f3106` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L223 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L243 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.StageName` L246 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.DomainName` L493 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDomainMapurlshortappUrlShortenerApiB1BAB0CD7C6BCC1C` (AWS::ApiGateway::BasePathMapping) → `Properties.DomainName` L508 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L258 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L264 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L265 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L345 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L369 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L372 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Action` L312 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.FunctionName` L313 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.SourceArn` L320 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Action` L276 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.FunctionName` L277 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Principal` L283 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.SourceArn` L284 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L539 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.Name` L540 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L47 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L48 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Family` L54 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Memory` L55 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L60 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L185 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L193 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Cluster` L138 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.LaunchType` L152 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L316 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement -- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L323 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L471 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'Direction' is create-only; updating it will cause resource replacement -- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L484 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement -- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L407 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'Direction' is create-only; updating it will cause resource replacement -- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L420 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTable6E169019` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTable0899A697` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L436 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L460 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L334 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L396 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Action` L103 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.FunctionName` L104 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Principal` L110 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceAccount` L111 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceArn` L114 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.KeySchema` L134 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L432 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L444 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L336 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L350 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L400 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L403 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L406 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L407 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L415 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L83 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L86 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L293 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L297 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L279 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L282 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L268 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L227 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L235 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L251 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L167 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L171 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L200 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L206 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L153 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L156 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L142 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L101 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L109 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L125 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L325 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L510 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L523 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L466 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResolverQueryLogConfigId` L493 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'ResolverQueryLogConfigId' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResourceId` L496 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.DestinationArn` L478 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationArn' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Name` L484 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Name` L549 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L558 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L563 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Bucket` L192 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Name` L195 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `examplebucketPolicyE09B485E` (AWS::S3::BucketPolicy) → `Properties.Bucket` L32 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Action` L171 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.FunctionName` L172 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Principal` L178 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.SourceAccount` L181 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `s3ObjectLambdaAP` (AWS::S3ObjectLambda::AccessPoint) → `Properties.Name` L238 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.CidrBlock` L71 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L74 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMDocumentTestVpcVPCGW7C58FC59` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L190 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L155 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.RouteTableId` L159 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTable4C0F352E` (AWS::EC2::RouteTable) → `Properties.VpcId` L130 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L141 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L144 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L89 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L97 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.VpcId` L113 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L404 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.ImageId` L415 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.InstanceType` L418 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L419 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SubnetId` L427 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.UserData` L440 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L362 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L380 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Content` L6 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.DocumentType` L36 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Name` L37 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Content` L133 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Description` L139 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicWebsiteBucketPolicy8E799A1F` (AWS::S3::BucketPolicy) → `Properties.Bucket` L35 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L107 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L6 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeployment77C863276f473a57d5bd4cb772b382f83651c7a2` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L138 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L157 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.StageName` L160 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.ParentId` L169 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.PathPart` L175 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L176 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L234 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L318 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L321 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Name` L11 in `gh-issues_issue-144_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Source.Name` L13 in `gh-issues_issue-144_yaml` - > Property 'Source.Name' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Action` L32 in `gh-issues_issue-183_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L33 in `gh-issues_issue-183_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L34 in `gh-issues_issue-183_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L35 in `gh-issues_issue-183_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Action` L22 in `gh-issues_issue-183_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L23 in `gh-issues_issue-183_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L24 in `gh-issues_issue-183_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L25 in `gh-issues_issue-183_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L15 in `gh-issues_issue-186-clb_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L19 in `gh-issues_issue-186-clb_json` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ImagePipeline7DDDE57F` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L24 in `gh-issues_issue-186-imagebuilder_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L24 in `gh-issues_issue-226_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `gh-issues_issue-226_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L68 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L69 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Engine` L143 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Engine` L138 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L190 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceAutomatedBackupsArn` L191 in `gh-issues_issue-235_yaml` - > Property 'SourceDBInstanceAutomatedBackupsArn' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L27 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.StorageEncrypted` L28 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L149 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Engine` L148 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBClusterSnapshotIdentifier` L167 in `gh-issues_issue-235_yaml` - > Property 'DBClusterSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L166 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L80 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L79 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L56 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L57 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L62 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L63 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L227 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L226 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L228 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L109 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L110 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L220 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L219 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L221 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L85 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L86 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L202 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L91 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L92 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L207 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L208 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L115 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L116 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Engine` L133 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L121 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L122 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L161 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Engine` L160 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Engine` L172 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L173 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L74 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L44 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L45 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L127 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L128 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.KmsKeyId` L39 in `gh-issues_issue-235_yaml` - > Property 'KmsKeyId' is create-only; updating it will cause resource replacement -- **I9001** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Engine` L213 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L155 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L154 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L196 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBClusterIdentifier` L197 in `gh-issues_issue-235_yaml` - > Property 'SourceDBClusterIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L178 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceIdentifier` L179 in `gh-issues_issue-235_yaml` - > Property 'SourceDBInstanceIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L184 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.SourceDbiResourceId` L185 in `gh-issues_issue-235_yaml` - > Property 'SourceDbiResourceId' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L50 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L51 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L103 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L104 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L97 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L98 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L20 in `gh-issues_issue-246_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.Name` L21 in `gh-issues_issue-246_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L6 in `gh-issues_issue-247_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L12 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L21 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.Name` L22 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L30 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L57 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L58 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L66 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.Name` L67 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L75 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L48 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L49 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L39 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L40 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-34_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-34_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `gh-issues_issue-34_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `gh-issues_issue-34_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L11 in `gh-issues_issue-36_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `gh-issues_issue-37_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L6 in `gh-issues_issue-37_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L7 in `gh-issues_issue-37_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Name` L6 in `gh-issues_issue-38_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-39_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L12 in `gh-issues_issue-39_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L34 in `gh-issues_issue-39_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L16 in `gh-issues_issue-40_yaml` - > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement -- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.NodeType` L17 in `gh-issues_issue-40_yaml` - > Property 'NodeType' is create-only; updating it will cause resource replacement -- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L28 in `gh-issues_issue-40_yaml` - > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement -- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.NodeType` L29 in `gh-issues_issue-40_yaml` - > Property 'NodeType' is create-only; updating it will cause resource replacement -- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.Name` L5 in `gh-issues_issue-40_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.RoleArn` L6 in `gh-issues_issue-40_yaml` - > Property 'RoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-41_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L35 in `gh-issues_issue-42-if_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L28 in `gh-issues_issue-42-if_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L29 in `gh-issues_issue-42-if_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L30 in `gh-issues_issue-42-if_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `gh-issues_issue-42-if_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L18 in `gh-issues_issue-42-if_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L30 in `gh-issues_issue-42-ref_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L23 in `gh-issues_issue-42-ref_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L24 in `gh-issues_issue-42-ref_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L25 in `gh-issues_issue-42-ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `gh-issues_issue-42-ref_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `gh-issues_issue-42-ref_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L23 in `gh-issues_issue-42_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L16 in `gh-issues_issue-42_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L17 in `gh-issues_issue-42_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L18 in `gh-issues_issue-42_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `gh-issues_issue-42_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `gh-issues_issue-42_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L7 in `gh-issues_issue-45_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L6 in `gh-issues_issue-45_json` - > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L8 in `gh-issues_issue-45_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.RoleArn` L7 in `gh-issues_issue-46_json` - > Property 'RoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-47_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.DBClusterIdentifier` L11 in `gh-issues_issue-49_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-49_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-49_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L6 in `gh-issues_issue-52_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L7 in `gh-issues_issue-52_json` - > Property 'NodeRole' is create-only; updating it will cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Subnets` L8 in `gh-issues_issue-52_json` - > Property 'Subnets' is create-only; updating it will cause resource replacement -- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L596 in `gh-issues_issue-53_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L604 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.AmiType` L957 in `gh-issues_issue-53_json` - > Property 'AmiType' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L958 in `gh-issues_issue-53_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.InstanceTypes` L962 in `gh-issues_issue-53_json` - > Property 'InstanceTypes' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L965 in `gh-issues_issue-53_json` - > Property 'NodeRole' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Subnets` L976 in `gh-issues_issue-53_json` - > Property 'Subnets' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Content` L462 in `gh-issues_issue-53_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Description` L468 in `gh-issues_issue-53_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.LicenseInfo` L469 in `gh-issues_issue-53_json` - > Property 'LicenseInfo' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `gh-issues_issue-53_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L334 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.RouteTableId` L338 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTable886260DA` (AWS::EC2::RouteTable) → `Properties.VpcId` L315 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L323 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L326 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L269 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.VpcId` L297 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L411 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.RouteTableId` L415 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTable1EDE83AC` (AWS::EC2::RouteTable) → `Properties.VpcId` L392 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L400 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L403 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L346 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.CidrBlock` L354 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.VpcId` L374 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L86 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.RouteTableId` L90 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.AllocationId` L117 in `gh-issues_issue-53_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.SubnetId` L123 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTable5F0A6273` (AWS::EC2::RouteTable) → `Properties.VpcId` L67 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L75 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L78 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L210 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.RouteTableId` L214 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.AllocationId` L241 in `gh-issues_issue-53_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.SubnetId` L247 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L199 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L202 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableEC6A2C2A` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L145 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L153 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.VpcId` L173 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcVPCGWEFD8AF3B` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L437 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `WeakConsumer` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `gh-issues_issue-56_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `Canary` (AWS::Synthetics::Canary) → `Properties.Name` L6 in `gh-issues_issue-62_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-65_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Action` L18 in `gh-issues_issue-65_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.FunctionName` L19 in `gh-issues_issue-65_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Principal` L20 in `gh-issues_issue-65_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.SourceAccount` L21 in `gh-issues_issue-65_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L6 in `gh-issues_issue-67_json` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `gh-issues_issue-68_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MyFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L7 in `gh-issues_issue-68_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CompoundSub` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRight` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `good_E9001_aws_cdk_metadata_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L8 in `good_W3010_getazs_not_flagged_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_W3010_getazs_not_flagged_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_W3010_getazs_not_flagged_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_W3010_getazs_not_flagged_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Authorizer1` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L19 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Deployment1` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L36 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L27 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L26 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L25 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L40 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.StageName` L42 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L9 in `good_aurora_dbinstance_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `good_aurora_dbinstance_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `good_aurora_dbinstance_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BucketLong` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `good_both_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketShort` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_both_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_complex_conditions_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L41 in `good_complex_conditions_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_complex_conditions_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L37 in `good_complex_conditions_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L39 in `good_complex_conditions_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DevBucket` (AWS::S3::Bucket) → `Properties.BucketName` L46 in `good_complex_conditions_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `good_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L96 in `good_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L91 in `good_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `good_core_conditions_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L36 in `good_core_conditions_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L67 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L68 in `good_core_conditions_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `good_core_conditions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `good_core_conditions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_core_config_default_e3012_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `good_core_config_default_e3012_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L63 in `good_core_resource_attributes_yaml` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.BucketName` L82 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DependsOnList` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_is-defined_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_custom_is-not-defined_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-large_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-small_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L14 in `good_deletion_policies_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.Engine` L10 in `good_deletion_policies_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L11 in `good_deletion_policies_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `good_dynamodb_provisioned_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_provisioned_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_dynamodb_valid_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_valid_attributes_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `good_ecs_awsvpc_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `good_ecs_awsvpc_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L203 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L201 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L202 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L200 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L199 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L155 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L153 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L154 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L152 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L151 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L191 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L189 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L190 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L188 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L187 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L143 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L141 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L142 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L140 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L139 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L177 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.KeySchema` L166 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L112 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L108 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L129 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L127 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L123 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L128 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L126 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L124 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L70 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L67 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L63 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L68 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L66 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L69 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L64 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Family` L48 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L51 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L49 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L81 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.TableName` L79 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L97 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.TableName` L92 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L17 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L15 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L16 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L14 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L37 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L35 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Family` L31 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Memory` L36 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L34 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L32 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L114 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L108 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Family` L105 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Memory` L109 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L110 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L106 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L24 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L25 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L16 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L48 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L43 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L40 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L44 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L42 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L41 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L80 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L72 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L73 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L64 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L56 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L60 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L58 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L96 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L90 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `good_ecs_fargate_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `good_ecs_fargate_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `good_ecs_fargate_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L19 in `good_ecs_fargate_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L10 in `good_ecs_fargate_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L11 in `good_ecs_fargate_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L7 in `good_ecs_fargate_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L16 in `good_enum_case_insensitive_casing_yaml` - > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L18 in `good_enum_case_insensitive_casing_yaml` - > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L20 in `good_enum_case_insensitive_casing_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `good_enum_case_insensitive_casing_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L27 in `good_enum_case_insensitive_casing_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L25 in `good_enum_case_insensitive_casing_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L19 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L35 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L12 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster0` (AWS::ECS::Cluster) → `Properties.ClusterName` L14 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster1` (AWS::ECS::Cluster) → `Properties.ClusterName` L22 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L30 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L38 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.MeshName` L46 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.MeshName` L62 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L73 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.MeshName` L84 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.MeshName` L96 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L49 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L81 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L103 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh` (AWS::AppMesh::Mesh) → `Properties.MeshName` L23 in `good_functions_findinmap_enhanced_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L36 in `good_functions_findinmap_enhanced_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L62 in `good_functions_findinmap_enhanced_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L18 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.ApplicationId` L31 in `good_functions_relationship_conditions_sam_yaml` - > Property 'ApplicationId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L31 in `good_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `good_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_functions_select_string_index_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_functions_select_string_index_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_functions_select_string_index_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_functions_select_string_index_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L28 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TestRole` (AWS::IAM::Role) → `Properties.RoleName` L10 in `good_functions_sub_needed_custom_excludes_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L90 in `good_functions_sub_needed_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.ResourceId` L114 in `good_functions_sub_needed_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.RestApiId` L115 in `good_functions_sub_needed_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `IOTPolicies` (AWS::IoT::Policy) → `Properties.PolicyName` L121 in `good_functions_sub_needed_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L57 in `good_functions_sub_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L58 in `good_functions_sub_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L59 in `good_functions_sub_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Name` L52 in `good_functions_sub_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L33 in `good_functions_sub_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L34 in `good_functions_sub_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVPc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L72 in `good_functions_sub_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L124 in `good_generic_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L133 in `good_generic_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L79 in `good_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L75 in `good_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L76 in `good_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L77 in `good_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L86 in `good_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L88 in `good_generic_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L98 in `good_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L95 in `good_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `good_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.KeyName` L97 in `good_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L106 in `good_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.UserData` L113 in `good_generic_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L69 in `good_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L45 in `good_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_getazs_resolves_current_regions_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_getazs_resolves_current_regions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_getazs_resolves_current_regions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_getazs_resolves_current_regions_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_getazs_resolves_current_regions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_getazs_resolves_current_regions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.PolicyName` L66 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.UserName` L65 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.RoleName` L17 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L76 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'InstanceArn' is create-only; updating it will cause resource replacement -- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Name` L77 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `good_lambda_permission_source_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `good_lambda_permission_source_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `good_lambda_permission_source_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `good_lambda_permission_source_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L12 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L13 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L14 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L15 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_snapstart_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_zipfile_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `good_mappings_used_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `good_mappings_used_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `good_no_value_yaml` - > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `good_no_value_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `good_no_value_yaml` - > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `good_no_value_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `good_no_value_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `good_no_value_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L145 in `good_no_value_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L148 in `good_no_value_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `good_no_value_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `good_no_value_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.AvailabilityZones` L12 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'AvailabilityZones' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.DBClusterIdentifier` L9 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.MasterUsername` L10 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `good_override_complete_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_complete_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L13 in `good_override_complete_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_required_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L20 in `good_parameters_not_used_parameters_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L21 in `good_parameters_not_used_parameters_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L22 in `good_parameters_not_used_parameters_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L23 in `good_parameters_used_transforms_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L24 in `good_parameters_used_transforms_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L25 in `good_parameters_used_transforms_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.CidrBlock` L57 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.VpcId` L61 in `good_properties_ec2_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.CidrBlock` L65 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `good_properties_ec2_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L32 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L33 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L38 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L37 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.CidrBlock` L43 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L42 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.CidrBlock` L48 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L47 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.CidrBlock` L53 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L52 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L40 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L42 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L31 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L33 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L64 in `good_properties_rt_association_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L69 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L71 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L48 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L50 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L56 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L58 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NatGW` (AWS::EC2::NatGateway) → `Properties.SubnetId` L30 in `good_redshift_private_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L35 in `good_redshift_private_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L34 in `good_redshift_private_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `good_redshift_private_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `good_redshift_private_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `good_redshift_private_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `good_redshift_private_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `good_redshift_private_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `good_redshift_private_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.DBName` L9 in `good_redshift_valid_nodetype_yaml` - > Property 'DBName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.MasterUsername` L7 in `good_redshift_valid_nodetype_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.ProjectArn` L14 in `good_region_conditional_resource_type_yaml` - > Property 'ProjectArn' is create-only; updating it will cause resource replacement -- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `good_resources_codepipeline_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `good_resources_dynamodb_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L47 in `good_resources_dynamodb_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedIndex` (AWS::DynamoDB::Table) → `Properties.KeySchema` L31 in `good_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L55 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L60 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L126 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L130 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L109 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L113 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L27 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L35 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L44 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L19 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L74 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L80 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L143 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L147 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L93 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L99 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `good_resources_iam_managed_policy_description_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `good_resources_iam_policy_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `good_resources_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `good_resources_iam_ref_with_path_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `good_resources_iam_ref_with_path_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `good_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `good_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L73 in `good_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `good_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Function3` (AWS::Lambda::Function) → `Properties.PackageType` L29 in `good_resources_lambda_required_properties_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `good_resources_name_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Action` L92 in `good_resources_primary_identifiers_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.FunctionName` L91 in `good_resources_primary_identifiers_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Principal` L93 in `good_resources_primary_identifiers_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Action` L98 in `good_resources_primary_identifiers_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `good_resources_primary_identifiers_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Principal` L99 in `good_resources_primary_identifiers_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L40 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L41 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L63 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L64 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.Path` L9 in `good_resources_properties_allowed_pattern_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.RoleName` L8 in `good_resources_properties_allowed_pattern_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L8 in `good_resources_properties_az_cdk_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.VpcId` L7 in `good_resources_properties_az_cdk_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L12 in `good_resources_properties_exclusive_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L6 in `good_resources_properties_exclusive_yaml` - > Property 'CidrIp' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L8 in `good_resources_properties_exclusive_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L7 in `good_resources_properties_exclusive_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L5 in `good_resources_properties_exclusive_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L39 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.PipelineName` L89 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'PipelineName' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L41 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `Authorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L6 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L21 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L45 in `good_resources_properties_password_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Engine` L29 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L30 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L39 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L10 in `good_resources_properties_templated_code_yaml` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L26 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L12 in `good_resources_rds_not_enum_master_username_parameter_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L13 in `good_resources_rds_not_enum_master_username_parameter_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_resources_s3_access-control-obsolete_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L13 in `good_resources_s3_access-control-obsolete_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L15 in `good_resources_update_policy_supported_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L16 in `good_resources_update_policy_supported_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `good_resources_update_policy_supported_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.FunctionName` L23 in `good_resources_update_policy_supported_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.Name` L25 in `good_resources_update_policy_supported_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `good_resources_update_policy_supported_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GroupBothBranchesValid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L36 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMutuallyExclusiveCnameItems` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupUnreachableInvalid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L51 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L13 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.Name` L14 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L65 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.Name` L66 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L25 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.Name` L26 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `good_route53_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `good_route53_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `good_route53_conditional_record_items_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L14 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.Name` L15 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L61 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.Name` L62 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L30 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L16 in `good_schema_required_xor_resource_condition_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L19 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L20 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L18 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L21 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `good_schema_valid_resources_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_simple_sub_prefix_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L76 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `good_sqs_fifo_valid_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `good_sqs_fifo_valid_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `good_ssm_document_valid_yaml` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `good_ssm_document_valid_yaml` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `good_ssm_parameter_name_type_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `good_stackset_conditional_template_source_yaml` - > Property 'PermissionModel' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `good_stackset_conditional_template_source_yaml` - > Property 'StackSetName' is create-only; updating it will cause resource replacement -- **I9001** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L24 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.BucketName` L44 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L38 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_sub_not_needed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L99 in `good_transform_language_extension_yaml` - > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `good_transform_language_extension_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L97 in `good_transform_language_extension_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L58 in `good_transform_language_extension_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L91 in `good_transform_language_extension_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L92 in `good_transform_language_extension_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L25 in `good_vpc_subnets_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L26 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `good_vpc_subnets_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_vpc_subnets_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L6 in `integration_availability-zones_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L5 in `integration_availability-zones_yaml` - > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `integration_availability-zones_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L11 in `integration_availability-zones_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.TableName` L12 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L35 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.TableName` L31 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.KeySchema` L59 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.TableName` L50 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `integration_aws-ec2-instance_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L12 in `integration_aws-ec2-instance_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L13 in `integration_aws-ec2-instance_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L7 in `integration_aws-ec2-instance_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L14 in `integration_aws-ec2-launchtemplate_yaml` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L14 in `integration_aws-ec2-networkinterface_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L10 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L8 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L14 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L19 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L24 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.Ipv6CidrBlock` L25 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv6CidrBlock' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L23 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L30 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L31 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L32 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.VpcId` L29 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L112 in `integration_cfn-gather_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L113 in `integration_cfn-gather_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `integration_cfn-gather_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L27 in `integration_cfn-gather_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L118 in `integration_cfn-gather_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L120 in `integration_cfn-gather_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CognitoAuthorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L57 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Deployment` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L78 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `FargateService` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `integration_cfn-gather_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L105 in `integration_cfn-gather_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `FifoProcessor` (AWS::Lambda::Function) → `Properties.FunctionName` L94 in `integration_cfn-gather_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L40 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L41 in `integration_cfn-gather_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L67 in `integration_cfn-gather_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.ResourceId` L66 in `integration_cfn-gather_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.RestApiId` L65 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L89 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L90 in `integration_cfn-gather_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L82 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.StageName` L84 in `integration_cfn-gather_yaml` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `StandardDLQ` (AWS::SQS::Queue) → `Properties.FifoQueue` L48 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `integration_cfn-gather_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `integration_cfn-gather_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L8 in `integration_cfn-gather_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L11 in `integration_custom-resources_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Affinity` L34 in `integration_deployment-file-template_yaml` - > Property 'Affinity' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `integration_deployment-file-template_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L36 in `integration_deployment-file-template_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L37 in `integration_deployment-file-template_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Tenancy` L38 in `integration_deployment-file-template_yaml` - > Property 'Tenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L28 in `integration_deployment-file-template_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `integration_deployment-file-template_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L30 in `integration_deployment-file-template_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L24 in `integration_deployment-file-template_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L30 in `integration_dynamic-references_yaml` - > Property 'BrokerName' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L24 in `integration_dynamic-references_yaml` - > Property 'DeploymentMode' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L25 in `integration_dynamic-references_yaml` - > Property 'EngineType' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L31 in `integration_dynamic-references_yaml` - > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L9 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L16 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L37 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `integration_formats_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L29 in `integration_formats_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L30 in `integration_formats_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `integration_formats_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L22 in `integration_formats_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `integration_formats_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `integration_formats_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `integration_formats_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.AvailabilityZone` L10 in `integration_getatt-types_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstancePlatform` L13 in `integration_getatt-types_yaml` - > Property 'InstancePlatform' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstanceType` L12 in `integration_getatt-types_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L57 in `integration_getatt-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L68 in `integration_getatt-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L69 in `integration_getatt-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Memory` L70 in `integration_getatt-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L71 in `integration_getatt-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `integration_getatt-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L74 in `integration_getatt-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L116 in `integration_ref-types_yaml` - > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L114 in `integration_ref-types_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L115 in `integration_ref-types_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L117 in `integration_ref-types_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L59 in `integration_ref-types_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L58 in `integration_ref-types_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L49 in `integration_ref-types_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L50 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L54 in `integration_ref-types_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L39 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L40 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L44 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L45 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `integration_ref-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L104 in `integration_ref-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L105 in `integration_ref-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Memory` L106 in `integration_ref-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `integration_ref-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L108 in `integration_ref-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L110 in `integration_ref-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L72 in `integration_ref-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L83 in `integration_ref-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L84 in `integration_ref-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Memory` L85 in `integration_ref-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L86 in `integration_ref-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `integration_ref-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L89 in `integration_ref-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L35 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L94 in `integration_resources-cloudformation-init_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L118 in `issues_sam_w_conditions_yaml` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `issues_sam_w_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L345 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L343 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L334 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L332 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L391 in `issues_sam_w_conditions_yaml` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L390 in `issues_sam_w_conditions_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L392 in `issues_sam_w_conditions_yaml` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L393 in `issues_sam_w_conditions_yaml` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L139 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L138 in `issues_sam_w_conditions_yaml` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Path` L140 in `issues_sam_w_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `TenantInfoReadPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L154 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L220 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L218 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L209 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L207 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L266 in `issues_sam_w_conditions_yaml` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L265 in `issues_sam_w_conditions_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L267 in `issues_sam_w_conditions_yaml` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L268 in `issues_sam_w_conditions_yaml` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L566 in `lsp_comprehensive_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L569 in `lsp_comprehensive_json` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L583 in `lsp_comprehensive_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L492 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L493 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L673 in `lsp_comprehensive_json` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L635 in `lsp_comprehensive_json` - > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L647 in `lsp_comprehensive_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L664 in `lsp_comprehensive_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L680 in `lsp_comprehensive_json` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L657 in `lsp_comprehensive_json` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L847 in `lsp_comprehensive_json` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L718 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L736 in `lsp_comprehensive_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L803 in `lsp_comprehensive_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L509 in `lsp_comprehensive_json` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L402 in `lsp_comprehensive_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L394 in `lsp_comprehensive_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L391 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L878 in `lsp_comprehensive_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L363 in `lsp_comprehensive_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L444 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L445 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L238 in `lsp_comprehensive_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L239 in `lsp_comprehensive_yaml` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L243 in `lsp_comprehensive_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L205 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L206 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L280 in `lsp_comprehensive_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L269 in `lsp_comprehensive_yaml` - > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L271 in `lsp_comprehensive_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L276 in `lsp_comprehensive_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L281 in `lsp_comprehensive_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L370 in `lsp_comprehensive_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L294 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L295 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L306 in `lsp_comprehensive_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L344 in `lsp_comprehensive_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L217 in `lsp_comprehensive_yaml` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L161 in `lsp_comprehensive_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L160 in `lsp_comprehensive_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L159 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L391 in `lsp_comprehensive_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L143 in `lsp_comprehensive_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L177 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L178 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L105 in `lsp_condition-usage_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L95 in `lsp_condition-usage_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L96 in `lsp_condition-usage_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L87 in `lsp_condition-usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_condition-usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L107 in `lsp_condition-usage_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.SecurityGroups` L109 in `lsp_condition-usage_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L96 in `lsp_condition-usage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L97 in `lsp_condition-usage_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L143 in `lsp_condition-usage_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L89 in `lsp_condition-usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L171 in `lsp_condition-usage_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `NestedConditionResource` (AWS::S3::BucketPolicy) → `Properties.Bucket` L149 in `lsp_condition-usage_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_condition-usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L137 in `lsp_condition-usage_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `lsp_constants_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L43 in `lsp_constants_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `lsp_constants_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `lsp_constants_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L41 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L49 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L65 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L35 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L48 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L53 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket6` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket7` (AWS::S3::Bucket) → `Properties.BucketName` L64 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L133 in `public_lambda-poller_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L192 in `public_lambda-poller_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L193 in `public_lambda-poller_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `public_lambda-poller_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `public_lambda-poller_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L37 in `public_lambda-poller_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L172 in `public_lambda-poller_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L197 in `public_lambda-poller_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L198 in `public_lambda-poller_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L199 in `public_lambda-poller_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L200 in `public_lambda-poller_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L27 in `public_lambda-poller_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.DatabaseName` L23 in `public_rds-cluster_yaml` - > Property 'DatabaseName' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L24 in `public_rds-cluster_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.EngineMode` L25 in `public_rds-cluster_yaml` - > Property 'EngineMode' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L21 in `public_rds-cluster_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L1342 in `public_watchmaker_json` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.ImageId` L1398 in `public_watchmaker_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L1401 in `public_watchmaker_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.KeyName` L1404 in `public_watchmaker_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1407 in `public_watchmaker_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.UserData` L1451 in `public_watchmaker_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1690 in `public_watchmaker_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2046 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L2202 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L2187 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1985 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Action` L1090 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1089 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1091 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Action` L974 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L973 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Action` L1187 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1186 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1188 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Action` L1366 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1365 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1367 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Action` L768 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L767 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L769 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Action` L858 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L857 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L859 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Action` L1269 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1268 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1270 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Action` L674 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L673 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Principal` L675 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Action` L559 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L558 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L560 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Action` L489 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L488 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Principal` L490 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Action` L1558 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1557 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1559 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEncryptedVolumes` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L373 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L983 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrailBucket` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1099 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrailLogIntegrity` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1197 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateConfigInAllRegions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1481 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateKeyRotations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1376 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluatePolicyPermissions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L777 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateRootAccount` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L328 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateUserPolicyAssociations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L867 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForIamPasswordPolicy` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L202 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForInstanceRoleUses` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1279 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForMfaForUsers` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L681 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L342 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForRestrictedSsh` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L389 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L405 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcDefaultSecurityGroupss` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L569 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcFlowLogs` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L588 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcPeeringRouteTabless` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1568 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1775 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleLoginFailureCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1761 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1738 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleSigninWithoutMfaCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1722 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Name` L1938 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Name` L1907 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2070 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L1473 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L1472 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L1474 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L318 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L317 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1003 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1120 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.FunctionName` L890 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1398 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1302 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L703 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.FunctionName` L231 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L799 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1217 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.FunctionName` L610 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L501 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.FunctionName` L425 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1503 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.FunctionName` L2255 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.FunctionName` L1860 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.FunctionName` L124 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.FunctionName` L1603 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1700 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `IAMRootActivityCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1685 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2008 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1812 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `KMSCustomerKeyDeletionCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1798 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1963 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Action` L1898 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.FunctionName` L1897 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Principal` L1899 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Action` L2343 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.FunctionName` L2342 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Principal` L2344 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2121 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2151 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Name` L2349 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2093 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.TopicName` L1589 in `quickstart_cis_benchmark_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1662 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `UnauthorizedAttemptsCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1651 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L233 in `quickstart_config-rules_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `quickstart_config-rules_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L234 in `quickstart_config-rules_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L325 in `quickstart_config-rules_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L322 in `quickstart_config-rules_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L326 in `quickstart_config-rules_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L301 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L63 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L48 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L83 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L133 in `quickstart_config-rules_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L110 in `quickstart_config-rules_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L141 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L213 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L326 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L47 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L143 in `quickstart_nat-instance_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L149 in `quickstart_nat-instance_json` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.ImageId` L129 in `quickstart_nat-instance_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `quickstart_nat-instance_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.KeyName` L100 in `quickstart_nat-instance_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L132 in `quickstart_nat-instance_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.UserData` L111 in `quickstart_nat-instance_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNatInstanceEni` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L78 in `quickstart_nat-instance_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L157 in `quickstart_nat-instance_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.RouteTableId` L158 in `quickstart_nat-instance_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L378 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L380 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L382 in `quickstart_nist_application_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L384 in `quickstart_nist_application_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L386 in `quickstart_nist_application_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L509 in `quickstart_nist_application_yaml` - > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L510 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L512 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L514 in `quickstart_nist_application_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L516 in `quickstart_nist_application_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L518 in `quickstart_nist_application_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingDownApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L563 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingDownWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L571 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `quickstart_nist_application_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L598 in `quickstart_nist_application_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L610 in `quickstart_nist_application_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L624 in `quickstart_nist_application_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingUpApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L631 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingUpWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L639 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L734 in `quickstart_nist_application_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L745 in `quickstart_nist_application_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L748 in `quickstart_nist_application_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L770 in `quickstart_nist_application_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L783 in `quickstart_nist_application_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.ImageId` L800 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L802 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L804 in `quickstart_nist_application_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L806 in `quickstart_nist_application_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.UserData` L811 in `quickstart_nist_application_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L955 in `quickstart_nist_application_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Path` L970 in `quickstart_nist_application_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L1022 in `quickstart_nist_application_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBName` L1011 in `quickstart_nist_application_yaml` - > Property 'DBName' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L1013 in `quickstart_nist_application_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Engine` L1015 in `quickstart_nist_application_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L1018 in `quickstart_nist_application_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L1020 in `quickstart_nist_application_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L1021 in `quickstart_nist_application_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rS3AccessLogsPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1029 in `quickstart_nist_application_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1067 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1089 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1094 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1117 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1122 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1135 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1140 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1146 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1151 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1174 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rWebContentS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1200 in `quickstart_nist_application_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L165 in `quickstart_nist_config_rules_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L166 in `quickstart_nist_config_rules_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L170 in `quickstart_nist_config_rules_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L174 in `quickstart_nist_config_rules_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L175 in `quickstart_nist_config_rules_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `quickstart_nist_config_rules_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L185 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L223 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L238 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L251 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L277 in `quickstart_nist_config_rules_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L292 in `quickstart_nist_config_rules_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L59 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L139 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L238 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L314 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rArchiveLogsBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L63 in `quickstart_nist_logging_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailChange` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L135 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L149 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L182 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Path` L196 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L234 in `quickstart_nist_logging_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Path` L334 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMCreateAccessKey` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L383 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L397 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L412 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMPolicyChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L424 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMRootActivity` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L435 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L448 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rNetworkAclChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L463 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L476 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L499 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L514 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L527 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rUnauthorizedAttempts` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L539 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L305 in `quickstart_nist_vpc_management_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L309 in `quickstart_nist_vpc_management_yaml` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L314 in `quickstart_nist_vpc_management_yaml` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L316 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L321 in `quickstart_nist_vpc_management_yaml` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L326 in `quickstart_nist_vpc_management_yaml` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L410 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L421 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L432 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L434 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L439 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L444 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L446 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L451 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L456 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L458 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L463 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L468 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L470 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L475 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L512 in `quickstart_nist_vpc_management_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L514 in `quickstart_nist_vpc_management_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L516 in `quickstart_nist_vpc_management_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L518 in `quickstart_nist_vpc_management_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L525 in `quickstart_nist_vpc_management_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L549 in `quickstart_nist_vpc_management_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L553 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L588 in `quickstart_nist_vpc_management_yaml` - > Property 'PeerVpcId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L593 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L598 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L600 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L605 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L607 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L612 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L614 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L619 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L622 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L628 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L630 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L638 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L640 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L648 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L650 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L658 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L660 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L670 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L678 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L683 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L698 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L703 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L712 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L727 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L732 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L752 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L756 in `quickstart_nist_vpc_management_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L764 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L766 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L180 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L182 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L190 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L195 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L197 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L204 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L209 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L211 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L219 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L224 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L226 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L234 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L239 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L241 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L249 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L254 in `quickstart_nist_vpc_production_yaml` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L256 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L261 in `quickstart_nist_vpc_production_yaml` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L263 in `quickstart_nist_vpc_production_yaml` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L274 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L276 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L284 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L289 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L291 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L299 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentProdIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L312 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L326 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L328 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L333 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L335 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L340 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L342 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L347 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L349 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L354 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L356 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L361 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L363 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L368 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L373 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L379 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L380 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L387 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L392 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L393 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L400 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L405 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L412 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L418 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L425 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L430 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L431 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L438 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L443 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L450 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L455 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L456 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L463 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L468 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L475 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L481 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L488 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L494 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L501 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L506 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L513 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L519 in `quickstart_nist_vpc_production_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L523 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L557 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L559 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L564 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L566 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L571 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L573 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L578 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L580 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L586 in `quickstart_nist_vpc_production_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L589 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L595 in `quickstart_nist_vpc_production_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.RouteTableId` L598 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMain` (AWS::EC2::RouteTable) → `Properties.VpcId` L606 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableProdPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L614 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L619 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L632 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L637 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L650 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L655 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L673 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.CidrBlock` L678 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L682 in `quickstart_nist_vpc_production_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L355 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.InstanceType` L360 in `quickstart_openshift_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.KeyName` L362 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L364 in `quickstart_openshift_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.UserData` L375 in `quickstart_openshift_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L751 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L768 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L824 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L846 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L855 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L902 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L906 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L908 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L914 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L916 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L918 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L920 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1056 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1060 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1068 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1079 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1127 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1131 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1133 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1139 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1141 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1143 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1145 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1286 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1311 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1321 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1340 in `quickstart_openshift_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1343 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1353 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1364 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1371 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1386 in `quickstart_openshift_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1389 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1396 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1411 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1456 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1465 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1467 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1473 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1475 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1477 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1479 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1638 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1653 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SetupRole` (AWS::IAM::Role) → `Properties.Path` L1666 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SetupRoleProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L1689 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `quickstart_test_yaml` - > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `quickstart_test_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `quickstart_test_yaml` - > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `quickstart_test_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `quickstart_test_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `quickstart_test_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L141 in `quickstart_test_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L144 in `quickstart_test_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `quickstart_test_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `quickstart_test_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L731 in `quickstart_vpc-management_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L737 in `quickstart_vpc-management_json` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L834 in `quickstart_vpc-management_json` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L831 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L541 in `quickstart_vpc-management_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L546 in `quickstart_vpc-management_json` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L788 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L369 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L471 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L468 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L474 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L489 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L486 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L492 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L507 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L504 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L510 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L525 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L522 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L528 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L649 in `quickstart_vpc-management_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L639 in `quickstart_vpc-management_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L642 in `quickstart_vpc-management_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L652 in `quickstart_vpc-management_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L658 in `quickstart_vpc-management_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L776 in `quickstart_vpc-management_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L779 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L843 in `quickstart_vpc-management_json` - > Property 'PeerVpcId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L846 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L594 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L597 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L616 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L619 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L627 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L630 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L588 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L582 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L910 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L904 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L865 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L859 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L880 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L874 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L895 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L889 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L570 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L558 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L804 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L805 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L421 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L422 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L745 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L746 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L440 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L441 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L342 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L345 in `quickstart_vpc-management_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L605 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L608 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L484 in `quickstart_vpc_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L501 in `quickstart_vpc_json` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1826 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1832 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1842 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1848 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1858 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1864 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1874 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1880 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L1890 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.InstanceType` L1899 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.KeyName` L1923 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1908 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L1942 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.InstanceType` L1951 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.KeyName` L1975 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1960 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L1994 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.InstanceType` L2003 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.KeyName` L2027 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2012 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L2046 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L2055 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.KeyName` L2079 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2064 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L2097 in `quickstart_vpc_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L2098 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L576 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L573 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.VpcId` L570 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L954 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L951 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L932 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L986 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L983 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L606 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L603 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.VpcId` L600 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1247 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1297 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1294 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1267 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1268 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1273 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1281 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1282 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1287 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1206 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1203 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1184 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1238 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1235 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L636 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L633 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.VpcId` L630 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1017 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1014 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L995 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1049 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1046 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L666 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L663 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.VpcId` L660 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1369 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1419 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1416 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1389 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1390 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1395 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1403 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1404 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1409 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1328 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1325 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1306 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1360 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1357 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L696 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L693 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.VpcId` L690 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1080 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1077 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1058 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1112 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1109 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L726 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L723 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.VpcId` L720 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1491 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1541 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1538 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1511 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1512 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1517 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1525 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1526 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1531 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1450 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1447 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1428 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1482 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1479 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L756 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L753 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.VpcId` L750 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1143 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1140 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1121 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1175 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1172 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L786 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L783 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.VpcId` L780 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1613 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1663 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1660 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1633 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1634 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1639 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1647 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1648 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1653 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1572 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1569 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1550 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1604 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1601 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L815 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L812 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L809 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1705 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1702 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L845 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L842 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L839 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1716 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1713 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L876 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L873 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L870 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1728 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1725 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L907 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L904 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L901 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1740 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1737 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1693 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1690 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1671 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L2202 in `quickstart_vpc_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L2214 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L509 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L512 in `quickstart_vpc_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L533 in `quickstart_vpc_json` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L530 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCGatewayAttachment` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L558 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement - -### I9040 - 2297 findings - -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `A` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_E3019_four_way_group_yaml` - > Resource 'A' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `B` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_E3019_four_way_group_yaml` - > Resource 'B' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `C` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E3019_four_way_group_yaml` - > Resource 'C' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `D` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_E3019_four_way_group_yaml` - > Resource 'D' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'ExplicitSubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `JoinBucket` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'JoinBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LiteralA` (AWS::S3::Bucket) → `Properties.Tags` L25 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'LiteralA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LiteralB` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'LiteralB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RefBucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'RefBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubBucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'SubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApiA` (AWS::ApiGateway::RestApi) → `Properties.Tags` L10 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Resource 'RestApiA' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApiB` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Resource 'RestApiB' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E8007_condition_undefined_in_expr_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `bad_E9106_condition_cycle_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `GoodFunction` (AWS::Serverless::Function) → `Properties.Tags` L27 in `bad_F3006_invalid_aws_namespaces_yaml` - > Resource 'GoodFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.Tags` L7 in `bad_F3018_conditional_required_novalue_yaml` - > Resource 'MissingTemplateSourceInOneWorld' of type 'AWS::CloudFormation::StackSet' supports Tags but none are configured -- **I9040** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.Tags` L7 in `bad_F3031_log_group_name_dollar_brace_yaml` - > Resource 'InvalidLiteralName' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1019_sub_unused_key_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_W1028_allowedvalues_excludes_literal_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyConnection` (AWS::DMS::Endpoint) → `Properties.Tags` L5 in `bad_W1051_secretsmanager_at_arn_yaml` - > Resource 'MyConnection' of type 'AWS::DMS::Endpoint' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1053_dynref_spaces_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_W1054_raw_pseudo_param_yaml` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_W3010_full_coverage_yaml` - > Resource 'Asg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L44 in `bad_W3010_full_coverage_yaml` - > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L16 in `bad_W3010_full_coverage_yaml` - > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L21 in `bad_W3010_full_coverage_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Rds` (AWS::RDS::DBInstance) → `Properties.Tags` L62 in `bad_W3010_full_coverage_yaml` - > Resource 'Rds' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L33 in `bad_W3010_full_coverage_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L53 in `bad_W3010_full_coverage_yaml` - > Resource 'Tg' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `Volume` (AWS::EC2::Volume) → `Properties.Tags` L39 in `bad_W3010_full_coverage_yaml` - > Resource 'Volume' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_W9006_every_allowed_value_too_long_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_W9053_equivalent_conditions_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_aurora_with_allocated_storage_yaml` - > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Dist` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_alias_yaml` - > Resource 'Dist' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_origin_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifact_counts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifacts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `DummyBucket` (AWS::S3::Bucket) → `Properties.Tags` L35 in `bad_conditions_condition_functions_json` - > Resource 'DummyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `bad_conditions_properties_fn_if_json` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L85 in `bad_conditions_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `NewVolume` (AWS::EC2::Volume) → `Properties.Tags` L79 in `bad_conditions_yaml` - > Resource 'NewVolume' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `BadConditionType` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_core_E3001_resource_shape_yaml` - > Resource 'BadConditionType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_core_E3001_resource_shape_yaml` - > Resource 'BadDependsOnType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_E3001_resource_shape_yaml` - > Resource 'UnknownAttribute' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ValidResource` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_core_E3001_resource_shape_yaml` - > Resource 'ValidResource' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L97 in `bad_core_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_core_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `bad_core_conditions_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `bad_core_conditions_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L51 in `bad_core_conditions_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L64 in `bad_core_conditions_yaml` - > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `bad_core_conditions_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `bad_core_config_configure_e3012_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_directives_yaml` - > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L34 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_directives_yaml` - > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L29 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L22 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ScalarCreationPolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L6 in `bad_core_resource_attributes_yaml` - > Resource 'ScalarCreationPolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `ScalarUpdatePolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L9 in `bad_core_resource_attributes_yaml` - > Resource 'ScalarUpdatePolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `StandardVersion` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_core_resource_attributes_yaml` - > Resource 'StandardVersion' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `UnsupportedAttributes` (AWS::S3::Bucket) → `Properties.Tags` L18 in `bad_core_resource_attributes_yaml` - > Resource 'UnsupportedAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L28 in `bad_cross_resource_task10_yaml` - > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_cross_resource_task10_yaml` - > Resource 'BadASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.Tags` L41 in `bad_cross_resource_task10_yaml` - > Resource 'BadEnvLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BadFargateService` (AWS::ECS::Service) → `Properties.Tags` L75 in `bad_cross_resource_task10_yaml` - > Resource 'BadFargateService' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BadImageLambda` (AWS::Lambda::Function) → `Properties.Tags` L54 in `bad_cross_resource_task10_yaml` - > Resource 'BadImageLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L19 in `bad_cross_resource_task10_yaml` - > Resource 'BadListener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `BadRestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L64 in `bad_cross_resource_task10_yaml` - > Resource 'BadRestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `bad_cross_resource_task10_yaml` - > Resource 'BadValkey' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L34 in `bad_cross_resource_task10_yaml` - > Resource 'TG' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_cross_resource_task10_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyEipNat` (AWS::EC2::EIP) → `Properties.Tags` L13 in `bad_duplicate_json` - > Resource 'MyEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `MySNSTopic` (AWS::SNS::Topic) → `Properties.Tags` L25 in `bad_duplicate_json` - > Resource 'MySNSTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_duplicate_primary_id_multi_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_duplicate_primary_id_multi_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_duplicate_primary_id_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_duplicate_primary_id_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_duplicate_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_duplicate_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BadTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_attribute_mismatch_yaml` - > Resource 'BadTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Repo` (AWS::ECR::Repository) → `Properties.Tags` L5 in `bad_ecr_policy_no_statement_yaml` - > Resource 'Repo' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L21 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L14 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L16 in `bad_ecs_fargate_mismatch_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_fargate_mismatch_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ExecRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `bad_ecs_role_no_boundary_yaml` - > Resource 'ExecRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `bad_ecs_role_no_boundary_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_ecs_role_no_boundary_yaml` - > Resource 'TaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L5 in `bad_elb_http_443_yaml` - > Resource 'Listener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_equals_wrong_arity_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_fargate_bad_cpu_memory_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L23 in `bad_fargate_daemon_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateDaemon` (AWS::ECS::Service) → `Properties.Tags` L5 in `bad_fargate_daemon_yaml` - > Resource 'FargateDaemon' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `bad_fargate_daemon_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `bad_formatters_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_base64_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_findinmap_default_value_no_transform_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L10 in `bad_functions_findinmap_enhanced_invalid_key_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_json` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_functions_get_stack_output_json` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_json` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_functions_get_stack_output_json` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L20 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic5` (AWS::SQS::Queue) → `Properties.Tags` L35 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic5' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `mySubnet1` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `bad_functions_getaz_yaml` - > Resource 'mySubnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet2` (AWS::EC2::Subnet) → `Properties.Tags` L21 in `bad_functions_getaz_yaml` - > Resource 'mySubnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet3` (AWS::EC2::Subnet) → `Properties.Tags` L30 in `bad_functions_getaz_yaml` - > Resource 'mySubnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `subnet` (AWS::EC2::Subnet) → `Properties.Tags` L8 in `bad_functions_import_value_yaml` - > Resource 'subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_join_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L18 in `bad_functions_join_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L12 in `bad_functions_length_no_transform_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L50 in `bad_functions_ref_yaml` - > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_functions_ref_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `bad_functions_ref_yaml` - > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_functions_ref_yaml` - > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L35 in `bad_functions_relationship_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `bad_functions_relationship_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SubCondGetAttParam` (AWS::SSM::Parameter) → `Properties.Tags` L57 in `bad_functions_relationship_conditions_yaml` - > Resource 'SubCondGetAttParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `SubCondRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L51 in `bad_functions_relationship_conditions_yaml` - > Resource 'SubCondRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_select_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L16 in `bad_functions_select_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_functions_select_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L33 in `bad_functions_select_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `TestBadStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L37 in `bad_functions_sub_needed_yaml` - > Resource 'TestBadStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `TestBadStateMachine2` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L58 in `bad_functions_sub_needed_yaml` - > Resource 'TestBadStateMachine2' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L10 in `bad_functions_sub_needed_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L32 in `bad_functions_sub_needed_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_functions_tojsonstring_no_transform_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L112 in `bad_generic_yaml` - > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L42 in `bad_generic_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L62 in `bad_generic_yaml` - > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.Tags` L218 in `bad_generic_yaml` - > Resource 'MyEc2BlockDevice' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L71 in `bad_generic_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L195 in `bad_generic_yaml` - > Resource 'lambdaMap1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L203 in `bad_generic_yaml` - > Resource 'lambdaMap2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `myEc2Instance4` (AWS::EC2::Instance) → `Properties.Tags` L67 in `bad_generic_yaml` - > Resource 'myEc2Instance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myIamProfile` (AWS::IAM::Role) → `Properties.Tags` L25 in `bad_generic_yaml` - > Resource 'myIamProfile' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myIamProfile2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_generic_yaml` - > Resource 'myIamProfile2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myIamProfile3` (AWS::IAM::Role) → `Properties.Tags` L32 in `bad_generic_yaml` - > Resource 'myIamProfile3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myLambdaTwo` (AWS::Lambda::Function) → `Properties.Tags` L146 in `bad_generic_yaml` - > Resource 'myLambdaTwo' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_getatt_object_attribute_member_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Param` (AWS::SSM::Parameter) → `Properties.Tags` L13 in `bad_getatt_object_attribute_member_yaml` - > Resource 'Param' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hard_coded_arn_properties_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L26 in `bad_hard_coded_arn_properties_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hardcoded_partition_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_hardcoded_partition_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Project` (AWS::CodeBuild::Project) → `Properties.Tags` L16 in `bad_iam_ref_with_path_yaml` - > Resource 'Project' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_iam_ref_with_path_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `NotActionUser` (AWS::IAM::User) → `Properties.Tags` L36 in `bad_iam_wildcard_all_types_yaml` - > Resource 'NotActionUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `WildcardUser` (AWS::IAM::User) → `Properties.Tags` L5 in `bad_iam_wildcard_all_types_yaml` - > Resource 'WildcardUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_if_wrong_arity_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_deletion_policy_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L6 in `bad_invalid_mapping_structure_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_update_replace_policy_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.Tags` L5 in `bad_issues_yaml` - > Resource 'RDSOptionGroup' of type 'AWS::RDS::OptionGroup' supports Tags but none are configured -- **I9040** `Fn` (AWS::Lambda::Function) → `Properties.Tags` L10 in `bad_lambda_image_handler_intrinsic_yaml` - > Resource 'Fn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_no_snapstart_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_bad_runtime_yaml` - > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_no_version_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L19 in `bad_lambda_sqs_timeout_yaml` - > Resource 'ESM' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L9 in `bad_lambda_sqs_timeout_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_lambda_sqs_timeout_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zip_no_handler_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zipfile_java_yaml` - > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BothBranchesInvalid` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'BothBranchesInvalid' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalInvalidDeletion` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalInvalidDeletion' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalInvalidUpdate` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalInvalidUpdate' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DirectNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'DirectNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DynamicObjectPolicy` (AWS::S3::Bucket) → `Properties.Tags` L38 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'DynamicObjectPolicy' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'CreationNoValueOnUnsupportedType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ListPolicies` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'ListPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `Properties.Tags` L36 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'NoValuePoliciesWithoutTransform' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `ObjectPolicies` (AWS::S3::Bucket) → `Properties.Tags` L13 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'ObjectPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Resource1` (AWS::SNS::Topic) → `Properties.Tags` L405 in `bad_limit_numbers_yaml` - > Resource 'Resource1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource10` (AWS::SNS::Topic) → `Properties.Tags` L423 in `bad_limit_numbers_yaml` - > Resource 'Resource10' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource100` (AWS::SNS::Topic) → `Properties.Tags` L603 in `bad_limit_numbers_yaml` - > Resource 'Resource100' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource101` (AWS::SNS::Topic) → `Properties.Tags` L605 in `bad_limit_numbers_yaml` - > Resource 'Resource101' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource102` (AWS::SNS::Topic) → `Properties.Tags` L607 in `bad_limit_numbers_yaml` - > Resource 'Resource102' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource103` (AWS::SNS::Topic) → `Properties.Tags` L609 in `bad_limit_numbers_yaml` - > Resource 'Resource103' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource104` (AWS::SNS::Topic) → `Properties.Tags` L611 in `bad_limit_numbers_yaml` - > Resource 'Resource104' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource105` (AWS::SNS::Topic) → `Properties.Tags` L613 in `bad_limit_numbers_yaml` - > Resource 'Resource105' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource106` (AWS::SNS::Topic) → `Properties.Tags` L615 in `bad_limit_numbers_yaml` - > Resource 'Resource106' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource107` (AWS::SNS::Topic) → `Properties.Tags` L617 in `bad_limit_numbers_yaml` - > Resource 'Resource107' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource108` (AWS::SNS::Topic) → `Properties.Tags` L619 in `bad_limit_numbers_yaml` - > Resource 'Resource108' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource109` (AWS::SNS::Topic) → `Properties.Tags` L621 in `bad_limit_numbers_yaml` - > Resource 'Resource109' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource11` (AWS::SNS::Topic) → `Properties.Tags` L425 in `bad_limit_numbers_yaml` - > Resource 'Resource11' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource110` (AWS::SNS::Topic) → `Properties.Tags` L623 in `bad_limit_numbers_yaml` - > Resource 'Resource110' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource111` (AWS::SNS::Topic) → `Properties.Tags` L625 in `bad_limit_numbers_yaml` - > Resource 'Resource111' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource112` (AWS::SNS::Topic) → `Properties.Tags` L627 in `bad_limit_numbers_yaml` - > Resource 'Resource112' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource113` (AWS::SNS::Topic) → `Properties.Tags` L629 in `bad_limit_numbers_yaml` - > Resource 'Resource113' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource114` (AWS::SNS::Topic) → `Properties.Tags` L631 in `bad_limit_numbers_yaml` - > Resource 'Resource114' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource115` (AWS::SNS::Topic) → `Properties.Tags` L633 in `bad_limit_numbers_yaml` - > Resource 'Resource115' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource116` (AWS::SNS::Topic) → `Properties.Tags` L635 in `bad_limit_numbers_yaml` - > Resource 'Resource116' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource117` (AWS::SNS::Topic) → `Properties.Tags` L637 in `bad_limit_numbers_yaml` - > Resource 'Resource117' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource118` (AWS::SNS::Topic) → `Properties.Tags` L639 in `bad_limit_numbers_yaml` - > Resource 'Resource118' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource119` (AWS::SNS::Topic) → `Properties.Tags` L641 in `bad_limit_numbers_yaml` - > Resource 'Resource119' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource12` (AWS::SNS::Topic) → `Properties.Tags` L427 in `bad_limit_numbers_yaml` - > Resource 'Resource12' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource120` (AWS::SNS::Topic) → `Properties.Tags` L643 in `bad_limit_numbers_yaml` - > Resource 'Resource120' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource121` (AWS::SNS::Topic) → `Properties.Tags` L645 in `bad_limit_numbers_yaml` - > Resource 'Resource121' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource122` (AWS::SNS::Topic) → `Properties.Tags` L647 in `bad_limit_numbers_yaml` - > Resource 'Resource122' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource123` (AWS::SNS::Topic) → `Properties.Tags` L649 in `bad_limit_numbers_yaml` - > Resource 'Resource123' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource124` (AWS::SNS::Topic) → `Properties.Tags` L651 in `bad_limit_numbers_yaml` - > Resource 'Resource124' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource125` (AWS::SNS::Topic) → `Properties.Tags` L653 in `bad_limit_numbers_yaml` - > Resource 'Resource125' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource126` (AWS::SNS::Topic) → `Properties.Tags` L655 in `bad_limit_numbers_yaml` - > Resource 'Resource126' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource127` (AWS::SNS::Topic) → `Properties.Tags` L657 in `bad_limit_numbers_yaml` - > Resource 'Resource127' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource128` (AWS::SNS::Topic) → `Properties.Tags` L659 in `bad_limit_numbers_yaml` - > Resource 'Resource128' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource129` (AWS::SNS::Topic) → `Properties.Tags` L661 in `bad_limit_numbers_yaml` - > Resource 'Resource129' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource13` (AWS::SNS::Topic) → `Properties.Tags` L429 in `bad_limit_numbers_yaml` - > Resource 'Resource13' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource130` (AWS::SNS::Topic) → `Properties.Tags` L663 in `bad_limit_numbers_yaml` - > Resource 'Resource130' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource131` (AWS::SNS::Topic) → `Properties.Tags` L665 in `bad_limit_numbers_yaml` - > Resource 'Resource131' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource132` (AWS::SNS::Topic) → `Properties.Tags` L667 in `bad_limit_numbers_yaml` - > Resource 'Resource132' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource133` (AWS::SNS::Topic) → `Properties.Tags` L669 in `bad_limit_numbers_yaml` - > Resource 'Resource133' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource134` (AWS::SNS::Topic) → `Properties.Tags` L671 in `bad_limit_numbers_yaml` - > Resource 'Resource134' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource135` (AWS::SNS::Topic) → `Properties.Tags` L673 in `bad_limit_numbers_yaml` - > Resource 'Resource135' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource136` (AWS::SNS::Topic) → `Properties.Tags` L675 in `bad_limit_numbers_yaml` - > Resource 'Resource136' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource137` (AWS::SNS::Topic) → `Properties.Tags` L677 in `bad_limit_numbers_yaml` - > Resource 'Resource137' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource138` (AWS::SNS::Topic) → `Properties.Tags` L679 in `bad_limit_numbers_yaml` - > Resource 'Resource138' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource139` (AWS::SNS::Topic) → `Properties.Tags` L681 in `bad_limit_numbers_yaml` - > Resource 'Resource139' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource14` (AWS::SNS::Topic) → `Properties.Tags` L431 in `bad_limit_numbers_yaml` - > Resource 'Resource14' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource140` (AWS::SNS::Topic) → `Properties.Tags` L683 in `bad_limit_numbers_yaml` - > Resource 'Resource140' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource141` (AWS::SNS::Topic) → `Properties.Tags` L685 in `bad_limit_numbers_yaml` - > Resource 'Resource141' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource142` (AWS::SNS::Topic) → `Properties.Tags` L687 in `bad_limit_numbers_yaml` - > Resource 'Resource142' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource143` (AWS::SNS::Topic) → `Properties.Tags` L689 in `bad_limit_numbers_yaml` - > Resource 'Resource143' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource144` (AWS::SNS::Topic) → `Properties.Tags` L691 in `bad_limit_numbers_yaml` - > Resource 'Resource144' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource145` (AWS::SNS::Topic) → `Properties.Tags` L693 in `bad_limit_numbers_yaml` - > Resource 'Resource145' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource146` (AWS::SNS::Topic) → `Properties.Tags` L695 in `bad_limit_numbers_yaml` - > Resource 'Resource146' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource147` (AWS::SNS::Topic) → `Properties.Tags` L697 in `bad_limit_numbers_yaml` - > Resource 'Resource147' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource148` (AWS::SNS::Topic) → `Properties.Tags` L699 in `bad_limit_numbers_yaml` - > Resource 'Resource148' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource149` (AWS::SNS::Topic) → `Properties.Tags` L701 in `bad_limit_numbers_yaml` - > Resource 'Resource149' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource15` (AWS::SNS::Topic) → `Properties.Tags` L433 in `bad_limit_numbers_yaml` - > Resource 'Resource15' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource150` (AWS::SNS::Topic) → `Properties.Tags` L703 in `bad_limit_numbers_yaml` - > Resource 'Resource150' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource151` (AWS::SNS::Topic) → `Properties.Tags` L705 in `bad_limit_numbers_yaml` - > Resource 'Resource151' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource152` (AWS::SNS::Topic) → `Properties.Tags` L707 in `bad_limit_numbers_yaml` - > Resource 'Resource152' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource153` (AWS::SNS::Topic) → `Properties.Tags` L709 in `bad_limit_numbers_yaml` - > Resource 'Resource153' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource154` (AWS::SNS::Topic) → `Properties.Tags` L711 in `bad_limit_numbers_yaml` - > Resource 'Resource154' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource155` (AWS::SNS::Topic) → `Properties.Tags` L713 in `bad_limit_numbers_yaml` - > Resource 'Resource155' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource156` (AWS::SNS::Topic) → `Properties.Tags` L715 in `bad_limit_numbers_yaml` - > Resource 'Resource156' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource157` (AWS::SNS::Topic) → `Properties.Tags` L717 in `bad_limit_numbers_yaml` - > Resource 'Resource157' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource158` (AWS::SNS::Topic) → `Properties.Tags` L719 in `bad_limit_numbers_yaml` - > Resource 'Resource158' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource159` (AWS::SNS::Topic) → `Properties.Tags` L721 in `bad_limit_numbers_yaml` - > Resource 'Resource159' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource16` (AWS::SNS::Topic) → `Properties.Tags` L435 in `bad_limit_numbers_yaml` - > Resource 'Resource16' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource160` (AWS::SNS::Topic) → `Properties.Tags` L723 in `bad_limit_numbers_yaml` - > Resource 'Resource160' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource161` (AWS::SNS::Topic) → `Properties.Tags` L725 in `bad_limit_numbers_yaml` - > Resource 'Resource161' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource162` (AWS::SNS::Topic) → `Properties.Tags` L727 in `bad_limit_numbers_yaml` - > Resource 'Resource162' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource163` (AWS::SNS::Topic) → `Properties.Tags` L729 in `bad_limit_numbers_yaml` - > Resource 'Resource163' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource164` (AWS::SNS::Topic) → `Properties.Tags` L731 in `bad_limit_numbers_yaml` - > Resource 'Resource164' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource165` (AWS::SNS::Topic) → `Properties.Tags` L733 in `bad_limit_numbers_yaml` - > Resource 'Resource165' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource166` (AWS::SNS::Topic) → `Properties.Tags` L735 in `bad_limit_numbers_yaml` - > Resource 'Resource166' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource167` (AWS::SNS::Topic) → `Properties.Tags` L737 in `bad_limit_numbers_yaml` - > Resource 'Resource167' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource168` (AWS::SNS::Topic) → `Properties.Tags` L739 in `bad_limit_numbers_yaml` - > Resource 'Resource168' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource169` (AWS::SNS::Topic) → `Properties.Tags` L741 in `bad_limit_numbers_yaml` - > Resource 'Resource169' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource17` (AWS::SNS::Topic) → `Properties.Tags` L437 in `bad_limit_numbers_yaml` - > Resource 'Resource17' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource170` (AWS::SNS::Topic) → `Properties.Tags` L743 in `bad_limit_numbers_yaml` - > Resource 'Resource170' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource171` (AWS::SNS::Topic) → `Properties.Tags` L745 in `bad_limit_numbers_yaml` - > Resource 'Resource171' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource172` (AWS::SNS::Topic) → `Properties.Tags` L747 in `bad_limit_numbers_yaml` - > Resource 'Resource172' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource173` (AWS::SNS::Topic) → `Properties.Tags` L749 in `bad_limit_numbers_yaml` - > Resource 'Resource173' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource174` (AWS::SNS::Topic) → `Properties.Tags` L751 in `bad_limit_numbers_yaml` - > Resource 'Resource174' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource175` (AWS::SNS::Topic) → `Properties.Tags` L753 in `bad_limit_numbers_yaml` - > Resource 'Resource175' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource176` (AWS::SNS::Topic) → `Properties.Tags` L755 in `bad_limit_numbers_yaml` - > Resource 'Resource176' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource177` (AWS::SNS::Topic) → `Properties.Tags` L757 in `bad_limit_numbers_yaml` - > Resource 'Resource177' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource178` (AWS::SNS::Topic) → `Properties.Tags` L759 in `bad_limit_numbers_yaml` - > Resource 'Resource178' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource179` (AWS::SNS::Topic) → `Properties.Tags` L761 in `bad_limit_numbers_yaml` - > Resource 'Resource179' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource18` (AWS::SNS::Topic) → `Properties.Tags` L439 in `bad_limit_numbers_yaml` - > Resource 'Resource18' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource180` (AWS::SNS::Topic) → `Properties.Tags` L763 in `bad_limit_numbers_yaml` - > Resource 'Resource180' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource181` (AWS::SNS::Topic) → `Properties.Tags` L765 in `bad_limit_numbers_yaml` - > Resource 'Resource181' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource182` (AWS::SNS::Topic) → `Properties.Tags` L767 in `bad_limit_numbers_yaml` - > Resource 'Resource182' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource183` (AWS::SNS::Topic) → `Properties.Tags` L769 in `bad_limit_numbers_yaml` - > Resource 'Resource183' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource184` (AWS::SNS::Topic) → `Properties.Tags` L771 in `bad_limit_numbers_yaml` - > Resource 'Resource184' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource185` (AWS::SNS::Topic) → `Properties.Tags` L773 in `bad_limit_numbers_yaml` - > Resource 'Resource185' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource186` (AWS::SNS::Topic) → `Properties.Tags` L775 in `bad_limit_numbers_yaml` - > Resource 'Resource186' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource187` (AWS::SNS::Topic) → `Properties.Tags` L777 in `bad_limit_numbers_yaml` - > Resource 'Resource187' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource188` (AWS::SNS::Topic) → `Properties.Tags` L779 in `bad_limit_numbers_yaml` - > Resource 'Resource188' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource189` (AWS::SNS::Topic) → `Properties.Tags` L781 in `bad_limit_numbers_yaml` - > Resource 'Resource189' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource19` (AWS::SNS::Topic) → `Properties.Tags` L441 in `bad_limit_numbers_yaml` - > Resource 'Resource19' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource190` (AWS::SNS::Topic) → `Properties.Tags` L783 in `bad_limit_numbers_yaml` - > Resource 'Resource190' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource191` (AWS::SNS::Topic) → `Properties.Tags` L785 in `bad_limit_numbers_yaml` - > Resource 'Resource191' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource192` (AWS::SNS::Topic) → `Properties.Tags` L787 in `bad_limit_numbers_yaml` - > Resource 'Resource192' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource193` (AWS::SNS::Topic) → `Properties.Tags` L789 in `bad_limit_numbers_yaml` - > Resource 'Resource193' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource194` (AWS::SNS::Topic) → `Properties.Tags` L791 in `bad_limit_numbers_yaml` - > Resource 'Resource194' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource195` (AWS::SNS::Topic) → `Properties.Tags` L793 in `bad_limit_numbers_yaml` - > Resource 'Resource195' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource196` (AWS::SNS::Topic) → `Properties.Tags` L795 in `bad_limit_numbers_yaml` - > Resource 'Resource196' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource197` (AWS::SNS::Topic) → `Properties.Tags` L797 in `bad_limit_numbers_yaml` - > Resource 'Resource197' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource198` (AWS::SNS::Topic) → `Properties.Tags` L799 in `bad_limit_numbers_yaml` - > Resource 'Resource198' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource199` (AWS::SNS::Topic) → `Properties.Tags` L801 in `bad_limit_numbers_yaml` - > Resource 'Resource199' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L407 in `bad_limit_numbers_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource20` (AWS::SNS::Topic) → `Properties.Tags` L443 in `bad_limit_numbers_yaml` - > Resource 'Resource20' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource200` (AWS::SNS::Topic) → `Properties.Tags` L803 in `bad_limit_numbers_yaml` - > Resource 'Resource200' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource201` (AWS::SNS::Topic) → `Properties.Tags` L805 in `bad_limit_numbers_yaml` - > Resource 'Resource201' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource202` (AWS::SNS::Topic) → `Properties.Tags` L807 in `bad_limit_numbers_yaml` - > Resource 'Resource202' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource203` (AWS::SNS::Topic) → `Properties.Tags` L809 in `bad_limit_numbers_yaml` - > Resource 'Resource203' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource204` (AWS::SNS::Topic) → `Properties.Tags` L811 in `bad_limit_numbers_yaml` - > Resource 'Resource204' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource205` (AWS::SNS::Topic) → `Properties.Tags` L813 in `bad_limit_numbers_yaml` - > Resource 'Resource205' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource206` (AWS::SNS::Topic) → `Properties.Tags` L815 in `bad_limit_numbers_yaml` - > Resource 'Resource206' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource207` (AWS::SNS::Topic) → `Properties.Tags` L817 in `bad_limit_numbers_yaml` - > Resource 'Resource207' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource208` (AWS::SNS::Topic) → `Properties.Tags` L819 in `bad_limit_numbers_yaml` - > Resource 'Resource208' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource209` (AWS::SNS::Topic) → `Properties.Tags` L821 in `bad_limit_numbers_yaml` - > Resource 'Resource209' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource21` (AWS::SNS::Topic) → `Properties.Tags` L445 in `bad_limit_numbers_yaml` - > Resource 'Resource21' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource210` (AWS::SNS::Topic) → `Properties.Tags` L823 in `bad_limit_numbers_yaml` - > Resource 'Resource210' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource211` (AWS::SNS::Topic) → `Properties.Tags` L825 in `bad_limit_numbers_yaml` - > Resource 'Resource211' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource212` (AWS::SNS::Topic) → `Properties.Tags` L827 in `bad_limit_numbers_yaml` - > Resource 'Resource212' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource213` (AWS::SNS::Topic) → `Properties.Tags` L829 in `bad_limit_numbers_yaml` - > Resource 'Resource213' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource214` (AWS::SNS::Topic) → `Properties.Tags` L831 in `bad_limit_numbers_yaml` - > Resource 'Resource214' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource215` (AWS::SNS::Topic) → `Properties.Tags` L833 in `bad_limit_numbers_yaml` - > Resource 'Resource215' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource216` (AWS::SNS::Topic) → `Properties.Tags` L835 in `bad_limit_numbers_yaml` - > Resource 'Resource216' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource217` (AWS::SNS::Topic) → `Properties.Tags` L837 in `bad_limit_numbers_yaml` - > Resource 'Resource217' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource218` (AWS::SNS::Topic) → `Properties.Tags` L839 in `bad_limit_numbers_yaml` - > Resource 'Resource218' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource219` (AWS::SNS::Topic) → `Properties.Tags` L841 in `bad_limit_numbers_yaml` - > Resource 'Resource219' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource22` (AWS::SNS::Topic) → `Properties.Tags` L447 in `bad_limit_numbers_yaml` - > Resource 'Resource22' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource220` (AWS::SNS::Topic) → `Properties.Tags` L843 in `bad_limit_numbers_yaml` - > Resource 'Resource220' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource221` (AWS::SNS::Topic) → `Properties.Tags` L845 in `bad_limit_numbers_yaml` - > Resource 'Resource221' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource222` (AWS::SNS::Topic) → `Properties.Tags` L847 in `bad_limit_numbers_yaml` - > Resource 'Resource222' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource223` (AWS::SNS::Topic) → `Properties.Tags` L849 in `bad_limit_numbers_yaml` - > Resource 'Resource223' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource224` (AWS::SNS::Topic) → `Properties.Tags` L851 in `bad_limit_numbers_yaml` - > Resource 'Resource224' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource225` (AWS::SNS::Topic) → `Properties.Tags` L853 in `bad_limit_numbers_yaml` - > Resource 'Resource225' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource226` (AWS::SNS::Topic) → `Properties.Tags` L855 in `bad_limit_numbers_yaml` - > Resource 'Resource226' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource227` (AWS::SNS::Topic) → `Properties.Tags` L857 in `bad_limit_numbers_yaml` - > Resource 'Resource227' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource228` (AWS::SNS::Topic) → `Properties.Tags` L859 in `bad_limit_numbers_yaml` - > Resource 'Resource228' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource229` (AWS::SNS::Topic) → `Properties.Tags` L861 in `bad_limit_numbers_yaml` - > Resource 'Resource229' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource23` (AWS::SNS::Topic) → `Properties.Tags` L449 in `bad_limit_numbers_yaml` - > Resource 'Resource23' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource230` (AWS::SNS::Topic) → `Properties.Tags` L863 in `bad_limit_numbers_yaml` - > Resource 'Resource230' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource231` (AWS::SNS::Topic) → `Properties.Tags` L865 in `bad_limit_numbers_yaml` - > Resource 'Resource231' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource232` (AWS::SNS::Topic) → `Properties.Tags` L867 in `bad_limit_numbers_yaml` - > Resource 'Resource232' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource233` (AWS::SNS::Topic) → `Properties.Tags` L869 in `bad_limit_numbers_yaml` - > Resource 'Resource233' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource234` (AWS::SNS::Topic) → `Properties.Tags` L871 in `bad_limit_numbers_yaml` - > Resource 'Resource234' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource235` (AWS::SNS::Topic) → `Properties.Tags` L873 in `bad_limit_numbers_yaml` - > Resource 'Resource235' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource236` (AWS::SNS::Topic) → `Properties.Tags` L875 in `bad_limit_numbers_yaml` - > Resource 'Resource236' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource237` (AWS::SNS::Topic) → `Properties.Tags` L877 in `bad_limit_numbers_yaml` - > Resource 'Resource237' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource238` (AWS::SNS::Topic) → `Properties.Tags` L879 in `bad_limit_numbers_yaml` - > Resource 'Resource238' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource239` (AWS::SNS::Topic) → `Properties.Tags` L881 in `bad_limit_numbers_yaml` - > Resource 'Resource239' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource24` (AWS::SNS::Topic) → `Properties.Tags` L451 in `bad_limit_numbers_yaml` - > Resource 'Resource24' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource240` (AWS::SNS::Topic) → `Properties.Tags` L883 in `bad_limit_numbers_yaml` - > Resource 'Resource240' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource241` (AWS::SNS::Topic) → `Properties.Tags` L885 in `bad_limit_numbers_yaml` - > Resource 'Resource241' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource242` (AWS::SNS::Topic) → `Properties.Tags` L887 in `bad_limit_numbers_yaml` - > Resource 'Resource242' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource243` (AWS::SNS::Topic) → `Properties.Tags` L889 in `bad_limit_numbers_yaml` - > Resource 'Resource243' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource244` (AWS::SNS::Topic) → `Properties.Tags` L891 in `bad_limit_numbers_yaml` - > Resource 'Resource244' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource245` (AWS::SNS::Topic) → `Properties.Tags` L893 in `bad_limit_numbers_yaml` - > Resource 'Resource245' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource246` (AWS::SNS::Topic) → `Properties.Tags` L895 in `bad_limit_numbers_yaml` - > Resource 'Resource246' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource247` (AWS::SNS::Topic) → `Properties.Tags` L897 in `bad_limit_numbers_yaml` - > Resource 'Resource247' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource248` (AWS::SNS::Topic) → `Properties.Tags` L899 in `bad_limit_numbers_yaml` - > Resource 'Resource248' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource249` (AWS::SNS::Topic) → `Properties.Tags` L901 in `bad_limit_numbers_yaml` - > Resource 'Resource249' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource25` (AWS::SNS::Topic) → `Properties.Tags` L453 in `bad_limit_numbers_yaml` - > Resource 'Resource25' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource250` (AWS::SNS::Topic) → `Properties.Tags` L903 in `bad_limit_numbers_yaml` - > Resource 'Resource250' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource251` (AWS::SNS::Topic) → `Properties.Tags` L905 in `bad_limit_numbers_yaml` - > Resource 'Resource251' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource252` (AWS::SNS::Topic) → `Properties.Tags` L907 in `bad_limit_numbers_yaml` - > Resource 'Resource252' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource253` (AWS::SNS::Topic) → `Properties.Tags` L909 in `bad_limit_numbers_yaml` - > Resource 'Resource253' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource254` (AWS::SNS::Topic) → `Properties.Tags` L911 in `bad_limit_numbers_yaml` - > Resource 'Resource254' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource255` (AWS::SNS::Topic) → `Properties.Tags` L913 in `bad_limit_numbers_yaml` - > Resource 'Resource255' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource256` (AWS::SNS::Topic) → `Properties.Tags` L915 in `bad_limit_numbers_yaml` - > Resource 'Resource256' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource257` (AWS::SNS::Topic) → `Properties.Tags` L917 in `bad_limit_numbers_yaml` - > Resource 'Resource257' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource258` (AWS::SNS::Topic) → `Properties.Tags` L919 in `bad_limit_numbers_yaml` - > Resource 'Resource258' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource259` (AWS::SNS::Topic) → `Properties.Tags` L921 in `bad_limit_numbers_yaml` - > Resource 'Resource259' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource26` (AWS::SNS::Topic) → `Properties.Tags` L455 in `bad_limit_numbers_yaml` - > Resource 'Resource26' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource260` (AWS::SNS::Topic) → `Properties.Tags` L923 in `bad_limit_numbers_yaml` - > Resource 'Resource260' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource261` (AWS::SNS::Topic) → `Properties.Tags` L925 in `bad_limit_numbers_yaml` - > Resource 'Resource261' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource262` (AWS::SNS::Topic) → `Properties.Tags` L927 in `bad_limit_numbers_yaml` - > Resource 'Resource262' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource263` (AWS::SNS::Topic) → `Properties.Tags` L929 in `bad_limit_numbers_yaml` - > Resource 'Resource263' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource264` (AWS::SNS::Topic) → `Properties.Tags` L931 in `bad_limit_numbers_yaml` - > Resource 'Resource264' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource265` (AWS::SNS::Topic) → `Properties.Tags` L933 in `bad_limit_numbers_yaml` - > Resource 'Resource265' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource266` (AWS::SNS::Topic) → `Properties.Tags` L935 in `bad_limit_numbers_yaml` - > Resource 'Resource266' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource267` (AWS::SNS::Topic) → `Properties.Tags` L937 in `bad_limit_numbers_yaml` - > Resource 'Resource267' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource268` (AWS::SNS::Topic) → `Properties.Tags` L939 in `bad_limit_numbers_yaml` - > Resource 'Resource268' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource269` (AWS::SNS::Topic) → `Properties.Tags` L941 in `bad_limit_numbers_yaml` - > Resource 'Resource269' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource27` (AWS::SNS::Topic) → `Properties.Tags` L457 in `bad_limit_numbers_yaml` - > Resource 'Resource27' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource270` (AWS::SNS::Topic) → `Properties.Tags` L943 in `bad_limit_numbers_yaml` - > Resource 'Resource270' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource271` (AWS::SNS::Topic) → `Properties.Tags` L945 in `bad_limit_numbers_yaml` - > Resource 'Resource271' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource272` (AWS::SNS::Topic) → `Properties.Tags` L947 in `bad_limit_numbers_yaml` - > Resource 'Resource272' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource273` (AWS::SNS::Topic) → `Properties.Tags` L949 in `bad_limit_numbers_yaml` - > Resource 'Resource273' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource274` (AWS::SNS::Topic) → `Properties.Tags` L951 in `bad_limit_numbers_yaml` - > Resource 'Resource274' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource275` (AWS::SNS::Topic) → `Properties.Tags` L953 in `bad_limit_numbers_yaml` - > Resource 'Resource275' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource276` (AWS::SNS::Topic) → `Properties.Tags` L955 in `bad_limit_numbers_yaml` - > Resource 'Resource276' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource277` (AWS::SNS::Topic) → `Properties.Tags` L957 in `bad_limit_numbers_yaml` - > Resource 'Resource277' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource278` (AWS::SNS::Topic) → `Properties.Tags` L959 in `bad_limit_numbers_yaml` - > Resource 'Resource278' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource279` (AWS::SNS::Topic) → `Properties.Tags` L961 in `bad_limit_numbers_yaml` - > Resource 'Resource279' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource28` (AWS::SNS::Topic) → `Properties.Tags` L459 in `bad_limit_numbers_yaml` - > Resource 'Resource28' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource280` (AWS::SNS::Topic) → `Properties.Tags` L963 in `bad_limit_numbers_yaml` - > Resource 'Resource280' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource281` (AWS::SNS::Topic) → `Properties.Tags` L965 in `bad_limit_numbers_yaml` - > Resource 'Resource281' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource282` (AWS::SNS::Topic) → `Properties.Tags` L967 in `bad_limit_numbers_yaml` - > Resource 'Resource282' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource283` (AWS::SNS::Topic) → `Properties.Tags` L969 in `bad_limit_numbers_yaml` - > Resource 'Resource283' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource284` (AWS::SNS::Topic) → `Properties.Tags` L971 in `bad_limit_numbers_yaml` - > Resource 'Resource284' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource285` (AWS::SNS::Topic) → `Properties.Tags` L973 in `bad_limit_numbers_yaml` - > Resource 'Resource285' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource286` (AWS::SNS::Topic) → `Properties.Tags` L975 in `bad_limit_numbers_yaml` - > Resource 'Resource286' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource287` (AWS::SNS::Topic) → `Properties.Tags` L977 in `bad_limit_numbers_yaml` - > Resource 'Resource287' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource288` (AWS::SNS::Topic) → `Properties.Tags` L979 in `bad_limit_numbers_yaml` - > Resource 'Resource288' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource289` (AWS::SNS::Topic) → `Properties.Tags` L981 in `bad_limit_numbers_yaml` - > Resource 'Resource289' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource29` (AWS::SNS::Topic) → `Properties.Tags` L461 in `bad_limit_numbers_yaml` - > Resource 'Resource29' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource290` (AWS::SNS::Topic) → `Properties.Tags` L983 in `bad_limit_numbers_yaml` - > Resource 'Resource290' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource291` (AWS::SNS::Topic) → `Properties.Tags` L985 in `bad_limit_numbers_yaml` - > Resource 'Resource291' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource292` (AWS::SNS::Topic) → `Properties.Tags` L987 in `bad_limit_numbers_yaml` - > Resource 'Resource292' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource293` (AWS::SNS::Topic) → `Properties.Tags` L989 in `bad_limit_numbers_yaml` - > Resource 'Resource293' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource294` (AWS::SNS::Topic) → `Properties.Tags` L991 in `bad_limit_numbers_yaml` - > Resource 'Resource294' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource295` (AWS::SNS::Topic) → `Properties.Tags` L993 in `bad_limit_numbers_yaml` - > Resource 'Resource295' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource296` (AWS::SNS::Topic) → `Properties.Tags` L995 in `bad_limit_numbers_yaml` - > Resource 'Resource296' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource297` (AWS::SNS::Topic) → `Properties.Tags` L997 in `bad_limit_numbers_yaml` - > Resource 'Resource297' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource298` (AWS::SNS::Topic) → `Properties.Tags` L999 in `bad_limit_numbers_yaml` - > Resource 'Resource298' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource299` (AWS::SNS::Topic) → `Properties.Tags` L1001 in `bad_limit_numbers_yaml` - > Resource 'Resource299' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L409 in `bad_limit_numbers_yaml` - > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource30` (AWS::SNS::Topic) → `Properties.Tags` L463 in `bad_limit_numbers_yaml` - > Resource 'Resource30' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource300` (AWS::SNS::Topic) → `Properties.Tags` L1003 in `bad_limit_numbers_yaml` - > Resource 'Resource300' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource301` (AWS::SNS::Topic) → `Properties.Tags` L1005 in `bad_limit_numbers_yaml` - > Resource 'Resource301' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource302` (AWS::SNS::Topic) → `Properties.Tags` L1007 in `bad_limit_numbers_yaml` - > Resource 'Resource302' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource303` (AWS::SNS::Topic) → `Properties.Tags` L1009 in `bad_limit_numbers_yaml` - > Resource 'Resource303' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource304` (AWS::SNS::Topic) → `Properties.Tags` L1011 in `bad_limit_numbers_yaml` - > Resource 'Resource304' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource305` (AWS::SNS::Topic) → `Properties.Tags` L1013 in `bad_limit_numbers_yaml` - > Resource 'Resource305' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource306` (AWS::SNS::Topic) → `Properties.Tags` L1015 in `bad_limit_numbers_yaml` - > Resource 'Resource306' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource307` (AWS::SNS::Topic) → `Properties.Tags` L1017 in `bad_limit_numbers_yaml` - > Resource 'Resource307' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource308` (AWS::SNS::Topic) → `Properties.Tags` L1019 in `bad_limit_numbers_yaml` - > Resource 'Resource308' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource309` (AWS::SNS::Topic) → `Properties.Tags` L1021 in `bad_limit_numbers_yaml` - > Resource 'Resource309' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource31` (AWS::SNS::Topic) → `Properties.Tags` L465 in `bad_limit_numbers_yaml` - > Resource 'Resource31' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource310` (AWS::SNS::Topic) → `Properties.Tags` L1023 in `bad_limit_numbers_yaml` - > Resource 'Resource310' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource311` (AWS::SNS::Topic) → `Properties.Tags` L1025 in `bad_limit_numbers_yaml` - > Resource 'Resource311' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource312` (AWS::SNS::Topic) → `Properties.Tags` L1027 in `bad_limit_numbers_yaml` - > Resource 'Resource312' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource313` (AWS::SNS::Topic) → `Properties.Tags` L1029 in `bad_limit_numbers_yaml` - > Resource 'Resource313' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource314` (AWS::SNS::Topic) → `Properties.Tags` L1031 in `bad_limit_numbers_yaml` - > Resource 'Resource314' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource315` (AWS::SNS::Topic) → `Properties.Tags` L1033 in `bad_limit_numbers_yaml` - > Resource 'Resource315' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource316` (AWS::SNS::Topic) → `Properties.Tags` L1035 in `bad_limit_numbers_yaml` - > Resource 'Resource316' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource317` (AWS::SNS::Topic) → `Properties.Tags` L1037 in `bad_limit_numbers_yaml` - > Resource 'Resource317' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource318` (AWS::SNS::Topic) → `Properties.Tags` L1039 in `bad_limit_numbers_yaml` - > Resource 'Resource318' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource319` (AWS::SNS::Topic) → `Properties.Tags` L1041 in `bad_limit_numbers_yaml` - > Resource 'Resource319' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource32` (AWS::SNS::Topic) → `Properties.Tags` L467 in `bad_limit_numbers_yaml` - > Resource 'Resource32' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource320` (AWS::SNS::Topic) → `Properties.Tags` L1043 in `bad_limit_numbers_yaml` - > Resource 'Resource320' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource321` (AWS::SNS::Topic) → `Properties.Tags` L1045 in `bad_limit_numbers_yaml` - > Resource 'Resource321' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource322` (AWS::SNS::Topic) → `Properties.Tags` L1047 in `bad_limit_numbers_yaml` - > Resource 'Resource322' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource323` (AWS::SNS::Topic) → `Properties.Tags` L1049 in `bad_limit_numbers_yaml` - > Resource 'Resource323' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource324` (AWS::SNS::Topic) → `Properties.Tags` L1051 in `bad_limit_numbers_yaml` - > Resource 'Resource324' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource325` (AWS::SNS::Topic) → `Properties.Tags` L1053 in `bad_limit_numbers_yaml` - > Resource 'Resource325' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource326` (AWS::SNS::Topic) → `Properties.Tags` L1055 in `bad_limit_numbers_yaml` - > Resource 'Resource326' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource327` (AWS::SNS::Topic) → `Properties.Tags` L1057 in `bad_limit_numbers_yaml` - > Resource 'Resource327' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource328` (AWS::SNS::Topic) → `Properties.Tags` L1059 in `bad_limit_numbers_yaml` - > Resource 'Resource328' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource329` (AWS::SNS::Topic) → `Properties.Tags` L1061 in `bad_limit_numbers_yaml` - > Resource 'Resource329' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource33` (AWS::SNS::Topic) → `Properties.Tags` L469 in `bad_limit_numbers_yaml` - > Resource 'Resource33' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource330` (AWS::SNS::Topic) → `Properties.Tags` L1063 in `bad_limit_numbers_yaml` - > Resource 'Resource330' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource331` (AWS::SNS::Topic) → `Properties.Tags` L1065 in `bad_limit_numbers_yaml` - > Resource 'Resource331' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource332` (AWS::SNS::Topic) → `Properties.Tags` L1067 in `bad_limit_numbers_yaml` - > Resource 'Resource332' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource333` (AWS::SNS::Topic) → `Properties.Tags` L1069 in `bad_limit_numbers_yaml` - > Resource 'Resource333' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource334` (AWS::SNS::Topic) → `Properties.Tags` L1071 in `bad_limit_numbers_yaml` - > Resource 'Resource334' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource335` (AWS::SNS::Topic) → `Properties.Tags` L1073 in `bad_limit_numbers_yaml` - > Resource 'Resource335' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource336` (AWS::SNS::Topic) → `Properties.Tags` L1075 in `bad_limit_numbers_yaml` - > Resource 'Resource336' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource337` (AWS::SNS::Topic) → `Properties.Tags` L1077 in `bad_limit_numbers_yaml` - > Resource 'Resource337' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource338` (AWS::SNS::Topic) → `Properties.Tags` L1079 in `bad_limit_numbers_yaml` - > Resource 'Resource338' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource339` (AWS::SNS::Topic) → `Properties.Tags` L1081 in `bad_limit_numbers_yaml` - > Resource 'Resource339' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource34` (AWS::SNS::Topic) → `Properties.Tags` L471 in `bad_limit_numbers_yaml` - > Resource 'Resource34' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource340` (AWS::SNS::Topic) → `Properties.Tags` L1083 in `bad_limit_numbers_yaml` - > Resource 'Resource340' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource341` (AWS::SNS::Topic) → `Properties.Tags` L1085 in `bad_limit_numbers_yaml` - > Resource 'Resource341' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource342` (AWS::SNS::Topic) → `Properties.Tags` L1087 in `bad_limit_numbers_yaml` - > Resource 'Resource342' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource343` (AWS::SNS::Topic) → `Properties.Tags` L1089 in `bad_limit_numbers_yaml` - > Resource 'Resource343' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource344` (AWS::SNS::Topic) → `Properties.Tags` L1091 in `bad_limit_numbers_yaml` - > Resource 'Resource344' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource345` (AWS::SNS::Topic) → `Properties.Tags` L1093 in `bad_limit_numbers_yaml` - > Resource 'Resource345' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource346` (AWS::SNS::Topic) → `Properties.Tags` L1095 in `bad_limit_numbers_yaml` - > Resource 'Resource346' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource347` (AWS::SNS::Topic) → `Properties.Tags` L1097 in `bad_limit_numbers_yaml` - > Resource 'Resource347' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource348` (AWS::SNS::Topic) → `Properties.Tags` L1099 in `bad_limit_numbers_yaml` - > Resource 'Resource348' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource349` (AWS::SNS::Topic) → `Properties.Tags` L1101 in `bad_limit_numbers_yaml` - > Resource 'Resource349' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource35` (AWS::SNS::Topic) → `Properties.Tags` L473 in `bad_limit_numbers_yaml` - > Resource 'Resource35' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource350` (AWS::SNS::Topic) → `Properties.Tags` L1103 in `bad_limit_numbers_yaml` - > Resource 'Resource350' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource351` (AWS::SNS::Topic) → `Properties.Tags` L1105 in `bad_limit_numbers_yaml` - > Resource 'Resource351' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource352` (AWS::SNS::Topic) → `Properties.Tags` L1107 in `bad_limit_numbers_yaml` - > Resource 'Resource352' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource353` (AWS::SNS::Topic) → `Properties.Tags` L1109 in `bad_limit_numbers_yaml` - > Resource 'Resource353' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource354` (AWS::SNS::Topic) → `Properties.Tags` L1111 in `bad_limit_numbers_yaml` - > Resource 'Resource354' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource355` (AWS::SNS::Topic) → `Properties.Tags` L1113 in `bad_limit_numbers_yaml` - > Resource 'Resource355' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource356` (AWS::SNS::Topic) → `Properties.Tags` L1115 in `bad_limit_numbers_yaml` - > Resource 'Resource356' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource357` (AWS::SNS::Topic) → `Properties.Tags` L1117 in `bad_limit_numbers_yaml` - > Resource 'Resource357' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource358` (AWS::SNS::Topic) → `Properties.Tags` L1119 in `bad_limit_numbers_yaml` - > Resource 'Resource358' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource359` (AWS::SNS::Topic) → `Properties.Tags` L1121 in `bad_limit_numbers_yaml` - > Resource 'Resource359' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource36` (AWS::SNS::Topic) → `Properties.Tags` L475 in `bad_limit_numbers_yaml` - > Resource 'Resource36' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource360` (AWS::SNS::Topic) → `Properties.Tags` L1123 in `bad_limit_numbers_yaml` - > Resource 'Resource360' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource361` (AWS::SNS::Topic) → `Properties.Tags` L1125 in `bad_limit_numbers_yaml` - > Resource 'Resource361' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource362` (AWS::SNS::Topic) → `Properties.Tags` L1127 in `bad_limit_numbers_yaml` - > Resource 'Resource362' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource363` (AWS::SNS::Topic) → `Properties.Tags` L1129 in `bad_limit_numbers_yaml` - > Resource 'Resource363' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource364` (AWS::SNS::Topic) → `Properties.Tags` L1131 in `bad_limit_numbers_yaml` - > Resource 'Resource364' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource365` (AWS::SNS::Topic) → `Properties.Tags` L1133 in `bad_limit_numbers_yaml` - > Resource 'Resource365' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource366` (AWS::SNS::Topic) → `Properties.Tags` L1135 in `bad_limit_numbers_yaml` - > Resource 'Resource366' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource367` (AWS::SNS::Topic) → `Properties.Tags` L1137 in `bad_limit_numbers_yaml` - > Resource 'Resource367' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource368` (AWS::SNS::Topic) → `Properties.Tags` L1139 in `bad_limit_numbers_yaml` - > Resource 'Resource368' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource369` (AWS::SNS::Topic) → `Properties.Tags` L1141 in `bad_limit_numbers_yaml` - > Resource 'Resource369' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource37` (AWS::SNS::Topic) → `Properties.Tags` L477 in `bad_limit_numbers_yaml` - > Resource 'Resource37' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource370` (AWS::SNS::Topic) → `Properties.Tags` L1143 in `bad_limit_numbers_yaml` - > Resource 'Resource370' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource371` (AWS::SNS::Topic) → `Properties.Tags` L1145 in `bad_limit_numbers_yaml` - > Resource 'Resource371' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource372` (AWS::SNS::Topic) → `Properties.Tags` L1147 in `bad_limit_numbers_yaml` - > Resource 'Resource372' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource373` (AWS::SNS::Topic) → `Properties.Tags` L1149 in `bad_limit_numbers_yaml` - > Resource 'Resource373' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource374` (AWS::SNS::Topic) → `Properties.Tags` L1151 in `bad_limit_numbers_yaml` - > Resource 'Resource374' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource375` (AWS::SNS::Topic) → `Properties.Tags` L1153 in `bad_limit_numbers_yaml` - > Resource 'Resource375' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource376` (AWS::SNS::Topic) → `Properties.Tags` L1155 in `bad_limit_numbers_yaml` - > Resource 'Resource376' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource377` (AWS::SNS::Topic) → `Properties.Tags` L1157 in `bad_limit_numbers_yaml` - > Resource 'Resource377' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource378` (AWS::SNS::Topic) → `Properties.Tags` L1159 in `bad_limit_numbers_yaml` - > Resource 'Resource378' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource379` (AWS::SNS::Topic) → `Properties.Tags` L1161 in `bad_limit_numbers_yaml` - > Resource 'Resource379' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource38` (AWS::SNS::Topic) → `Properties.Tags` L479 in `bad_limit_numbers_yaml` - > Resource 'Resource38' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource380` (AWS::SNS::Topic) → `Properties.Tags` L1163 in `bad_limit_numbers_yaml` - > Resource 'Resource380' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource381` (AWS::SNS::Topic) → `Properties.Tags` L1165 in `bad_limit_numbers_yaml` - > Resource 'Resource381' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource382` (AWS::SNS::Topic) → `Properties.Tags` L1167 in `bad_limit_numbers_yaml` - > Resource 'Resource382' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource383` (AWS::SNS::Topic) → `Properties.Tags` L1169 in `bad_limit_numbers_yaml` - > Resource 'Resource383' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource384` (AWS::SNS::Topic) → `Properties.Tags` L1171 in `bad_limit_numbers_yaml` - > Resource 'Resource384' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource385` (AWS::SNS::Topic) → `Properties.Tags` L1173 in `bad_limit_numbers_yaml` - > Resource 'Resource385' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource386` (AWS::SNS::Topic) → `Properties.Tags` L1175 in `bad_limit_numbers_yaml` - > Resource 'Resource386' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource387` (AWS::SNS::Topic) → `Properties.Tags` L1177 in `bad_limit_numbers_yaml` - > Resource 'Resource387' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource388` (AWS::SNS::Topic) → `Properties.Tags` L1179 in `bad_limit_numbers_yaml` - > Resource 'Resource388' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource389` (AWS::SNS::Topic) → `Properties.Tags` L1181 in `bad_limit_numbers_yaml` - > Resource 'Resource389' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource39` (AWS::SNS::Topic) → `Properties.Tags` L481 in `bad_limit_numbers_yaml` - > Resource 'Resource39' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource390` (AWS::SNS::Topic) → `Properties.Tags` L1183 in `bad_limit_numbers_yaml` - > Resource 'Resource390' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource391` (AWS::SNS::Topic) → `Properties.Tags` L1185 in `bad_limit_numbers_yaml` - > Resource 'Resource391' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource392` (AWS::SNS::Topic) → `Properties.Tags` L1187 in `bad_limit_numbers_yaml` - > Resource 'Resource392' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource393` (AWS::SNS::Topic) → `Properties.Tags` L1189 in `bad_limit_numbers_yaml` - > Resource 'Resource393' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource394` (AWS::SNS::Topic) → `Properties.Tags` L1191 in `bad_limit_numbers_yaml` - > Resource 'Resource394' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource395` (AWS::SNS::Topic) → `Properties.Tags` L1193 in `bad_limit_numbers_yaml` - > Resource 'Resource395' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource396` (AWS::SNS::Topic) → `Properties.Tags` L1195 in `bad_limit_numbers_yaml` - > Resource 'Resource396' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource397` (AWS::SNS::Topic) → `Properties.Tags` L1197 in `bad_limit_numbers_yaml` - > Resource 'Resource397' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource398` (AWS::SNS::Topic) → `Properties.Tags` L1199 in `bad_limit_numbers_yaml` - > Resource 'Resource398' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource399` (AWS::SNS::Topic) → `Properties.Tags` L1201 in `bad_limit_numbers_yaml` - > Resource 'Resource399' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L411 in `bad_limit_numbers_yaml` - > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource40` (AWS::SNS::Topic) → `Properties.Tags` L483 in `bad_limit_numbers_yaml` - > Resource 'Resource40' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource400` (AWS::SNS::Topic) → `Properties.Tags` L1203 in `bad_limit_numbers_yaml` - > Resource 'Resource400' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource401` (AWS::SNS::Topic) → `Properties.Tags` L1205 in `bad_limit_numbers_yaml` - > Resource 'Resource401' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource402` (AWS::SNS::Topic) → `Properties.Tags` L1207 in `bad_limit_numbers_yaml` - > Resource 'Resource402' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource403` (AWS::SNS::Topic) → `Properties.Tags` L1209 in `bad_limit_numbers_yaml` - > Resource 'Resource403' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource404` (AWS::SNS::Topic) → `Properties.Tags` L1211 in `bad_limit_numbers_yaml` - > Resource 'Resource404' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource405` (AWS::SNS::Topic) → `Properties.Tags` L1213 in `bad_limit_numbers_yaml` - > Resource 'Resource405' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource406` (AWS::SNS::Topic) → `Properties.Tags` L1215 in `bad_limit_numbers_yaml` - > Resource 'Resource406' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource407` (AWS::SNS::Topic) → `Properties.Tags` L1217 in `bad_limit_numbers_yaml` - > Resource 'Resource407' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource408` (AWS::SNS::Topic) → `Properties.Tags` L1219 in `bad_limit_numbers_yaml` - > Resource 'Resource408' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource409` (AWS::SNS::Topic) → `Properties.Tags` L1221 in `bad_limit_numbers_yaml` - > Resource 'Resource409' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource41` (AWS::SNS::Topic) → `Properties.Tags` L485 in `bad_limit_numbers_yaml` - > Resource 'Resource41' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource410` (AWS::SNS::Topic) → `Properties.Tags` L1223 in `bad_limit_numbers_yaml` - > Resource 'Resource410' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource411` (AWS::SNS::Topic) → `Properties.Tags` L1225 in `bad_limit_numbers_yaml` - > Resource 'Resource411' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource412` (AWS::SNS::Topic) → `Properties.Tags` L1227 in `bad_limit_numbers_yaml` - > Resource 'Resource412' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource413` (AWS::SNS::Topic) → `Properties.Tags` L1229 in `bad_limit_numbers_yaml` - > Resource 'Resource413' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource414` (AWS::SNS::Topic) → `Properties.Tags` L1231 in `bad_limit_numbers_yaml` - > Resource 'Resource414' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource415` (AWS::SNS::Topic) → `Properties.Tags` L1233 in `bad_limit_numbers_yaml` - > Resource 'Resource415' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource416` (AWS::SNS::Topic) → `Properties.Tags` L1235 in `bad_limit_numbers_yaml` - > Resource 'Resource416' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource417` (AWS::SNS::Topic) → `Properties.Tags` L1237 in `bad_limit_numbers_yaml` - > Resource 'Resource417' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource418` (AWS::SNS::Topic) → `Properties.Tags` L1239 in `bad_limit_numbers_yaml` - > Resource 'Resource418' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource419` (AWS::SNS::Topic) → `Properties.Tags` L1241 in `bad_limit_numbers_yaml` - > Resource 'Resource419' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource42` (AWS::SNS::Topic) → `Properties.Tags` L487 in `bad_limit_numbers_yaml` - > Resource 'Resource42' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource420` (AWS::SNS::Topic) → `Properties.Tags` L1243 in `bad_limit_numbers_yaml` - > Resource 'Resource420' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource421` (AWS::SNS::Topic) → `Properties.Tags` L1245 in `bad_limit_numbers_yaml` - > Resource 'Resource421' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource422` (AWS::SNS::Topic) → `Properties.Tags` L1247 in `bad_limit_numbers_yaml` - > Resource 'Resource422' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource423` (AWS::SNS::Topic) → `Properties.Tags` L1249 in `bad_limit_numbers_yaml` - > Resource 'Resource423' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource424` (AWS::SNS::Topic) → `Properties.Tags` L1251 in `bad_limit_numbers_yaml` - > Resource 'Resource424' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource425` (AWS::SNS::Topic) → `Properties.Tags` L1253 in `bad_limit_numbers_yaml` - > Resource 'Resource425' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource426` (AWS::SNS::Topic) → `Properties.Tags` L1255 in `bad_limit_numbers_yaml` - > Resource 'Resource426' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource427` (AWS::SNS::Topic) → `Properties.Tags` L1257 in `bad_limit_numbers_yaml` - > Resource 'Resource427' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource428` (AWS::SNS::Topic) → `Properties.Tags` L1259 in `bad_limit_numbers_yaml` - > Resource 'Resource428' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource429` (AWS::SNS::Topic) → `Properties.Tags` L1261 in `bad_limit_numbers_yaml` - > Resource 'Resource429' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource43` (AWS::SNS::Topic) → `Properties.Tags` L489 in `bad_limit_numbers_yaml` - > Resource 'Resource43' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource430` (AWS::SNS::Topic) → `Properties.Tags` L1263 in `bad_limit_numbers_yaml` - > Resource 'Resource430' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource431` (AWS::SNS::Topic) → `Properties.Tags` L1265 in `bad_limit_numbers_yaml` - > Resource 'Resource431' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource432` (AWS::SNS::Topic) → `Properties.Tags` L1267 in `bad_limit_numbers_yaml` - > Resource 'Resource432' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource433` (AWS::SNS::Topic) → `Properties.Tags` L1269 in `bad_limit_numbers_yaml` - > Resource 'Resource433' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource434` (AWS::SNS::Topic) → `Properties.Tags` L1271 in `bad_limit_numbers_yaml` - > Resource 'Resource434' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource435` (AWS::SNS::Topic) → `Properties.Tags` L1273 in `bad_limit_numbers_yaml` - > Resource 'Resource435' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource436` (AWS::SNS::Topic) → `Properties.Tags` L1275 in `bad_limit_numbers_yaml` - > Resource 'Resource436' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource437` (AWS::SNS::Topic) → `Properties.Tags` L1277 in `bad_limit_numbers_yaml` - > Resource 'Resource437' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource438` (AWS::SNS::Topic) → `Properties.Tags` L1279 in `bad_limit_numbers_yaml` - > Resource 'Resource438' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource439` (AWS::SNS::Topic) → `Properties.Tags` L1281 in `bad_limit_numbers_yaml` - > Resource 'Resource439' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource44` (AWS::SNS::Topic) → `Properties.Tags` L491 in `bad_limit_numbers_yaml` - > Resource 'Resource44' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource440` (AWS::SNS::Topic) → `Properties.Tags` L1283 in `bad_limit_numbers_yaml` - > Resource 'Resource440' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource441` (AWS::SNS::Topic) → `Properties.Tags` L1285 in `bad_limit_numbers_yaml` - > Resource 'Resource441' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource442` (AWS::SNS::Topic) → `Properties.Tags` L1287 in `bad_limit_numbers_yaml` - > Resource 'Resource442' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource443` (AWS::SNS::Topic) → `Properties.Tags` L1289 in `bad_limit_numbers_yaml` - > Resource 'Resource443' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource444` (AWS::SNS::Topic) → `Properties.Tags` L1291 in `bad_limit_numbers_yaml` - > Resource 'Resource444' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource445` (AWS::SNS::Topic) → `Properties.Tags` L1293 in `bad_limit_numbers_yaml` - > Resource 'Resource445' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource446` (AWS::SNS::Topic) → `Properties.Tags` L1295 in `bad_limit_numbers_yaml` - > Resource 'Resource446' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource447` (AWS::SNS::Topic) → `Properties.Tags` L1297 in `bad_limit_numbers_yaml` - > Resource 'Resource447' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource448` (AWS::SNS::Topic) → `Properties.Tags` L1299 in `bad_limit_numbers_yaml` - > Resource 'Resource448' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource449` (AWS::SNS::Topic) → `Properties.Tags` L1301 in `bad_limit_numbers_yaml` - > Resource 'Resource449' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource45` (AWS::SNS::Topic) → `Properties.Tags` L493 in `bad_limit_numbers_yaml` - > Resource 'Resource45' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource450` (AWS::SNS::Topic) → `Properties.Tags` L1303 in `bad_limit_numbers_yaml` - > Resource 'Resource450' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource451` (AWS::SNS::Topic) → `Properties.Tags` L1305 in `bad_limit_numbers_yaml` - > Resource 'Resource451' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource452` (AWS::SNS::Topic) → `Properties.Tags` L1307 in `bad_limit_numbers_yaml` - > Resource 'Resource452' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource453` (AWS::SNS::Topic) → `Properties.Tags` L1309 in `bad_limit_numbers_yaml` - > Resource 'Resource453' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource454` (AWS::SNS::Topic) → `Properties.Tags` L1311 in `bad_limit_numbers_yaml` - > Resource 'Resource454' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource455` (AWS::SNS::Topic) → `Properties.Tags` L1313 in `bad_limit_numbers_yaml` - > Resource 'Resource455' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource456` (AWS::SNS::Topic) → `Properties.Tags` L1315 in `bad_limit_numbers_yaml` - > Resource 'Resource456' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource457` (AWS::SNS::Topic) → `Properties.Tags` L1317 in `bad_limit_numbers_yaml` - > Resource 'Resource457' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource458` (AWS::SNS::Topic) → `Properties.Tags` L1319 in `bad_limit_numbers_yaml` - > Resource 'Resource458' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource459` (AWS::SNS::Topic) → `Properties.Tags` L1321 in `bad_limit_numbers_yaml` - > Resource 'Resource459' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource46` (AWS::SNS::Topic) → `Properties.Tags` L495 in `bad_limit_numbers_yaml` - > Resource 'Resource46' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource460` (AWS::SNS::Topic) → `Properties.Tags` L1323 in `bad_limit_numbers_yaml` - > Resource 'Resource460' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource461` (AWS::SNS::Topic) → `Properties.Tags` L1325 in `bad_limit_numbers_yaml` - > Resource 'Resource461' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource462` (AWS::SNS::Topic) → `Properties.Tags` L1327 in `bad_limit_numbers_yaml` - > Resource 'Resource462' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource463` (AWS::SNS::Topic) → `Properties.Tags` L1329 in `bad_limit_numbers_yaml` - > Resource 'Resource463' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource464` (AWS::SNS::Topic) → `Properties.Tags` L1331 in `bad_limit_numbers_yaml` - > Resource 'Resource464' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource465` (AWS::SNS::Topic) → `Properties.Tags` L1333 in `bad_limit_numbers_yaml` - > Resource 'Resource465' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource466` (AWS::SNS::Topic) → `Properties.Tags` L1335 in `bad_limit_numbers_yaml` - > Resource 'Resource466' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource467` (AWS::SNS::Topic) → `Properties.Tags` L1337 in `bad_limit_numbers_yaml` - > Resource 'Resource467' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource468` (AWS::SNS::Topic) → `Properties.Tags` L1339 in `bad_limit_numbers_yaml` - > Resource 'Resource468' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource469` (AWS::SNS::Topic) → `Properties.Tags` L1341 in `bad_limit_numbers_yaml` - > Resource 'Resource469' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource47` (AWS::SNS::Topic) → `Properties.Tags` L497 in `bad_limit_numbers_yaml` - > Resource 'Resource47' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource470` (AWS::SNS::Topic) → `Properties.Tags` L1343 in `bad_limit_numbers_yaml` - > Resource 'Resource470' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource471` (AWS::SNS::Topic) → `Properties.Tags` L1345 in `bad_limit_numbers_yaml` - > Resource 'Resource471' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource472` (AWS::SNS::Topic) → `Properties.Tags` L1347 in `bad_limit_numbers_yaml` - > Resource 'Resource472' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource473` (AWS::SNS::Topic) → `Properties.Tags` L1349 in `bad_limit_numbers_yaml` - > Resource 'Resource473' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource474` (AWS::SNS::Topic) → `Properties.Tags` L1351 in `bad_limit_numbers_yaml` - > Resource 'Resource474' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource475` (AWS::SNS::Topic) → `Properties.Tags` L1353 in `bad_limit_numbers_yaml` - > Resource 'Resource475' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource476` (AWS::SNS::Topic) → `Properties.Tags` L1355 in `bad_limit_numbers_yaml` - > Resource 'Resource476' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource477` (AWS::SNS::Topic) → `Properties.Tags` L1357 in `bad_limit_numbers_yaml` - > Resource 'Resource477' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource478` (AWS::SNS::Topic) → `Properties.Tags` L1359 in `bad_limit_numbers_yaml` - > Resource 'Resource478' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource479` (AWS::SNS::Topic) → `Properties.Tags` L1361 in `bad_limit_numbers_yaml` - > Resource 'Resource479' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource48` (AWS::SNS::Topic) → `Properties.Tags` L499 in `bad_limit_numbers_yaml` - > Resource 'Resource48' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource480` (AWS::SNS::Topic) → `Properties.Tags` L1363 in `bad_limit_numbers_yaml` - > Resource 'Resource480' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource481` (AWS::SNS::Topic) → `Properties.Tags` L1365 in `bad_limit_numbers_yaml` - > Resource 'Resource481' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource482` (AWS::SNS::Topic) → `Properties.Tags` L1367 in `bad_limit_numbers_yaml` - > Resource 'Resource482' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource483` (AWS::SNS::Topic) → `Properties.Tags` L1369 in `bad_limit_numbers_yaml` - > Resource 'Resource483' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource484` (AWS::SNS::Topic) → `Properties.Tags` L1371 in `bad_limit_numbers_yaml` - > Resource 'Resource484' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource485` (AWS::SNS::Topic) → `Properties.Tags` L1373 in `bad_limit_numbers_yaml` - > Resource 'Resource485' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource486` (AWS::SNS::Topic) → `Properties.Tags` L1375 in `bad_limit_numbers_yaml` - > Resource 'Resource486' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource487` (AWS::SNS::Topic) → `Properties.Tags` L1377 in `bad_limit_numbers_yaml` - > Resource 'Resource487' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource488` (AWS::SNS::Topic) → `Properties.Tags` L1379 in `bad_limit_numbers_yaml` - > Resource 'Resource488' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource489` (AWS::SNS::Topic) → `Properties.Tags` L1381 in `bad_limit_numbers_yaml` - > Resource 'Resource489' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource49` (AWS::SNS::Topic) → `Properties.Tags` L501 in `bad_limit_numbers_yaml` - > Resource 'Resource49' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource490` (AWS::SNS::Topic) → `Properties.Tags` L1383 in `bad_limit_numbers_yaml` - > Resource 'Resource490' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource491` (AWS::SNS::Topic) → `Properties.Tags` L1385 in `bad_limit_numbers_yaml` - > Resource 'Resource491' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource492` (AWS::SNS::Topic) → `Properties.Tags` L1387 in `bad_limit_numbers_yaml` - > Resource 'Resource492' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource493` (AWS::SNS::Topic) → `Properties.Tags` L1389 in `bad_limit_numbers_yaml` - > Resource 'Resource493' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource494` (AWS::SNS::Topic) → `Properties.Tags` L1391 in `bad_limit_numbers_yaml` - > Resource 'Resource494' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource495` (AWS::SNS::Topic) → `Properties.Tags` L1393 in `bad_limit_numbers_yaml` - > Resource 'Resource495' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource496` (AWS::SNS::Topic) → `Properties.Tags` L1395 in `bad_limit_numbers_yaml` - > Resource 'Resource496' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource497` (AWS::SNS::Topic) → `Properties.Tags` L1397 in `bad_limit_numbers_yaml` - > Resource 'Resource497' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource498` (AWS::SNS::Topic) → `Properties.Tags` L1399 in `bad_limit_numbers_yaml` - > Resource 'Resource498' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource499` (AWS::SNS::Topic) → `Properties.Tags` L1401 in `bad_limit_numbers_yaml` - > Resource 'Resource499' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L413 in `bad_limit_numbers_yaml` - > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource50` (AWS::SNS::Topic) → `Properties.Tags` L503 in `bad_limit_numbers_yaml` - > Resource 'Resource50' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource500` (AWS::SNS::Topic) → `Properties.Tags` L1403 in `bad_limit_numbers_yaml` - > Resource 'Resource500' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource501` (AWS::SNS::Topic) → `Properties.Tags` L1405 in `bad_limit_numbers_yaml` - > Resource 'Resource501' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource51` (AWS::SNS::Topic) → `Properties.Tags` L505 in `bad_limit_numbers_yaml` - > Resource 'Resource51' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource52` (AWS::SNS::Topic) → `Properties.Tags` L507 in `bad_limit_numbers_yaml` - > Resource 'Resource52' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource53` (AWS::SNS::Topic) → `Properties.Tags` L509 in `bad_limit_numbers_yaml` - > Resource 'Resource53' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource54` (AWS::SNS::Topic) → `Properties.Tags` L511 in `bad_limit_numbers_yaml` - > Resource 'Resource54' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource55` (AWS::SNS::Topic) → `Properties.Tags` L513 in `bad_limit_numbers_yaml` - > Resource 'Resource55' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource56` (AWS::SNS::Topic) → `Properties.Tags` L515 in `bad_limit_numbers_yaml` - > Resource 'Resource56' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource57` (AWS::SNS::Topic) → `Properties.Tags` L517 in `bad_limit_numbers_yaml` - > Resource 'Resource57' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource58` (AWS::SNS::Topic) → `Properties.Tags` L519 in `bad_limit_numbers_yaml` - > Resource 'Resource58' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource59` (AWS::SNS::Topic) → `Properties.Tags` L521 in `bad_limit_numbers_yaml` - > Resource 'Resource59' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L415 in `bad_limit_numbers_yaml` - > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource60` (AWS::SNS::Topic) → `Properties.Tags` L523 in `bad_limit_numbers_yaml` - > Resource 'Resource60' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource61` (AWS::SNS::Topic) → `Properties.Tags` L525 in `bad_limit_numbers_yaml` - > Resource 'Resource61' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource62` (AWS::SNS::Topic) → `Properties.Tags` L527 in `bad_limit_numbers_yaml` - > Resource 'Resource62' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource63` (AWS::SNS::Topic) → `Properties.Tags` L529 in `bad_limit_numbers_yaml` - > Resource 'Resource63' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource64` (AWS::SNS::Topic) → `Properties.Tags` L531 in `bad_limit_numbers_yaml` - > Resource 'Resource64' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource65` (AWS::SNS::Topic) → `Properties.Tags` L533 in `bad_limit_numbers_yaml` - > Resource 'Resource65' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource66` (AWS::SNS::Topic) → `Properties.Tags` L535 in `bad_limit_numbers_yaml` - > Resource 'Resource66' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource67` (AWS::SNS::Topic) → `Properties.Tags` L537 in `bad_limit_numbers_yaml` - > Resource 'Resource67' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource68` (AWS::SNS::Topic) → `Properties.Tags` L539 in `bad_limit_numbers_yaml` - > Resource 'Resource68' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource69` (AWS::SNS::Topic) → `Properties.Tags` L541 in `bad_limit_numbers_yaml` - > Resource 'Resource69' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L417 in `bad_limit_numbers_yaml` - > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource70` (AWS::SNS::Topic) → `Properties.Tags` L543 in `bad_limit_numbers_yaml` - > Resource 'Resource70' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource71` (AWS::SNS::Topic) → `Properties.Tags` L545 in `bad_limit_numbers_yaml` - > Resource 'Resource71' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource72` (AWS::SNS::Topic) → `Properties.Tags` L547 in `bad_limit_numbers_yaml` - > Resource 'Resource72' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource73` (AWS::SNS::Topic) → `Properties.Tags` L549 in `bad_limit_numbers_yaml` - > Resource 'Resource73' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource74` (AWS::SNS::Topic) → `Properties.Tags` L551 in `bad_limit_numbers_yaml` - > Resource 'Resource74' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource75` (AWS::SNS::Topic) → `Properties.Tags` L553 in `bad_limit_numbers_yaml` - > Resource 'Resource75' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource76` (AWS::SNS::Topic) → `Properties.Tags` L555 in `bad_limit_numbers_yaml` - > Resource 'Resource76' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource77` (AWS::SNS::Topic) → `Properties.Tags` L557 in `bad_limit_numbers_yaml` - > Resource 'Resource77' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource78` (AWS::SNS::Topic) → `Properties.Tags` L559 in `bad_limit_numbers_yaml` - > Resource 'Resource78' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource79` (AWS::SNS::Topic) → `Properties.Tags` L561 in `bad_limit_numbers_yaml` - > Resource 'Resource79' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L419 in `bad_limit_numbers_yaml` - > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource80` (AWS::SNS::Topic) → `Properties.Tags` L563 in `bad_limit_numbers_yaml` - > Resource 'Resource80' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource81` (AWS::SNS::Topic) → `Properties.Tags` L565 in `bad_limit_numbers_yaml` - > Resource 'Resource81' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource82` (AWS::SNS::Topic) → `Properties.Tags` L567 in `bad_limit_numbers_yaml` - > Resource 'Resource82' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource83` (AWS::SNS::Topic) → `Properties.Tags` L569 in `bad_limit_numbers_yaml` - > Resource 'Resource83' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource84` (AWS::SNS::Topic) → `Properties.Tags` L571 in `bad_limit_numbers_yaml` - > Resource 'Resource84' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource85` (AWS::SNS::Topic) → `Properties.Tags` L573 in `bad_limit_numbers_yaml` - > Resource 'Resource85' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource86` (AWS::SNS::Topic) → `Properties.Tags` L575 in `bad_limit_numbers_yaml` - > Resource 'Resource86' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource87` (AWS::SNS::Topic) → `Properties.Tags` L577 in `bad_limit_numbers_yaml` - > Resource 'Resource87' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource88` (AWS::SNS::Topic) → `Properties.Tags` L579 in `bad_limit_numbers_yaml` - > Resource 'Resource88' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource89` (AWS::SNS::Topic) → `Properties.Tags` L581 in `bad_limit_numbers_yaml` - > Resource 'Resource89' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L421 in `bad_limit_numbers_yaml` - > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource90` (AWS::SNS::Topic) → `Properties.Tags` L583 in `bad_limit_numbers_yaml` - > Resource 'Resource90' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource91` (AWS::SNS::Topic) → `Properties.Tags` L585 in `bad_limit_numbers_yaml` - > Resource 'Resource91' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource92` (AWS::SNS::Topic) → `Properties.Tags` L587 in `bad_limit_numbers_yaml` - > Resource 'Resource92' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource93` (AWS::SNS::Topic) → `Properties.Tags` L589 in `bad_limit_numbers_yaml` - > Resource 'Resource93' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource94` (AWS::SNS::Topic) → `Properties.Tags` L591 in `bad_limit_numbers_yaml` - > Resource 'Resource94' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource95` (AWS::SNS::Topic) → `Properties.Tags` L593 in `bad_limit_numbers_yaml` - > Resource 'Resource95' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource96` (AWS::SNS::Topic) → `Properties.Tags` L595 in `bad_limit_numbers_yaml` - > Resource 'Resource96' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource97` (AWS::SNS::Topic) → `Properties.Tags` L597 in `bad_limit_numbers_yaml` - > Resource 'Resource97' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource98` (AWS::SNS::Topic) → `Properties.Tags` L599 in `bad_limit_numbers_yaml` - > Resource 'Resource98' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource99` (AWS::SNS::Topic) → `Properties.Tags` L601 in `bad_limit_numbers_yaml` - > Resource 'Resource99' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `bad_mappings_used_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SNSTopicWithSecretNameInRef` (AWS::SNS::Topic) → `Properties.Tags` L10 in `bad_noecho_yaml` - > Resource 'SNSTopicWithSecretNameInRef' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SNSTopicWithSecretNameInSub` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_noecho_yaml` - > Resource 'SNSTopicWithSecretNameInSub' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BadDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L6 in `bad_opensearch_instance_type_yaml` - > Resource 'BadDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured -- **I9040** `ValidDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L11 in `bad_opensearch_instance_type_yaml` - > Resource 'ValidDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_references_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_targets_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L13 in `bad_output_value_not_string_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L17 in `bad_override_complete_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_complete_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L23 in `bad_override_complete_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `mySpotFleet` (AWS::EC2::SpotFleet) → `Properties.Tags` L20 in `bad_override_complete_yaml` - > Resource 'mySpotFleet' of type 'AWS::EC2::SpotFleet' supports Tags but none are configured -- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L13 in `bad_override_complete_yaml` - > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myGameLift` (AWS::GameLift::Alias) → `Properties.Tags` L8 in `bad_override_exclude_yaml` - > Resource 'myGameLift' of type 'AWS::GameLift::Alias' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_override_exclude_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_override_exclude_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_override_include_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L27 in `bad_override_include_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L8 in `bad_override_include_yaml` - > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_required_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_param_constraints_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L62 in `bad_parameters_configuration_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_pipeline_no_source_first_stage_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_previous_gen_instance_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Tags` L15 in `bad_previous_generation_instances_yaml` - > Resource 'CacheCluster' of type 'AWS::ElastiCache::CacheCluster' supports Tags but none are configured -- **I9040** `DBInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L11 in `bad_previous_generation_instances_yaml` - > Resource 'DBInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Domain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L2 in `bad_previous_generation_instances_yaml` - > Resource 'Domain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `Domain2` (AWS::Elasticsearch::Domain) → `Properties.Tags` L21 in `bad_previous_generation_instances_yaml` - > Resource 'Domain2' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L26 in `bad_previous_generation_instances_yaml` - > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_previous_generation_instances_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_properties_ebs_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_properties_ebs_yaml` - > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_properties_password_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Tags` L27 in `bad_properties_password_yaml` - > Resource 'MyNewDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L36 in `bad_properties_password_yaml` - > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L78 in `bad_properties_sg_ingress_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_properties_sg_ingress_yaml` - > Resource 'mySecurityGroupNonVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L30 in `bad_properties_sg_ingress_yaml` - > Resource 'mySecurityGroupVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `Db` (AWS::RDS::DBInstance) → `Properties.Tags` L7 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` - > Resource 'Db' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_rds_public_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `IGW` (AWS::EC2::InternetGateway) → `Properties.Tags` L29 in `bad_redshift_internet_accessible_yaml` - > Resource 'IGW' of type 'AWS::EC2::InternetGateway' supports Tags but none are configured -- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `bad_redshift_internet_accessible_yaml` - > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured -- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `bad_redshift_internet_accessible_yaml` - > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `bad_redshift_internet_accessible_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_redshift_internet_accessible_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_refs_yaml` - > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_refs_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Policy` (AWS::KMS::Key) → `Properties.Tags` L5 in `bad_resource_policy_no_statement_yaml` - > Resource 'Policy' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L14 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L19 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L24 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L29 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L39 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L42 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_dependson_yaml` - > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L7 in `bad_resources_circular_dependency_dependson_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L65 in `bad_resources_circular_dependency_yaml` - > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L52 in `bad_resources_circular_dependency_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstanceSub` (AWS::EC2::Instance) → `Properties.Tags` L215 in `bad_resources_circular_dependency_yaml` - > Resource 'myInstanceSub' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myKms` (AWS::KMS::Key) → `Properties.Tags` L155 in `bad_resources_circular_dependency_yaml` - > Resource 'myKms' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Tags` L99 in `bad_resources_circular_dependency_yaml` - > Resource 'myRoleToWriteToS3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L25 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L35 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L43 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Tags` L222 in `bad_resources_circular_dependency_yaml` - > Resource 'taskdefinition' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L16 in `bad_resources_cloudformation_stacks_yaml` - > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `bad_resources_cloudformation_stacks_yaml` - > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_resources_cloudfront_invalid_aliases_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `bad_resources_codepipeline_stages_second_stage_yaml` - > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_resources_creation_policy_unsupported_e3055_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_deletionpolicy_yaml` - > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_deletionpolicy_yaml` - > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_deletionpolicy_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_deletionpolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.Tags` L22 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'ConditionalGSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.Tags` L37 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'ConditionalLSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `MissingDefaultThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L12 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'MissingDefaultThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L23 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L82 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L61 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L50 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L35 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'NullThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `InvalidDriverInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L36 in `bad_resources_ecs_fargate_conditional_properties_yaml` - > Resource 'InvalidDriverInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `PlacementInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L15 in `bad_resources_ecs_fargate_conditional_properties_yaml` - > Resource 'PlacementInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L202 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'ConditionalEc2ThenFargateMissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L191 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'ConditionalFargateThenEc2MissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L133 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L161 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Tags` L147 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalMemory' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L175 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalPlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L37 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateMissingAll' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateNullCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L102 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L52 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargatePlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Tags` L70 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateUnsupportedLogDriver' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L22 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateWrongNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L98 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'CpuInvalidThenValid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L111 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'CpuValidThenInvalid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L7 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'EightVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L59 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'MalformedCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L72 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'NonCanonicalCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L85 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'OverflowingMemoryUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L20 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'SixteenVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L33 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'ThirtyTwoVcpuUnsupportedSixtyFourGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L46 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'ThirtyTwoVcpuUnsupportedTwoFortyGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L36 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L91 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FourtReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L20 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L28 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L12 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L55 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L74 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `RoleConditionalPolicies` (AWS::IAM::Role) → `Properties.Tags` L18 in `bad_resources_iam_iam_policy_conditional_policies_yaml` - > Resource 'RoleConditionalPolicies' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RoleNotActionConditional` (AWS::IAM::Role) → `Properties.Tags` L53 in `bad_resources_iam_iam_policy_conditional_policies_yaml` - > Resource 'RoleNotActionConditional' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIamRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `bad_resources_iam_iam_policy_yaml` - > Resource 'rIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Tags` L88 in `bad_resources_iam_identity_policy_e3510_yaml` - > Resource 'PermissionSetBadPolicy' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured -- **I9040** `UserInlinePolicy` (AWS::IAM::User) → `Properties.Tags` L101 in `bad_resources_iam_identity_policy_e3510_yaml` - > Resource 'UserInlinePolicy' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `ecr1` (AWS::ECR::Repository) → `Properties.Tags` L6 in `bad_resources_iam_resource_policy_yaml` - > Resource 'ecr1' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `ecr2` (AWS::ECR::Repository) → `Properties.Tags` L19 in `bad_resources_iam_resource_policy_yaml` - > Resource 'ecr2' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L8 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.Tags` L18 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.Tags` L28 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `my.Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_resources_name_yaml` - > Resource 'my.Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `my_Instance` (AWS::EC2::Instance) → `Properties.Tags` L9 in `bad_resources_name_yaml` - > Resource 'my_Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L142 in `bad_resources_primary_identifiers_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L149 in `bad_resources_primary_identifiers_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Project1` (AWS::CodeBuild::Project) → `Properties.Tags` L167 in `bad_resources_primary_identifiers_yaml` - > Resource 'Project1' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `Project2` (AWS::CodeBuild::Project) → `Properties.Tags` L187 in `bad_resources_primary_identifiers_yaml` - > Resource 'Project2' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L52 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole5` (AWS::IAM::Role) → `Properties.Tags` L98 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole6` (AWS::IAM::Role) → `Properties.Tags` L120 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ExampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_primitive_types_map_yaml` - > Resource 'ExampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ExampleLambda1` (AWS::Lambda::Function) → `Properties.Tags` L23 in `bad_resources_properties_primitive_types_map_yaml` - > Resource 'ExampleLambda1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L14 in `bad_resources_properties_string_size_yaml` - > Resource 'CloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `bad_resources_properties_string_size_yaml` - > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `myRepository2` (AWS::CodeCommit::Repository) → `Properties.Tags` L10 in `bad_resources_properties_string_size_yaml` - > Resource 'myRepository2' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `SampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_templated_code_yaml` - > Resource 'SampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L25 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance7' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Tags` L51 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance8' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Tags` L58 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance9' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBCluster) → `Properties.Tags` L5 in `bad_resources_rds_not_enum_master_username_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_resources_sns_topic_name_yaml` - > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Name` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_resources_uniqueNames_yaml` - > Resource 'Name' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_resources_update_policy_unsupported_e3016_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_s3_tiering_bad_days_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Cluster` (AWS::SageMaker::Cluster) → `Properties.Tags` L44 in `bad_sagemaker_instance_types_yaml` - > Resource 'Cluster' of type 'AWS::SageMaker::Cluster' supports Tags but none are configured -- **I9040** `InferenceExperiment` (AWS::SageMaker::InferenceExperiment) → `Properties.Tags` L22 in `bad_sagemaker_instance_types_yaml` - > Resource 'InferenceExperiment' of type 'AWS::SageMaker::InferenceExperiment' supports Tags but none are configured -- **I9040** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.Tags` L34 in `bad_sagemaker_instance_types_yaml` - > Resource 'ModelPackage' of type 'AWS::SageMaker::ModelPackage' supports Tags but none are configured -- **I9040** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.Tags` L14 in `bad_sagemaker_instance_types_yaml` - > Resource 'ModelQualityJobDefinition' of type 'AWS::SageMaker::ModelQualityJobDefinition' supports Tags but none are configured -- **I9040** `MonitoringSchedule` (AWS::SageMaker::MonitoringSchedule) → `Properties.Tags` L6 in `bad_sagemaker_instance_types_yaml` - > Resource 'MonitoringSchedule' of type 'AWS::SageMaker::MonitoringSchedule' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_bogus_name_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_wrong_date_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_additional_props_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NoAZ` (AWS::EC2::Volume) → `Properties.Tags` L13 in `bad_schema_composition_yaml` - > Resource 'NoAZ' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Tags` L6 in `bad_schema_composition_yaml` - > Resource 'NoImage' of type 'AWS::AppStream::ImageBuilder' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_schema_conditional_type_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_enum_violation_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_schema_format_violation_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.Tags` L36 in `bad_schema_lifecycle_yaml` - > Resource 'DeprecatedLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EolLambda` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_schema_lifecycle_yaml` - > Resource 'EolLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.Tags` L12 in `bad_schema_lifecycle_yaml` - > Resource 'SunsetResource' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_schema_numeric_bounds_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Tags` L21 in `bad_schema_property_constraints_yaml` - > Resource 'DeprecatedProp' of type 'AWS::Athena::WorkGroup' supports Tags but none are configured -- **I9040** `PatternBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_property_constraints_yaml` - > Resource 'PatternBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Lambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_schema_string_length_yaml` - > Resource 'Lambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AlarmBothStats` (AWS::CloudWatch::Alarm) → `Properties.Tags` L6 in `bad_schema_structural_yaml` - > Resource 'AlarmBothStats' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.Tags` L19 in `bad_schema_structural_yaml` - > Resource 'SubnetNoCidr' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_type_mismatch_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_security_issues_yaml` - > Resource 'OpenSSH' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_bad_port_range_yaml` - > Resource 'SG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_open_egress_yaml` - > Resource 'OpenSG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_simple_sub_param_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_sns_cross_account_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `bad_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L80 in `bad_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_no_suffix_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DLQ` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_standard_dlq_yaml` - > Resource 'DLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `MainQueue` (AWS::SQS::Queue) → `Properties.Tags` L9 in `bad_sqs_fifo_standard_dlq_yaml` - > Resource 'MainQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `bad_ssm_document_invalid_yaml` - > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_bad_start_at_yaml` - > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachine` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_invalid_state_yaml` - > Resource 'StateMachine' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_sub_needed_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_sub_nested_intrinsic_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `OtherBucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_sub_nested_intrinsic_yaml` - > Resource 'OtherBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_outside_vpc_yaml` - > Resource 'SubnetOutside' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_outside_vpc_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L14 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetC` (AWS::EC2::Subnet) → `Properties.Tags` L26 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetC' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetD` (AWS::EC2::Subnet) → `Properties.Tags` L32 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetD' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_subnet_overlap_multi_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_overlap_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `bad_subnet_overlap_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_overlap_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_undefined_condition_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_unknown_properties_yaml` - > Resource 'BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AppFunction` (AWS::Lambda::Function) → `Properties.Tags` L52 in `cdk_DemoStack.template_json` - > Resource 'AppFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AppRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_DemoStack.template_json` - > Resource 'AppRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L94 in `cdk_DemoStack.template_json` - > Resource 'AppSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DataBucket` (AWS::S3::Bucket) → `Properties.Tags` L40 in `cdk_DemoStack.template_json` - > Resource 'DataBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DataTable` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `cdk_DemoStack.template_json` - > Resource 'DataTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L126 in `cdk_DemoStack.template_json` - > Resource 'QueueMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `TaskQueue` (AWS::SQS::Queue) → `Properties.Tags` L117 in `cdk_DemoStack.template_json` - > Resource 'TaskQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Tags` L5 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'AdminSecretB9452750' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured -- **I9040** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.Tags` L68 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'ConsumerLambdaLogGroupD33C6265' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.Tags` L22 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'RabbitMqBrokerE7F26F68' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionBD0C2D50` (AWS::Lambda::Function) → `Properties.Tags` L165 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionBD0C2D50' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L201 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` (AWS::IAM::Role) → `Properties.Tags` L615 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` (AWS::Lambda::Function) → `Properties.Tags` L732 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` (AWS::Lambda::Function) → `Properties.Tags` L561 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` (AWS::IAM::Role) → `Properties.Tags` L437 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` (AWS::Lambda::Function) → `Properties.Tags` L900 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` (AWS::IAM::Role) → `Properties.Tags` L783 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1036 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` (AWS::IAM::Role) → `Properties.Tags` L951 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` (AWS::Lambda::Function) → `Properties.Tags` L402 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A` (AWS::IAM::Role) → `Properties.Tags` L344 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` (AWS::Lambda::Function) → `Properties.Tags` L309 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54` (AWS::IAM::Role) → `Properties.Tags` L229 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionServiceRole095C1C28` (AWS::IAM::Role) → `Properties.Tags` L80 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionServiceRole095C1C28' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MasterBranch` (AWS::Amplify::Branch) → `Properties.Tags` L16 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Resource 'MasterBranch' of type 'AWS::Amplify::Branch' supports Tags but none are configured -- **I9040** `testapp` (AWS::Amplify::App) → `Properties.Tags` L5 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Resource 'testapp' of type 'AWS::Amplify::App' supports Tags but none are configured -- **I9040** `createItemFunction8D47E48A` (AWS::Lambda::Function) → `Properties.Tags` L379 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'createItemFunction8D47E48A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `createItemFunctionServiceRole1BBF2178` (AWS::IAM::Role) → `Properties.Tags` L288 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'createItemFunctionServiceRole1BBF2178' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `deleteItemFunction2918B1B0` (AWS::Lambda::Function) → `Properties.Tags` L635 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'deleteItemFunction2918B1B0' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `deleteItemFunctionServiceRole5C201FCC` (AWS::IAM::Role) → `Properties.Tags` L544 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'deleteItemFunctionServiceRole5C201FCC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `getAllItemsFunction0B7A913E` (AWS::Lambda::Function) → `Properties.Tags` L251 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getAllItemsFunction0B7A913E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `getAllItemsFunctionServiceRoleCC084440` (AWS::IAM::Role) → `Properties.Tags` L160 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getAllItemsFunctionServiceRoleCC084440' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `getOneItemFunctionE3257B22` (AWS::Lambda::Function) → `Properties.Tags` L123 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getOneItemFunctionE3257B22' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `getOneItemFunctionServiceRoleCFD54796` (AWS::IAM::Role) → `Properties.Tags` L32 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getOneItemFunctionServiceRoleCFD54796' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'items07D08F4B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemsApi28111E1C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L672 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApi28111E1C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `itemsApiCloudWatchRoleB5C7B431` (AWS::IAM::Role) → `Properties.Tags` L681 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApiCloudWatchRoleB5C7B431' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.Tags` L760 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApiDeploymentStageprodE77B897D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `updateItemFunction59415205` (AWS::Lambda::Function) → `Properties.Tags` L507 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'updateItemFunction59415205' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `updateItemFunctionServiceRole40035396` (AWS::IAM::Role) → `Properties.Tags` L416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'updateItemFunctionServiceRole40035396' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayDynamoRole447127F0` (AWS::IAM::Role) → `Properties.Tags` L511 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'ApiGatewayDynamoRole447127F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigw3449931B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L164 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigw3449931B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwCloudWatchRoleC01BF930` (AWS::IAM::Role) → `Properties.Tags` L173 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwCloudWatchRoleC01BF930' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.Tags` L247 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwDeploymentStageprodAE3424CD' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwloggroup1E36CCD4` (AWS::Logs::LogGroup) → `Properties.Tags` L153 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwloggroup1E36CCD4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `apigwasynclambdafnAD6250E4` (AWS::Lambda::Function) → `Properties.Tags` L112 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnAD6250E4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `apigwasynclambdafnServiceRole607675A2` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnServiceRole607675A2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdafnloggroup3D262524` (AWS::Logs::LogGroup) → `Properties.Tags` L32 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnloggroup3D262524' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdatable1075CD30' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L178 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L101 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `authenticationlambdaDD3A2252` (AWS::Lambda::Function) → `Properties.Tags` L242 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'authenticationlambdaDD3A2252' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `authenticationlambdaServiceRole9798A92B` (AWS::IAM::Role) → `Properties.Tags` L208 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'authenticationlambdaServiceRole9798A92B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `operationallambdaFE43E13E` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'operationallambdaFE43E13E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `operationallambdaServiceRole14B56EA5` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'operationallambdaServiceRole14B56EA5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.Tags` L447 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'restapigatewayDeploymentStagedevB80C9CD7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `restapigatewayE22E31C5` (AWS::ApiGateway::RestApi) → `Properties.Tags` L420 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'restapigatewayE22E31C5' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L272 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L211 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction1A09FC241` (AWS::Lambda::Function) → `Properties.Tags` L111 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1A09FC241' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L86 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1SecurityGroupF7DF9E6F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdafunction1ServiceRoleA9EAFFE5` (AWS::IAM::Role) → `Properties.Tags` L37 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1ServiceRoleA9EAFFE5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction2F899168D` (AWS::Lambda::Function) → `Properties.Tags` L376 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2F899168D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.Tags` L351 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2SecurityGroup7268045A' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdafunction2ServiceRole380A1BE9` (AWS::IAM::Role) → `Properties.Tags` L302 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2ServiceRole380A1BE9' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapi4C7BF186` (AWS::ApiGateway::RestApi) → `Properties.Tags` L658 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapi4C7BF186' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `myapiANYStartSyncExecutionRole7935C5BB` (AWS::IAM::Role) → `Properties.Tags` L759 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiANYStartSyncExecutionRole7935C5BB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapiCloudWatchRole095452E5` (AWS::IAM::Role) → `Properties.Tags` L668 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiCloudWatchRole095452E5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.Tags` L741 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiDeploymentStagedevB1704B15' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L592 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'mystatemachine15ECA539' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `mystatemachineRole70AA91FD` (AWS::IAM::Role) → `Properties.Tags` L487 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'mystatemachineRole70AA91FD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `stepfunctionsloggroup6EBF6C71` (AWS::Logs::LogGroup) → `Properties.Tags` L476 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'stepfunctionsloggroup6EBF6C71' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L5 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapi' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `chatappapiiamrole2977C2A3` (AWS::IAM::Role) → `Properties.Tags` L440 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapiiamrole2977C2A3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L690 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapistage' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapitable5244EF8B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `connectlambdaFFAE59F3` (AWS::Lambda::Function) → `Properties.Tags` L134 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'connectlambdaFFAE59F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `connectlambdaServiceRole04DCF570` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'connectlambdaServiceRole04DCF570' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `disconnectlambdaAC22A441` (AWS::Lambda::Function) → `Properties.Tags` L261 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'disconnectlambdaAC22A441' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `disconnectlambdaServiceRole2779F08C` (AWS::IAM::Role) → `Properties.Tags` L170 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'disconnectlambdaServiceRole2779F08C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `messagelambda16C1C2A3` (AWS::Lambda::Function) → `Properties.Tags` L404 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'messagelambda16C1C2A3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `messagelambdaServiceRole544EC18A` (AWS::IAM::Role) → `Properties.Tags` L297 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'messagelambdaServiceRole544EC18A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L697 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L780 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBListener49E825B4' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L801 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBListenerTargetGroupF04FCF6D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L735 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CarApiCarsDataSourceServiceRole82F3FC8A` (AWS::IAM::Role) → `Properties.Tags` L107 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiCarsDataSourceServiceRole82F3FC8A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CarApiDefectsDataSourceServiceRole7EDF6907` (AWS::IAM::Role) → `Properties.Tags` L197 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiDefectsDataSourceServiceRole7EDF6907' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CarApiE5E7ACF5` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L81 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiE5E7ACF5' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarTableA597893A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.Tags` L32 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'DefectsTable2A57950B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `AppSync2EventBridgeApi` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSync2EventBridgeApi' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `AppSyncEventBridgeRle2A25B9B1` (AWS::Events::Rule) → `Properties.Tags` L211 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSyncEventBridgeRle2A25B9B1' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `AppSyncEventBridgeRoleE2F34FE0` (AWS::IAM::Role) → `Properties.Tags` L44 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSyncEventBridgeRoleE2F34FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `echoFunction5207BE9B` (AWS::Lambda::Function) → `Properties.Tags` L189 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'echoFunction5207BE9B' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `echoFunctionServiceRole1EBD6DF0` (AWS::IAM::Role) → `Properties.Tags` L155 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'echoFunctionServiceRole1EBD6DF0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PostsApiCdk` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Resource 'PostsApiCdk' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `Construct1FunctionWithReservedCEs6458B719` (AWS::Lambda::Function) → `Properties.Tags` L95 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1FunctionWithReservedCEs6458B719' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct1FunctionWithReservedCEsServiceRole21C8F977` (AWS::IAM::Role) → `Properties.Tags` L61 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1FunctionWithReservedCEsServiceRole21C8F977' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct1StandardFunctionD5361E84` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1StandardFunctionD5361E84' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct1StandardFunctionServiceRole716388BA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1StandardFunctionServiceRole716388BA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct2FunctionWithReservedCEs89864BB2` (AWS::Lambda::Function) → `Properties.Tags` L209 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2FunctionWithReservedCEs89864BB2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct2FunctionWithReservedCEsServiceRoleB80261C4` (AWS::IAM::Role) → `Properties.Tags` L175 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2FunctionWithReservedCEsServiceRoleB80261C4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct2StandardFunction1EBDBFFA` (AWS::Lambda::Function) → `Properties.Tags` L152 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2StandardFunction1EBDBFFA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct2StandardFunctionServiceRole450FEF35` (AWS::IAM::Role) → `Properties.Tags` L118 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2StandardFunctionServiceRole450FEF35' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Resource 'IncomingDataBucket3554D835' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured -- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured -- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured -- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured -- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Role1ABCC5F0` (AWS::IAM::Role) → `Properties.Tags` L89 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Resource 'Role1ABCC5F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchInstanceRole8DB66C4C` (AWS::IAM::Role) → `Properties.Tags` L620 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchInstanceRole8DB66C4C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchJobRole37A83758` (AWS::IAM::Role) → `Properties.Tags` L815 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchJobRole37A83758' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L567 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchSecurityGroup77EC865F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `BatchServiceRole57930367` (AWS::IAM::Role) → `Properties.Tags` L586 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchServiceRole57930367' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L537 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L465 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionFAE645C8` (AWS::Lambda::Function) → `Properties.Tags` L1034 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionFAE645C8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.Tags` L1083 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionLogGroupF7938D09' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionServiceRole55AD6E92` (AWS::IAM::Role) → `Properties.Tags` L972 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionServiceRole55AD6E92' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L747 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPComputeEnvironment' of type 'AWS::Batch::ComputeEnvironment' supports Tags but none are configured -- **I9040** `OpenMPJobDefinition` (AWS::Batch::JobDefinition) → `Properties.Tags` L861 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPJobDefinition' of type 'AWS::Batch::JobDefinition' supports Tags but none are configured -- **I9040** `OpenMPJobQueue` (AWS::Batch::JobQueue) → `Properties.Tags` L797 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPJobQueue' of type 'AWS::Batch::JobQueue' supports Tags but none are configured -- **I9040** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.Tags` L849 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPLogGroup95FEB040' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPRepositoryAB8BB3BC' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L665 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L620 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L336 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Tags` L387 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'RequestFunction0B9B463A' of type 'AWS::CloudFront::Function' supports Tags but none are configured -- **I9040** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Tags` L402 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'ResponseFunctionB78A69CA' of type 'AWS::CloudFront::Function' supports Tags but none are configured -- **I9040** `SiteDistribution3FF9535D` (AWS::CloudFront::Distribution) → `Properties.Tags` L428 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'SiteDistribution3FF9535D' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L1066 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2` (AWS::IAM::Role) → `Properties.Tags` L1032 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1640 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BlueTargetGroupF108EB01' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L2293 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipeline5EEC284B' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `BuildDeployPipelineArtifactsBucket5D4A76C1` (AWS::S3::Bucket) → `Properties.Tags` L2090 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineArtifactsBucket5D4A76C1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8` (AWS::KMS::Key) → `Properties.Tags` L2035 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965` (AWS::IAM::Role) → `Properties.Tags` L2708 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB` (AWS::IAM::Role) → `Properties.Tags` L2766 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineEventsRoleDE5B0F8F` (AWS::IAM::Role) → `Properties.Tags` L2584 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineEventsRoleDE5B0F8F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineRole3223E55F` (AWS::IAM::Role) → `Properties.Tags` L2171 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineRole3223E55F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0` (AWS::IAM::Role) → `Properties.Tags` L2471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1` (AWS::IAM::Role) → `Properties.Tags` L2650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildImage74257FD8` (AWS::CodeBuild::Project) → `Properties.Tags` L481 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildImage74257FD8' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `BuildImageRoleA9C72406` (AWS::IAM::Role) → `Properties.Tags` L265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildImageRoleA9C72406' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildLambda72E2A667` (AWS::Lambda::Function) → `Properties.Tags` L919 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildLambda72E2A667' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BuildLambdaServiceRole8FB6C033` (AWS::IAM::Role) → `Properties.Tags` L856 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildLambdaServiceRole8FB6C033' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildTestC9659529` (AWS::CodeBuild::Project) → `Properties.Tags` L813 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildTestC9659529' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `BuildTestRoleC332A422` (AWS::IAM::Role) → `Properties.Tags` L627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildTestRoleC332A422' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.Tags` L1950 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroup58220FC8' of type 'AWS::CodeDeploy::DeploymentGroup' supports Tags but none are configured -- **I9040** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.Tags` L1941 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroupApplication13EFBDA6' of type 'AWS::CodeDeploy::Application' supports Tags but none are configured -- **I9040** `CodeDeployGroupServiceRole50553EBF` (AWS::IAM::Role) → `Properties.Tags` L1907 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroupServiceRole50553EBF' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L1767 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L1791 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1852 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefC6FB60B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateTaskDefExecutionRole272677A9` (AWS::IAM::Role) → `Properties.Tags` L207 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefExecutionRole272677A9' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskDefTaskRole0B257552` (AWS::IAM::Role) → `Properties.Tags` L99 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefTaskRole0B257552' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1661 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'GreenTargetGroupEEB2DF3E' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L1710 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'PublicAlb84330974' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L1748 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'PublicAlbAlbListener804C1B2779' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1682 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `imageRepo1D8A68AF` (AWS::ECR::Repository) → `Properties.Tags` L89 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'imageRepo1D8A68AF' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `repoBEC318EA` (AWS::CodeCommit::Repository) → `Properties.Tags` L5 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'repoBEC318EA' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0` (AWS::Events::Rule) → `Properties.Tags` L23 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `helloWorldFunction00C940B5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldFunction00C940B5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `helloWorldFunctionServiceRole8475DBF0` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldFunctionServiceRole8475DBF0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApi6825FB98` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApi6825FB98' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApiCloudWatchRole22367FBD` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApiCloudWatchRole22367FBD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.Tags` L148 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApiDeploymentStageprod67DD79AF' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `MyBucketF68F3FF0` (AWS::S3::Bucket) → `Properties.Tags` L9 in `cdk_custom-logical-names--MyStack.template_json` - > Resource 'MyBucketF68F3FF0' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyTopic86869434` (AWS::SNS::Topic) → `Properties.Tags` L3 in `cdk_custom-logical-names--MyStack.template_json` - > Resource 'MyTopic86869434' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DemoResourceProviderframeworkonEventF8E49AD2` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceProviderframeworkonEventF8E49AD2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DemoResourceProviderframeworkonEventServiceRoleDB88154F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceProviderframeworkonEventServiceRoleDB88154F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L190 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L156 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DemoResourceMyProviderframeworkonEvent65F24A35` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceMyProviderframeworkonEvent65F24A35' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DemoResourceMyProviderframeworkonEventServiceRole1437DF1C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceMyProviderframeworkonEventServiceRole1437DF1C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L300 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L239 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L216 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L182 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.Tags` L67 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'ddbstreaml2dlq5966ED66' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'ddbstreamtopic7821AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.Tags` L80 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableBAC64D83' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunction1987B4C5` (AWS::Lambda::Function) → `Properties.Tags` L206 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunction1987B4C5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L246 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunctionServiceRole41583A05` (AWS::IAM::Role) → `Properties.Tags` L109 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunctionServiceRole41583A05' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.Tags` L499 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableDynamoTable6BC36F24' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunction7B818C58` (AWS::Lambda::Function) → `Properties.Tags` L412 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunction7B818C58' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L467 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunctionServiceRoleBA21B37D` (AWS::IAM::Role) → `Properties.Tags` L278 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunctionServiceRoleBA21B37D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemL3TableSqsDlqQueueD3C251B9` (AWS::SQS::Queue) → `Properties.Tags` L536 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableSqsDlqQueueD3C251B9' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` (AWS::Lambda::Function) → `Properties.Tags` L911 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1` (AWS::IAM::Role) → `Properties.Tags` L788 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L747 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L722 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'EC2ec2InstanceSecurityGroupD268D496' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `EC2serverEc2Role6775A3D4` (AWS::IAM::Role) → `Properties.Tags` L405 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'EC2serverEc2Role6775A3D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'VPCSSHSecurityGroup0495A24F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkisCompleteB1442B18` (AWS::Lambda::Function) → `Properties.Tags` L748 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkisCompleteB1442B18' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51` (AWS::IAM::Role) → `Properties.Tags` L631 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonEventB48896C9` (AWS::Lambda::Function) → `Properties.Tags` L577 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonEventB48896C9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonEventServiceRoleC0D29A73` (AWS::IAM::Role) → `Properties.Tags` L453 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonEventServiceRoleC0D29A73' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonTimeout83318112` (AWS::Lambda::Function) → `Properties.Tags` L916 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonTimeout83318112' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonTimeoutServiceRole904320AB` (AWS::IAM::Role) → `Properties.Tags` L799 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonTimeoutServiceRole904320AB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderwaiterstatemachine1A139B58` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1052 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderwaiterstatemachine1A139B58' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `EICEndpointProviderwaiterstatemachineRole5E284D23` (AWS::IAM::Role) → `Properties.Tags` L967 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderwaiterstatemachineRole5E284D23' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointRole7DC4D43E` (AWS::IAM::Role) → `Properties.Tags` L291 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointRole7DC4D43E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointisCompleteHandler0273707A` (AWS::Lambda::Function) → `Properties.Tags` L425 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointisCompleteHandler0273707A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointonEventHandlerC2E1F5F2` (AWS::Lambda::Function) → `Properties.Tags` L397 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointonEventHandlerC2E1F5F2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.Tags` L689 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Resource 'AsgCapacityProvider760D11D9' of type 'AWS::ECS::CapacityProvider' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L664 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L191 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'Listener828B0E81' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L212 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ListenerECSGroup2EA4A011' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L121 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L58 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerListenerE1A099B9' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L79 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L119 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Tags` L1111 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'Ec2Service04A33183' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L1049 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L1059 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `awsvpcecsdemoclusterA7FD8C86` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'awsvpcecsdemoclusterA7FD8C86' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Tags` L1078 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'awsvpcecsdemoserviceServiceFC4BE5C7' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1048 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginx76230F353007' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginxawspvcB396AC00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `nginxawspvcTaskRole3F43A26E` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginxawspvcTaskRole3F43A26E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L1040 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Tags` L727 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceECC8084D' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBB353E155' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L554 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBPublicListener4B4929CA' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L575 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBPublicListenerECSGroupBE57E081' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.Tags` L509 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBSecurityGroup5F444C78' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.Tags` L788 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceSecurityGroup262B61DD' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Tags` L615 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDef940E3A80' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefExecutionRole9194820E` (AWS::IAM::Role) → `Properties.Tags` L675 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefExecutionRole9194820E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefTaskRole8CDCF85E` (AWS::IAM::Role) → `Properties.Tags` L595 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefTaskRole8CDCF85E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefwebLogGroup71FAF541` (AWS::Logs::LogGroup) → `Properties.Tags` L665 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefwebLogGroup71FAF541' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `fargateserviceautoscalingD107CF93` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'fargateserviceautoscalingD107CF93' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBBDE1D276' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L501 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBPublicListenerC4DF6480' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L522 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBPublicListenerECSGroup525A567D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Tags` L668 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappServiceE7504FDB' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.Tags` L729 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappServiceSecurityGroup0ABF0D21' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Tags` L556 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDef6BF75736' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `sampleappTaskDefExecutionRoleAD6F4C40` (AWS::IAM::Role) → `Properties.Tags` L616 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefExecutionRoleAD6F4C40' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sampleappTaskDefTaskRoleB530CAC0` (AWS::IAM::Role) → `Properties.Tags` L536 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefTaskRoleB530CAC0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sampleappTaskDefwebLogGroup34BE8C79` (AWS::Logs::LogGroup) → `Properties.Tags` L606 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefwebLogGroup34BE8C79' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L597 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L646 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L535 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L545 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L491 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L118 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L87 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L29 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TopicBFC7AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'TopicBFC7AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ProxyAPI32755B5A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L5 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPI32755B5A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ProxyAPICloudWatchRoleB8A087D1` (AWS::IAM::Role) → `Properties.Tags` L19 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPICloudWatchRoleB8A087D1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.Tags` L92 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPIDeploymentStageprodBE6BE99F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Tags` L220 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'AmazonLinux2023WithGitPipeline' of type 'AWS::ImageBuilder::ImagePipeline' supports Tags but none are configured -- **I9040** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Tags` L49 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'AmazonLinux2023withGitAndNodeRecipe' of type 'AWS::ImageBuilder::ContainerRecipe' supports Tags but none are configured -- **I9040** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L29 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'DockerComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `EC2InstanceProfileForImageBuilderA043DE9F` (AWS::IAM::Role) → `Properties.Tags` L105 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'EC2InstanceProfileForImageBuilderA043DE9F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcrRepoForImageBuilderCodeCatalystBF634BA6` (AWS::ECR::Repository) → `Properties.Tags` L39 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'EcrRepoForImageBuilderCodeCatalystBF634BA6' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L5 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'GitComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Tags` L196 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'ImageBuilderDistConfig' of type 'AWS::ImageBuilder::DistributionConfiguration' supports Tags but none are configured -- **I9040** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Tags` L184 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'ImageBuilderInfraConfig' of type 'AWS::ImageBuilder::InfrastructureConfiguration' supports Tags but none are configured -- **I9040** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L17 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'NodejsComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L212 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606` (AWS::IAM::Role) → `Properties.Tags` L52 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L329 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L71 in `cdk_inspector2--Inspector2EnableStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EnableInspector2ResourceInspectorRole75753456` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableStack.template_json` - > Resource 'EnableInspector2ResourceInspectorRole75753456' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2FindingHandler1F85FFBC` (AWS::Lambda::Function) → `Properties.Tags` L330 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2FindingHandler1F85FFBC' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2FindingHandlerServiceRoleCEDAFBC1` (AWS::IAM::Role) → `Properties.Tags` L296 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2FindingHandlerServiceRoleCEDAFBC1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2InitialScanHandler460C9991` (AWS::Lambda::Function) → `Properties.Tags` L150 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2InitialScanHandler460C9991' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2InitialScanHandlerServiceRoleA1739B7A` (AWS::IAM::Role) → `Properties.Tags` L116 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2InitialScanHandlerServiceRoleA1739B7A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2MonitoringfindingScanRuleC84833CE` (AWS::Events::Rule) → `Properties.Tags` L61 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2MonitoringfindingScanRuleC84833CE' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Inspector2MonitoringinitialScanRule902E013C` (AWS::Events::Rule) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2MonitoringinitialScanRule902E013C' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L266 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L219 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L158 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleLambdaB2FF4FA1` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaB2FF4FA1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L94 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaDashboard39118496' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured -- **I9040** `SampleLambdaServiceRoleB1A8618F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaServiceRoleB1A8618F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionBF21E41F` (AWS::Lambda::Function) → `Properties.Tags` L62 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Resource 'LambdaFunctionBF21E41F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionServiceRoleC555A460` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Resource 'LambdaFunctionServiceRoleC555A460' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleQueue49AAAEFF` (AWS::SQS::Queue) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` - > Resource 'SampleQueue49AAAEFF' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SampleTopic5FE9B5DC` (AWS::SNS::Topic) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` - > Resource 'SampleTopic5FE9B5DC' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.Tags` L80 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'S3EventNotificationsLambda20F17D80' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `S3EventNotificationsLambdaServiceRoleD45D5063` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'S3EventNotificationsLambdaServiceRoleD45D5063' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleBucket7F6F8160` (AWS::S3::Bucket) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'SampleBucket7F6F8160' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `WidgetsWidgetHandler1BC9DB34` (AWS::Lambda::Function) → `Properties.Tags` L103 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetHandler1BC9DB34' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `WidgetsWidgetHandlerServiceRole8C2B589C` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetHandlerServiceRole8C2B589C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WidgetsWidgetStore0ED7FDB7` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetStore0ED7FDB7' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Widgetswidgetsapi72353315` (AWS::ApiGateway::RestApi) → `Properties.Tags` L139 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'Widgetswidgetsapi72353315' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `WidgetswidgetsapiCloudWatchRole8C2A5801` (AWS::IAM::Role) → `Properties.Tags` L149 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetswidgetsapiCloudWatchRole8C2A5801' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.Tags` L224 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetswidgetsapiDeploymentStageprod0D8CD1B7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.Tags` L86 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.Tags` L14 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'BigFanTopicStatusCreatedSubscriberQueue589E974E' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L716 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandler4037E293' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB` (AWS::IAM::Role) → `Properties.Tags` L308 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L437 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none -- **I9040** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` (AWS::Lambda::Function) → `Properties.Tags` L231 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandler0467DB95' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A` (AWS::IAM::Role) → `Properties.Tags` L162 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L291 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none ar -- **I9040** `theBigFanAPI6E21715A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L454 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPI6E21715A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `theBigFanAPICloudWatchRoleD603B41E` (AWS::IAM::Role) → `Properties.Tags` L463 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPICloudWatchRoleD603B41E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.Tags` L532 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPIDeploymentStageprod1F15C9DC' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `theBigFanTopicF96567DE` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanTopicF96567DE' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `APIGateway4XXErrors1647FE3DB` (AWS::CloudWatch::Alarm) → `Properties.Tags` L285 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIGateway4XXErrors1647FE3DB' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `APIGateway5XXErrors0A91D7B4E` (AWS::CloudWatch::Alarm) → `Properties.Tags` L354 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIGateway5XXErrors0A91D7B4E' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `APIp99latencyalarm1s67095ACE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L385 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIp99latencyalarm1s67095ACE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchDashBoard043C60B6` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L900 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'CloudWatchDashBoard043C60B6' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured -- **I9040** `DynamoDBErrors0FA6C66C9` (AWS::CloudWatch::Alarm) → `Properties.Tags` L641 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoDBErrors0FA6C66C9' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoDBTableReadsWritesThrottled13F6F2AE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L576 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoDBTableReadsWritesThrottled13F6F2AE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambda2ErrorDE3BEB2F` (AWS::CloudWatch::Alarm) → `Properties.Tags` L416 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambda2ErrorDE3BEB2F' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambda2Throttled090CFA4C` (AWS::CloudWatch::Alarm) → `Properties.Tags` L511 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambda2Throttled090CFA4C' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoLambdap99LongDuration1s739ED568` (AWS::CloudWatch::Alarm) → `Properties.Tags` L481 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdap99LongDuration1s739ED568' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L174 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HttpAPI8D545486' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L266 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HttpAPIDefaultStage1BC7D78F' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `errorTopicE59AB483` (AWS::SNS::Topic) → `Properties.Tags` L277 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'errorTopicE59AB483' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ApiGatewaySnsRole904B65D6` (AWS::IAM::Role) → `Properties.Tags` L777 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'ApiGatewaySnsRole904B65D6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Tags` L5 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'DestinedEventBus14820B65' of type 'AWS::Events::EventBus' supports Tags but none are configured -- **I9040** `FailureLambdaHandlerBB58C051` (AWS::Lambda::Function) → `Properties.Tags` L400 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'FailureLambdaHandlerBB58C051' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FailureLambdaHandlerServiceRole7E0414CB` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'FailureLambdaHandlerServiceRole7E0414CB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SuccessLambdaHandler0E2CD797` (AWS::Lambda::Function) → `Properties.Tags` L243 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'SuccessLambdaHandler0E2CD797' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SuccessLambdaHandlerServiceRole77BD70C4` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'SuccessLambdaHandlerServiceRole77BD70C4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `destinedLambda8DF776BB` (AWS::Lambda::Function) → `Properties.Tags` L81 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'destinedLambda8DF776BB' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `destinedLambdaServiceRole87608B6F` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'destinedLambdaServiceRole87608B6F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.Tags` L460 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'failureRule10D0B2E4' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.Tags` L303 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'successRuleE9E88056' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPIBAB2789B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L515 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPIBAB2789B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPICloudWatchRoleCDF408DA` (AWS::IAM::Role) → `Properties.Tags` L524 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPICloudWatchRoleCDF408DA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.Tags` L593 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPIDeploymentStageprodD67BDFB2' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `theDestinedLambdaTopic8F2C8FB6` (AWS::SNS::Topic) → `Properties.Tags` L14 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaTopic8F2C8FB6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L444 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoStreamerAPICA573C81` (AWS::ApiGateway::RestApi) → `Properties.Tags` L185 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPICA573C81' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `DynamoStreamerAPICloudWatchRoleEF2543E3` (AWS::IAM::Role) → `Properties.Tags` L194 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPICloudWatchRoleEF2543E3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.Tags` L263 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPIDeploymentStageprod0700648B' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'TheDynamoStreamer641C5E5B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerD2AAE139` (AWS::Lambda::Function) → `Properties.Tags` L106 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerD2AAE139' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L166 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47` (AWS::IAM::Role) → `Properties.Tags` L34 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L581 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L649 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L572 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaC3C4DA46` (AWS::Lambda::Function) → `Properties.Tags` L157 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaC3C4DA46' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaRuleC1D6BC2F` (AWS::Events::Rule) → `Properties.Tags` L216 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaRuleC1D6BC2F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaServiceRole70132707` (AWS::IAM::Role) → `Properties.Tags` L123 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaServiceRole70132707' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaB7E263A7` (AWS::Lambda::Function) → `Properties.Tags` L306 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaB7E263A7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaRule5894DC8E` (AWS::Events::Rule) → `Properties.Tags` L365 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaRule5894DC8E' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaServiceRole130B888D` (AWS::IAM::Role) → `Properties.Tags` L272 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaServiceRole130B888D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmConsumer3Lambda880BEEDF` (AWS::Lambda::Function) → `Properties.Tags` L456 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3Lambda880BEEDF' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer3LambdaRule41A00643` (AWS::Events::Rule) → `Properties.Tags` L515 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3LambdaRule41A00643' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer3LambdaServiceRoleCF9BAEA7` (AWS::IAM::Role) → `Properties.Tags` L422 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3LambdaServiceRoleCF9BAEA7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmProducerLambda71029F8F` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmProducerLambda71029F8F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmProducerLambdaServiceRoleEF3D6079` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmProducerLambdaServiceRoleEF3D6079' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreaker4FAEA3DB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L436 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayCloudWatchRole934DF897` (AWS::IAM::Role) → `Properties.Tags` L445 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayCloudWatchRole934DF897' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.Tags` L513 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayDeploymentStageprod84F6B9E5' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `ErrorLambdaHandler4224322A` (AWS::Lambda::Function) → `Properties.Tags` L312 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'ErrorLambdaHandler4224322A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ErrorLambdaHandlerServiceRole5D9F8D61` (AWS::IAM::Role) → `Properties.Tags` L228 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'ErrorLambdaHandlerServiceRole5D9F8D61' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WebserviceIntegrationLambdaHandler5E349AB7` (AWS::Lambda::Function) → `Properties.Tags` L160 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'WebserviceIntegrationLambdaHandler5E349AB7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `WebserviceIntegrationLambdaHandlerServiceRole851361F8` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'WebserviceIntegrationLambdaHandlerServiceRole851361F8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `webserviceErrorRuleCE293636` (AWS::Events::Rule) → `Properties.Tags` L380 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'webserviceErrorRuleCE293636' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L662 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Tags` L744 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinition8E3B365E' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionAppContainerLogGroup20407D7C` (AWS::Logs::LogGroup) → `Properties.Tags` L820 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionAppContainerLogGroup20407D7C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionExecutionRoleE69A8E33` (AWS::IAM::Role) → `Properties.Tags` L831 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionExecutionRoleE69A8E33' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionTaskRoleE3C2BCAA` (AWS::IAM::Role) → `Properties.Tags` L670 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionTaskRoleE3C2BCAA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LandingBucket23FE90FB` (AWS::S3::Bucket) → `Properties.Tags` L29 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LandingBucket23FE90FB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LoadLambdaHandlerFDA03D53` (AWS::Lambda::Function) → `Properties.Tags` L1380 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LoadLambdaHandlerFDA03D53' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LoadLambdaHandlerServiceRole83E61748` (AWS::IAM::Role) → `Properties.Tags` L1296 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LoadLambdaHandlerServiceRole83E61748' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ObserveLambdaHandler685FFDBB` (AWS::Lambda::Function) → `Properties.Tags` L1539 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'ObserveLambdaHandler685FFDBB' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ObserveLambdaHandlerServiceRole040C69BA` (AWS::IAM::Role) → `Properties.Tags` L1505 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'ObserveLambdaHandlerServiceRole040C69BA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TransformLambdaHandler60ABE8EE` (AWS::Lambda::Function) → `Properties.Tags` L1178 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformLambdaHandler60ABE8EE' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TransformLambdaHandlerServiceRole710C039E` (AWS::IAM::Role) → `Properties.Tags` L1120 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformLambdaHandlerServiceRole710C039E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformedDataB0572681' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `extractLambdaHandlerD06B8F09` (AWS::Lambda::Function) → `Properties.Tags` L1015 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerD06B8F09' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `extractLambdaHandlerServiceRole8A50F829` (AWS::IAM::Role) → `Properties.Tags` L916 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerServiceRole8A50F829' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L1103 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `loadRuleF0FAF418` (AWS::Events::Rule) → `Properties.Tags` L1449 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'loadRuleF0FAF418' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `newObjectInLandingBucketEventQueue67CBE2F2` (AWS::SQS::Queue) → `Properties.Tags` L75 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'newObjectInLandingBucketEventQueue67CBE2F2' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `observeRule9CF2E16C` (AWS::Events::Rule) → `Properties.Tags` L1599 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'observeRule9CF2E16C' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `transformRuleFEA34632` (AWS::Events::Rule) → `Properties.Tags` L1240 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'transformRuleFEA34632' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayDefaultStageC51956FB' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerTable02DAD2B8' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `UnreliableLambdaHandlerD4A4DED9` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'UnreliableLambdaHandlerD4A4DED9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `UnreliableLambdaHandlerServiceRole955A5CFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'UnreliableLambdaHandlerServiceRole955A5CFD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BookingSagaFA991213` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1337 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingSagaFA991213' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `BookingSagaRole82982544` (AWS::IAM::Role) → `Properties.Tags` L1207 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingSagaRole82982544' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingsB1C24132' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `SagaPatternSingleTable288D85B3` (AWS::ApiGateway::RestApi) → `Properties.Tags` L1554 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTable288D85B3' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `SagaPatternSingleTableCloudWatchRole130684F0` (AWS::IAM::Role) → `Properties.Tags` L1563 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTableCloudWatchRole130684F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.Tags` L1631 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTableDeploymentStageprod92F0690D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `cancelFlightLambdaHandler437EEC76` (AWS::Lambda::Function) → `Properties.Tags` L410 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelFlightLambdaHandler437EEC76' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `cancelFlightLambdaHandlerServiceRole7F2439CB` (AWS::IAM::Role) → `Properties.Tags` L331 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelFlightLambdaHandlerServiceRole7F2439CB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `cancelHotelLambdaHandler09F13EF6` (AWS::Lambda::Function) → `Properties.Tags` L848 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelHotelLambdaHandler09F13EF6' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `cancelHotelLambdaHandlerServiceRole4815D152` (AWS::IAM::Role) → `Properties.Tags` L769 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelHotelLambdaHandlerServiceRole4815D152' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `confirmFlightLambdaHandler96C3663F` (AWS::Lambda::Function) → `Properties.Tags` L264 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmFlightLambdaHandler96C3663F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `confirmFlightLambdaHandlerServiceRole45F91B6E` (AWS::IAM::Role) → `Properties.Tags` L185 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmFlightLambdaHandlerServiceRole45F91B6E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `confirmHotelLambdaHandler882ACF2D` (AWS::Lambda::Function) → `Properties.Tags` L702 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmHotelLambdaHandler882ACF2D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `confirmHotelLambdaHandlerServiceRoleD5F8F90E` (AWS::IAM::Role) → `Properties.Tags` L623 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmHotelLambdaHandlerServiceRoleD5F8F90E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `refundPaymentLambdaHandler932D11D5` (AWS::Lambda::Function) → `Properties.Tags` L1140 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'refundPaymentLambdaHandler932D11D5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `refundPaymentLambdaHandlerServiceRole62F72F0D` (AWS::IAM::Role) → `Properties.Tags` L1061 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'refundPaymentLambdaHandlerServiceRole62F72F0D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `reserveFlightLambdaHandler3C75473D` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveFlightLambdaHandler3C75473D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `reserveFlightLambdaHandlerServiceRole985C586D` (AWS::IAM::Role) → `Properties.Tags` L39 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveFlightLambdaHandlerServiceRole985C586D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `reserveHotelLambdaHandler020AE24A` (AWS::Lambda::Function) → `Properties.Tags` L556 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveHotelLambdaHandler020AE24A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `reserveHotelLambdaHandlerServiceRole452F23B7` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveHotelLambdaHandlerServiceRole452F23B7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sagaLambdaHandlerFC24742F` (AWS::Lambda::Function) → `Properties.Tags` L1487 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'sagaLambdaHandlerFC24742F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sagaLambdaHandlerServiceRole7EB685BD` (AWS::IAM::Role) → `Properties.Tags` L1427 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'sagaLambdaHandlerServiceRole7EB685BD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `takePaymentLambdaHandlerB96529D4` (AWS::Lambda::Function) → `Properties.Tags` L994 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'takePaymentLambdaHandlerB96529D4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `takePaymentLambdaHandlerServiceRole56CA2808` (AWS::IAM::Role) → `Properties.Tags` L915 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'takePaymentLambdaHandlerServiceRole56CA2808' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L434 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L357 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'Messages804FA4EB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `RDSPublishQueue2BEA1A7F` (AWS::SQS::Queue) → `Properties.Tags` L31 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'RDSPublishQueue2BEA1A7F' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SQSPublishLambdaHandler51EE31BE` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSPublishLambdaHandler51EE31BE' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSPublishLambdaHandlerServiceRole4F9A1044` (AWS::IAM::Role) → `Properties.Tags` L40 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSPublishLambdaHandlerServiceRole4F9A1044' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerBBB58615` (AWS::Lambda::Function) → `Properties.Tags` L269 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerBBB58615' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerServiceRoleB6261F09` (AWS::IAM::Role) → `Properties.Tags` L174 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerServiceRoleB6261F09' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L340 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'RequestTableC81DB378' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `scheduledLambda8A84450D` (AWS::Lambda::Function) → `Properties.Tags` L104 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambda8A84450D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `scheduledLambdaServiceRoleB98DFEFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambdaServiceRoleB98DFEFD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `scheduledLambdaschedule99960653` (AWS::Events::Rule) → `Properties.Tags` L171 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambdaschedule99960653' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `ApiApiLogsRole90293F72` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiApiLogsRole90293F72' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiCustomerServiceRole28709567` (AWS::IAM::Role) → `Properties.Tags` L90 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiCustomerServiceRole28709567' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiF70053CD` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L39 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiF70053CD' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `ApiLoyaltyServiceRole2B487CD2` (AWS::IAM::Role) → `Properties.Tags` L329 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiLoyaltyServiceRole2B487CD2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.Tags` L446 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'CustomerTable260DCC08' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LoyaltyLambdaHandler5918F0DA` (AWS::Lambda::Function) → `Properties.Tags` L503 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'LoyaltyLambdaHandler5918F0DA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LoyaltyLambdaHandlerServiceRole62E814E8` (AWS::IAM::Role) → `Properties.Tags` L469 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'LoyaltyLambdaHandlerServiceRole62E814E8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'EndpointDefaultStage0AD21F27' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `HttpApiRole79B5C31A` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'HttpApiRole79B5C31A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L168 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L98 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `pineappleCheckLambdaHandlerFDB742D5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'pineappleCheckLambdaHandlerFDB742D5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `pineappleCheckLambdaHandlerServiceRoleFC4E3211` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'pineappleCheckLambdaHandlerServiceRoleFC4E3211' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L242 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'thestatemachineapi69C81CC4' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L252 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'thestatemachineapiDefaultStageE23A2C15' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `HelloWorldHandler30C22324` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'HelloWorldHandler30C22324' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `HelloWorldHandlerServiceRole56E6BFBA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'HelloWorldHandlerServiceRole56E6BFBA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WafGatewayAPI5BA7C2CE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L98 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPI5BA7C2CE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `WafGatewayAPICloudWatchRoleEE79D232` (AWS::IAM::Role) → `Properties.Tags` L112 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPICloudWatchRoleEE79D232' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.Tags` L179 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPIDeploymentStageprodEF5FA49F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Resource 'WebACL' of type 'AWS::WAFv2::WebACL' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `httpLambdaHandler66D9C9A8` (AWS::Lambda::Function) → `Properties.Tags` L66 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Resource 'httpLambdaHandler66D9C9A8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `httpLambdaHandlerServiceRole01D49A7D` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Resource 'httpLambdaHandlerServiceRole01D49A7D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Queue4A7E3555` (AWS::SQS::Queue) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'Queue4A7E3555' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `sqsLambdaHandler0DD5DF9B` (AWS::Lambda::Function) → `Properties.Tags` L89 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsLambdaHandler0DD5DF9B' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sqsLambdaHandlerServiceRole2F57B7B5` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsLambdaHandlerServiceRole2F57B7B5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerD66392B8` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerD66392B8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerServiceRole8F070FD3` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerServiceRole8F070FD3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L349 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `TheXRayTracerSnsTopicCCE2005E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'TheXRayTracerSnsTopicCCE2005E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `snsLambdaHandlerE7B0ABE3` (AWS::Lambda::Function) → `Properties.Tags` L82 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsLambdaHandlerE7B0ABE3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `snsLambdaHandlerServiceRole7F428B88` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsLambdaHandlerServiceRole7F428B88' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `snsSubscriptionLambdaHandler68619CD8` (AWS::Lambda::Function) → `Properties.Tags` L263 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsSubscriptionLambdaHandler68619CD8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `snsSubscriptionLambdaHandlerServiceRole215E543C` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsSubscriptionLambdaHandlerServiceRole215E543C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewaySNSRole1BAAAE75` (AWS::IAM::Role) → `Properties.Tags` L374 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'ApiGatewaySNSRole1BAAAE75' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TheXRayTracerSnsFanOutTopicDE7E70F8` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'TheXRayTracerSnsFanOutTopicDE7E70F8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `xrayTracerAPIA84CAE80` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPIA84CAE80' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `xrayTracerAPICloudWatchRoleCCB113F4` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPICloudWatchRoleCCB113F4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.Tags` L93 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPIDeploymentStageprod85442A48' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `ApiCorsLambda5083F55F` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiCorsLambda5083F55F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ApiCorsLambdaServiceRole0DB39061` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiCorsLambdaServiceRole0DB39061' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayWithCors6DE4076F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCors6DE4076F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ApiGatewayWithCorsCloudWatchRole9C3700F0` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCorsCloudWatchRole9C3700F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.Tags` L149 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCorsDeploymentStageprod7F1DD875' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumer52DC1403` (AWS::ApiGateway::RestApi) → `Properties.Tags` L485 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumer52DC1403' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E` (AWS::IAM::Role) → `Properties.Tags` L494 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.Tags` L566 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `consumer3firehose` (AWS::KinesisFirehose::DeliveryStream) → `Properties.Tags` L375 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'consumer3firehose' of type 'AWS::KinesisFirehose::DeliveryStream' supports Tags but none are configured -- **I9040** `consumer3firehoseEventsRoleECB13871` (AWS::IAM::Role) → `Properties.Tags` L401 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'consumer3firehoseEventsRoleECB13871' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer1Lambda4AF2292E` (AWS::Lambda::Function) → `Properties.Tags` L126 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1Lambda4AF2292E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventConsumer1LambdaRule288E5FF9` (AWS::Events::Rule) → `Properties.Tags` L154 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1LambdaRule288E5FF9' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventConsumer1LambdaServiceRoleC8CCBFC5` (AWS::IAM::Role) → `Properties.Tags` L92 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1LambdaServiceRoleC8CCBFC5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer2Lambda1631C47A` (AWS::Lambda::Function) → `Properties.Tags` L236 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2Lambda1631C47A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventConsumer2LambdaRule54312CB1` (AWS::Events::Rule) → `Properties.Tags` L264 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2LambdaRule54312CB1' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventConsumer2LambdaServiceRole6B878884` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2LambdaServiceRole6B878884' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer3KinesisRuleB8D02F6F` (AWS::Events::Rule) → `Properties.Tags` L453 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer3KinesisRuleB8D02F6F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventProducerLambda100D549C` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventProducerLambda100D549C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventProducerLambdaServiceRoleD019EB99` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventProducerLambdaServiceRoleD019EB99' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myRoleE60D68E8` (AWS::IAM::Role) → `Properties.Tags` L320 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'myRoleE60D68E8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `testngestbucketD7155299` (AWS::S3::Bucket) → `Properties.Tags` L310 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'testngestbucketD7155299' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ApiGW45519054` (AWS::ApiGateway::RestApi) → `Properties.Tags` L47 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGW45519054' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ApiGWCloudWatchRole51A9A431` (AWS::IAM::Role) → `Properties.Tags` L56 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGWCloudWatchRole51A9A431' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.Tags` L129 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGWDeploymentStageprodDFD8EC11' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `RestAPIRoleA3B4EFA3` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'RestAPIRoleA3B4EFA3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSQueue7674CD17` (AWS::SQS::Queue) → `Properties.Tags` L3 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSQueue7674CD17' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SQSTriggerLambda99F71FB3` (AWS::Lambda::Function) → `Properties.Tags` L328 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambda99F71FB3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSTriggerLambdaServiceRole0C427DE8` (AWS::IAM::Role) → `Properties.Tags` L259 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambdaServiceRole0C427DE8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L357 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L142 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L117 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Resource 'CDKDataSyncS3AccessRole0C49AEBFA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Resource 'CDKDataSyncS3AccessRole18E349368' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3Location0' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured -- **I9040** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.Tags` L20 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3Location1' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured -- **I9040** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.Tags` L36 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3toS3Task' of type 'AWS::DataSync::Task' supports Tags but none are configured -- **I9040** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L249 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBAEE750D2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L281 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBListener3B99FF85' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L302 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBListenerTargetGroupD5D64FBA' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'sgalbE4BDB11E' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.Tags` L167 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'sgnextcloud40AB2A88' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSE0E96D00' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `RDSSecret3683CA93` (AWS::SecretsManager::Secret) → `Properties.Tags` L51 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSSecret3683CA93' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured -- **I9040** `RDSSubnetGroup3527AC04` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSSubnetGroup3527AC04' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'sgrds6871B7A8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L14 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Resource 'sgefs8B17F90D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `consumerlambdafunction40710347` (AWS::Lambda::Function) → `Properties.Tags` L225 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'consumerlambdafunction40710347' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdafunctionServiceRole116B0746` (AWS::IAM::Role) → `Properties.Tags` L138 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'consumerlambdafunctionServiceRole116B0746' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'demotable002BE91A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `oneminuteruleE9168CE5` (AWS::Events::Rule) → `Properties.Tags` L261 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'oneminuteruleE9168CE5' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `producerlambdafunctionCE724CE7` (AWS::Lambda::Function) → `Properties.Tags` L102 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'producerlambdafunctionCE724CE7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `producerlambdafunctionServiceRole5400FE21` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'producerlambdafunctionServiceRole5400FE21' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWSBackupPlanSelectionRole2A44F724` (AWS::IAM::Role) → `Properties.Tags` L976 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSBackupPlanSelectionRole2A44F724' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` (AWS::Lambda::Function) → `Properties.Tags` L907 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50` (AWS::IAM::Role) → `Properties.Tags` L849 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ScheduleRuleDA5BD877` (AWS::Events::Rule) → `Properties.Tags` L790 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'ScheduleRuleDA5BD877' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L651 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L562 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L490 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcrStackNestedStackEcrStackNestedStackResource706AA777` (AWS::CloudFormation::Stack) → `Properties.Tags` L600 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'EcrStackNestedStackEcrStackNestedStackResource706AA777' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `EcsStackNestedStackEcsStackNestedStackResource48283A58` (AWS::CloudFormation::Stack) → `Properties.Tags` L632 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'EcsStackNestedStackEcsStackNestedStackResource48283A58' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.Tags` L16 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'BackendDataRepositoryD361813E' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` (AWS::Lambda::Function) → `Properties.Tags` L144 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491` (AWS::IAM::Role) → `Properties.Tags` L70 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'FrontendRepository7D714FA2' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Tags` L472 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendService7A4224EE' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BackendTaskDefinitionBackendContainerLogGroup5E30F6E8` (AWS::Logs::LogGroup) → `Properties.Tags` L390 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendTaskDefinitionBackendContainerLogGroup5E30F6E8' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Tags` L336 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendTaskDefinitionEC224DE6' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSCluster7D463CD4' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Tags` L28 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE' of type 'AWS::ServiceDiscovery::PrivateDnsNamespace' supports Tags but none are configured -- **I9040** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L218 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSSecurityGroupA14DBE7D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.Tags` L40 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSServiceLogGroupD961AA4E' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `ECSTaskIamRole84EB0A02` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSTaskIamRole84EB0A02' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L591 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendLB2FA80AC2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L627 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendLBListener230479D8' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Tags` L400 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendServiceBC94BA93' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L272 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendTaskDefinition6CBC2B00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FrontendTaskDefinitionFrontendContainerLogGroup994ED50C` (AWS::Logs::LogGroup) → `Properties.Tags` L326 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendTaskDefinitionFrontendContainerLogGroup994ED50C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.Tags` L648 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ListenerRule73F9AC5E' of type 'AWS::ElasticLoadBalancingV2::ListenerRule' supports Tags but none are configured -- **I9040** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'PublicLBSG963B1ACE' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L560 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskexecutionRole978012CD` (AWS::IAM::Role) → `Properties.Tags` L172 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'TaskexecutionRole978012CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `emrcluster` (AWS::EMR::Cluster) → `Properties.Tags` L316 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrcluster' of type 'AWS::EMR::Cluster' supports Tags but none are configured -- **I9040** `emrjobflowrole15D4DAE5` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrjobflowrole15D4DAE5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `emrservicerole3BE5EDAF` (AWS::IAM::Role) → `Properties.Tags` L219 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrservicerole3BE5EDAF' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CdkIoTCoreRule` (AWS::IoT::TopicRule) → `Properties.Tags` L528 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CdkIoTCoreRule' of type 'AWS::IoT::TopicRule' supports Tags but none are configured -- **I9040** `CdkThing001LambdaRoleD7EE5CD3` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CdkThing001LambdaRoleD7EE5CD3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.Tags` L69 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CertHandler220363A9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L518 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `CfnPolicy` (AWS::IoT::Policy) → `Properties.Tags` L353 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnPolicy' of type 'AWS::IoT::Policy' supports Tags but none are configured -- **I9040** `CfnRole` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IoTCertProviderframeworkonEvent8FF1476F` (AWS::Lambda::Function) → `Properties.Tags` L296 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'IoTCertProviderframeworkonEvent8FF1476F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `IoTCertProviderframeworkonEventServiceRole80DDBEA7` (AWS::IAM::Role) → `Properties.Tags` L217 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'IoTCertProviderframeworkonEventServiceRole80DDBEA7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L126 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Resource 'lambdaContainerFunction5815FD88' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdaContainerFunctionServiceRole5E36DB3C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Resource 'lambdaContainerFunctionServiceRole5E36DB3C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction45C982D3` (AWS::Lambda::Function) → `Properties.Tags` L64 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Resource 'lambdafunction45C982D3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunctionServiceRole85538ADB` (AWS::IAM::Role) → `Properties.Tags` L30 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Resource 'lambdafunctionServiceRole85538ADB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L220 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `statusLambdaCF47B86D` (AWS::Lambda::Function) → `Properties.Tags` L101 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'statusLambdaCF47B86D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `statusLambdaServiceRoleD1132168` (AWS::IAM::Role) → `Properties.Tags` L67 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'statusLambdaServiceRoleD1132168' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `submitLambda3C32AFD4` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'submitLambda3C32AFD4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `submitLambdaServiceRole576DCA8F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'submitLambdaServiceRole576DCA8F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'TableCD117FA1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `UrlShortenerApi1FE619BE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L157 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApi1FE619BE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `UrlShortenerApiCloudWatchRole28577D98` (AWS::IAM::Role) → `Properties.Tags` L166 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiCloudWatchRole28577D98' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.Tags` L239 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiDeploymentStageprod9A3CCA44' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.Tags` L492 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiDomain85D0CE65' of type 'AWS::ApiGateway::DomainName' supports Tags but none are configured -- **I9040** `UrlShortenerFunctionB5E87AC1` (AWS::Lambda::Function) → `Properties.Tags` L122 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerFunctionB5E87AC1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `UrlShortenerFunctionServiceRole2FBF9CDA` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerFunctionServiceRole2FBF9CDA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTask1D3C2E79' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `generatorPingTaskExecutionRoleA7BE7F8B` (AWS::IAM::Role) → `Properties.Tags` L73 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTaskExecutionRoleA7BE7F8B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorPingTaskTaskRoleA4886BE8` (AWS::IAM::Role) → `Properties.Tags` L11 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTaskTaskRoleA4886BE8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorcluster9804CB70` (AWS::ECS::Cluster) → `Properties.Tags` L3 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorcluster9804CB70' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L184 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorserviceSecurityGroup3D8BECF8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Tags` L137 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorserviceServiceA6AC5079' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BlockListC03D0423` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L282 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListC03D0423' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `BlockListRuleGroup55F6B55D` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L294 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListRuleGroup55F6B55D' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured -- **I9040** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L315 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L252 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L470 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'InboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured -- **I9040** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L406 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'OutboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured -- **I9040** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.Tags` L435 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'sginboundendpoint32081788' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L333 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'sgoutboundendpointEC0509A3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Bucket83908E77` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'Bucket83908E77' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L413 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L350 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.Tags` L127 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'Classifications0C921F6C' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L499 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L438 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RekFunction9837D13D` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'RekFunction9837D13D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `RekFunctionServiceRole3947AEF4` (AWS::IAM::Role) → `Properties.Tags` L153 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'RekFunctionServiceRole3947AEF4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Other34654A52` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_resource-overrides--resource-overrides.template_json` - > Resource 'Other34654A52' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L506 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'AllowedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L518 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'BlockedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.Tags` L465 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSFirewallLogGroupF0EEB7D4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Tags` L477 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSLogsConfig' of type 'AWS::Route53Resolver::ResolverQueryLoggingConfig' supports Tags but none are configured -- **I9040** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L531 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSRuleGroup' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured -- **I9040** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L557 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'FirewallRuleGroupAssociation' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured -- **I9040** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Tags` L191 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'exampleBucketAP' of type 'AWS::S3::AccessPoint' supports Tags but none are configured -- **I9040** `examplebucketC9DFA43E` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'examplebucketC9DFA43E' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `retrieveTransformedObjectLambdaD5D6532C` (AWS::Lambda::Function) → `Properties.Tags` L141 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'retrieveTransformedObjectLambdaD5D6532C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `retrieveTransformedObjectLambdaServiceRole27FF342E` (AWS::IAM::Role) → `Properties.Tags` L83 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'retrieveTransformedObjectLambdaServiceRole27FF342E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L297 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L225 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DocumentAssociation` (AWS::SSM::Association) → `Properties.Tags` L45 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'DocumentAssociation' of type 'AWS::SSM::Association' supports Tags but none are configured -- **I9040** `EC2SSMRole1C0EBD7B` (AWS::IAM::Role) → `Properties.Tags` L327 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'EC2SSMRole1C0EBD7B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Tags` L5 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'TimeWriterDocument' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L246 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L205 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L83 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachine6C968CA5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.Tags` L5 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachineLogGroup9955D1FE' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyStateMachineRoleD59FFEBC` (AWS::IAM::Role) → `Properties.Tags` L17 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachineRoleD59FFEBC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.Tags` L153 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiDeploymentStageprod5FF8FD8E' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `StepFuncApiE896FCA7` (AWS::ApiGateway::RestApi) → `Properties.Tags` L121 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiE896FCA7' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `StepFuncApiordersGETStartSyncExecutionRole90998151` (AWS::IAM::Role) → `Properties.Tags` L186 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiordersGETStartSyncExecutionRole90998151' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CheckLambda9CBBF9BA` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CheckLambda9CBBF9BA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CheckLambdaServiceRole74B86E23` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CheckLambdaServiceRole74B86E23' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CronStateMachine7E50955B` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L210 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachine7E50955B' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `CronStateMachineEventsRoleA3F136B0` (AWS::IAM::Role) → `Properties.Tags` L271 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachineEventsRoleA3F136B0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CronStateMachineRoleFE85923B` (AWS::IAM::Role) → `Properties.Tags` L119 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachineRoleFE85923B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L317 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SubmitLambda8054545E` (AWS::Lambda::Function) → `Properties.Tags` L96 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'SubmitLambda8054545E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SubmitLambdaServiceRole98C85C39` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'SubmitLambdaServiceRole98C85C39' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Flow` (AWS::MediaConnect::Flow) → `Properties.Tags` L10 in `gh-issues_issue-144_yaml` - > Resource 'Flow' of type 'AWS::MediaConnect::Flow' supports Tags but none are configured -- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L12 in `gh-issues_issue-183_yaml` - > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L23 in `gh-issues_issue-226_yaml` - > Resource 'InvertedRangeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `gh-issues_issue-226_yaml` - > Resource 'PingSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L67 in `gh-issues_issue-235_yaml` - > Resource 'AllowedValuesEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Tags` L142 in `gh-issues_issue-235_yaml` - > Resource 'AuroraAllowedValues' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Tags` L137 in `gh-issues_issue-235_yaml` - > Resource 'AuroraEngine' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L189 in `gh-issues_issue-235_yaml` - > Resource 'AutomatedBackupRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L26 in `gh-issues_issue-235_yaml` - > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Tags` L147 in `gh-issues_issue-235_yaml` - > Resource 'ClusterMember' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L165 in `gh-issues_issue-235_yaml` - > Resource 'ClusterSnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L78 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalClusterOrStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L61 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalNoValueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L225 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalSnapshotOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L108 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L218 in `gh-issues_issue-235_yaml` - > Resource 'CorrelatedClusterOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L84 in `gh-issues_issue-235_yaml` - > Resource 'CustomFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L201 in `gh-issues_issue-235_yaml` - > Resource 'CustomImplicitEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L90 in `gh-issues_issue-235_yaml` - > Resource 'CustomStringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L206 in `gh-issues_issue-235_yaml` - > Resource 'CustomTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L114 in `gh-issues_issue-235_yaml` - > Resource 'DynamicEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Tags` L132 in `gh-issues_issue-235_yaml` - > Resource 'DynamicEngineValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicProperties` (AWS::RDS::DBInstance) → `Properties.Tags` L250 in `gh-issues_issue-235_yaml` - > Resource 'DynamicProperties' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L120 in `gh-issues_issue-235_yaml` - > Resource 'DynamicReferenceEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Tags` L159 in `gh-issues_issue-235_yaml` - > Resource 'EmptySnapshotIdentifier' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Tags` L171 in `gh-issues_issue-235_yaml` - > Resource 'EncryptedSource' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L73 in `gh-issues_issue-235_yaml` - > Resource 'EngineAllowedValuesMissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L43 in `gh-issues_issue-235_yaml` - > Resource 'FalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L126 in `gh-issues_issue-235_yaml` - > Resource 'InvalidEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L37 in `gh-issues_issue-235_yaml` - > Resource 'KmsKeyWithoutEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Tags` L212 in `gh-issues_issue-235_yaml` - > Resource 'LegacySecurityGroups' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `gh-issues_issue-235_yaml` - > Resource 'MissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L153 in `gh-issues_issue-235_yaml` - > Resource 'SnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L195 in `gh-issues_issue-235_yaml` - > Resource 'SourceClusterReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L177 in `gh-issues_issue-235_yaml` - > Resource 'SourceInstanceReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L183 in `gh-issues_issue-235_yaml` - > Resource 'SourceResourceRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L49 in `gh-issues_issue-235_yaml` - > Resource 'StringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L102 in `gh-issues_issue-235_yaml` - > Resource 'StringTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L96 in `gh-issues_issue-235_yaml` - > Resource 'TrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `WholePropertiesCorrelated` (AWS::RDS::DBInstance) → `Properties.Tags` L232 in `gh-issues_issue-235_yaml` - > Resource 'WholePropertiesCorrelated' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `WholePropertiesFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L241 in `gh-issues_issue-235_yaml` - > Resource 'WholePropertiesFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-246_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `gh-issues_issue-247_json` - > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `EIP` (AWS::EC2::EIP) → `Properties.Tags` L8 in `gh-issues_issue-264_yaml` - > Resource 'EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-34_json` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Instance2` (AWS::EC2::Instance) → `Properties.Tags` L22 in `gh-issues_issue-34_json` - > Resource 'Instance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L4 in `gh-issues_issue-35_yaml` - > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `gh-issues_issue-36_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L10 in `gh-issues_issue-37_yaml` - > Resource 'MyAsg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Tags` L5 in `gh-issues_issue-38_json` - > Resource 'Memory' of type 'AWS::BedrockAgentCore::Memory' supports Tags but none are configured -- **I9040** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.Tags` L5 in `gh-issues_issue-39_json` - > Resource 'VPCB9E5F0B4' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.Tags` L11 in `gh-issues_issue-39_json` - > Resource 'VPCEcrEndpointSecurityGroup50ED8BA4' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.Tags` L15 in `gh-issues_issue-40_yaml` - > Resource 'DaxConcrete' of type 'AWS::DAX::Cluster' supports Tags but none are configured -- **I9040** `DaxRef` (AWS::DAX::Cluster) → `Properties.Tags` L27 in `gh-issues_issue-40_yaml` - > Resource 'DaxRef' of type 'AWS::DAX::Cluster' supports Tags but none are configured -- **I9040** `EksCluster` (AWS::EKS::Cluster) → `Properties.Tags` L4 in `gh-issues_issue-40_yaml` - > Resource 'EksCluster' of type 'AWS::EKS::Cluster' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-41_json` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L34 in `gh-issues_issue-42-if_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L27 in `gh-issues_issue-42-if_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L17 in `gh-issues_issue-42-if_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L29 in `gh-issues_issue-42-ref_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L22 in `gh-issues_issue-42-ref_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `gh-issues_issue-42-ref_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L22 in `gh-issues_issue-42_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L15 in `gh-issues_issue-42_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `gh-issues_issue-42_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `gh-issues_issue-44_json` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `PipelineRole` (AWS::IAM::Role) → `Properties.Tags` L49 in `gh-issues_issue-44_json` - > Resource 'PipelineRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L5 in `gh-issues_issue-45_json` - > Resource 'interfaceVpcEndpoint89C99945' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.Tags` L6 in `gh-issues_issue-46_json` - > Resource 'ClusterEB0386A7' of type 'AWS::EKS::Cluster' supports Tags but none are configured -- **I9040** `ClusterKubectlProviderHandler2E05C68A` (AWS::Lambda::Function) → `Properties.Tags` L15 in `gh-issues_issue-46_json` - > Resource 'ClusterKubectlProviderHandler2E05C68A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-47_json` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.Tags` L10 in `gh-issues_issue-49_yaml` - > Resource 'DocDbInstance' of type 'AWS::DocDB::DBInstance' supports Tags but none are configured -- **I9040** `Ec2Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-49_yaml` - > Resource 'Ec2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `EsDomain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L4 in `gh-issues_issue-49_yaml` - > Resource 'EsDomain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `MyFunctionServiceRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `gh-issues_issue-50_json` - > Resource 'MyFunctionServiceRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Tags` L5 in `gh-issues_issue-52_json` - > Resource 'Nodegroup' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured -- **I9040** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.Tags` L595 in `gh-issues_issue-53_json` - > Resource 'ClusterControlPlaneSecurityGroupD274242C' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `ClusterCreationRole360249B6` (AWS::IAM::Role) → `Properties.Tags` L616 in `gh-issues_issue-53_json` - > Resource 'ClusterCreationRole360249B6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterKubectlHandlerRole94549F93` (AWS::IAM::Role) → `Properties.Tags` L474 in `gh-issues_issue-53_json` - > Resource 'ClusterKubectlHandlerRole94549F93' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterKubectlReadyBarrier200052AF` (AWS::SSM::Parameter) → `Properties.Tags` L882 in `gh-issues_issue-53_json` - > Resource 'ClusterKubectlReadyBarrier200052AF' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Tags` L956 in `gh-issues_issue-53_json` - > Resource 'ClusterNodegroupDefaultCapacityDA0920A3' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured -- **I9040** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` (AWS::IAM::Role) → `Properties.Tags` L896 in `gh-issues_issue-53_json` - > Resource 'ClusterNodegroupDefaultCapacityNodeGroupRole55953B04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `UserRoleB7C3739B` (AWS::IAM::Role) → `Properties.Tags` L444 in `gh-issues_issue-53_json` - > Resource 'UserRoleB7C3739B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` (AWS::CloudFormation::Stack) → `Properties.Tags` L1035 in `gh-issues_issue-53_json` - > Resource 'awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` (AWS::CloudFormation::Stack) → `Properties.Tags` L1058 in `gh-issues_issue-53_json` - > Resource 'awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `gh-issues_issue-54-bare_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54-with-ownership_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L12 in `gh-issues_issue-55_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `WeakConsumer` (AWS::SNS::Topic) → `Properties.Tags` L5 in `gh-issues_issue-56_json` - > Resource 'WeakConsumer' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-57_json` - > Resource 'AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Resource` (AWS::EC2::Volume) → `Properties.Tags` L3 in `gh-issues_issue-61_json` - > Resource 'Resource' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `Canary` (AWS::Synthetics::Canary) → `Properties.Tags` L5 in `gh-issues_issue-62_json` - > Resource 'Canary' of type 'AWS::Synthetics::Canary' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L29 in `gh-issues_issue-63_json` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-65_json` - > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L5 in `gh-issues_issue-67_json` - > Resource 'PromAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.Tags` L18 in `gh-issues_issue-68_json` - > Resource 'FutureNodeFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyFunc` (AWS::Lambda::Function) → `Properties.Tags` L6 in `gh-issues_issue-68_json` - > Resource 'MyFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L16 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CompoundSub` (AWS::S3::Bucket) → `Properties.Tags` L20 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'CompoundSub' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'ConditionalLeft' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalRight` (AWS::S3::Bucket) → `Properties.Tags` L29 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'ConditionalRight' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `good_E9001_aws_cdk_metadata_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `KubectlHandlerRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `good_W1028_pseudo_param_branches_reachable_yaml` - > Resource 'KubectlHandlerRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_W3010_getazs_not_flagged_yaml` - > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_W3010_getazs_not_flagged_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L12 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `Stage1` (AWS::ApiGateway::Stage) → `Properties.Tags` L39 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Resource 'Stage1' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `good_aurora_dbinstance_yaml` - > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_cdk_bootstrap_version_rule_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_cloudfront_valid_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `good_codepipeline_artifact_counts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_complex_conditions_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L34 in `good_complex_conditions_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevBucket` (AWS::S3::Bucket) → `Properties.Tags` L45 in `good_complex_conditions_yaml` - > Resource 'DevBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L41 in `good_conditions_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L101 in `good_core_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L79 in `good_core_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `good_core_conditions_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `good_core_conditions_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L53 in `good_core_conditions_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L66 in `good_core_conditions_yaml` - > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `good_core_conditions_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `good_core_config_default_e3012_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `MyKey` (AWS::KMS::Key) → `Properties.Tags` L4 in `good_core_directives_yaml` - > Resource 'MyKey' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L60 in `good_core_resource_attributes_yaml` - > Resource 'AutoScalingGroupWithPolicies' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `BucketWithConnectors` (AWS::Serverless::Function) → `Properties.Tags` L94 in `good_core_resource_attributes_yaml` - > Resource 'BucketWithConnectors' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_core_resource_attributes_yaml` - > Resource 'BucketWithTransform' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_core_resource_attributes_yaml` - > Resource 'CommonCfnAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DependsOnList` (AWS::S3::Bucket) → `Properties.Tags` L41 in `good_core_resource_attributes_yaml` - > Resource 'DependsOnList' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.Tags` L32 in `good_core_resource_attributes_yaml` - > Resource 'DependsOnSingleString' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_custom_is-defined_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedArray` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedArray' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedEmpty` (AWS::Lambda::Function) → `Properties.Tags` L35 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedEmpty' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedGetAttr` (AWS::Lambda::Function) → `Properties.Tags` L45 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedGetAttr' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedObject` (AWS::Lambda::Function) → `Properties.Tags` L55 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedObject' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedRef` (AWS::Lambda::Function) → `Properties.Tags` L66 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedRef' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedValue` (AWS::Lambda::Function) → `Properties.Tags` L76 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedValue' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L6 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedFromParent` (AWS::Lambda::Function) → `Properties.Tags` L20 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedFromParent' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedFromProperties` (AWS::Lambda::Function) → `Properties.Tags` L29 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedFromProperties' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedRefAWSNoValue` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedRefAWSNoValue' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedWithSiblings` (AWS::Lambda::Function) → `Properties.Tags` L46 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedWithSiblings' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `good_deletion_policies_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DB` (AWS::RDS::DBInstance) → `Properties.Tags` L9 in `good_deletion_policies_yaml` - > Resource 'DB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_provisioned_yaml` - > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `GoodTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_valid_attributes_yaml` - > Resource 'GoodTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_awsvpc_valid_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L198 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedEc2SizeThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L150 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedEc2ThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L186 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedFargateSizeThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L138 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedFargateThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L174 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedOnDemandThenProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.Tags` L163 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedProvisionedThenOnDemand' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L107 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'DefaultWithThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L122 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'FargateIntCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L62 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Tags` L47 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'NonFargateTask' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.Tags` L78 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'PayPerRequestTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.Tags` L91 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ProvisionedTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ValidFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Tags` L30 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ValidFargateSplunk' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_valid_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L18 in `good_ecs_fargate_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_elb_https_empty_sslcertificateid_yaml` - > Resource 'ELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `good_functions_dynamic_reference_embedded_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L25 in `good_functions_dynamic_reference_embedded_yaml` - > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Cluster0` (AWS::ECS::Cluster) → `Properties.Tags` L13 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster0' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster1` (AWS::ECS::Cluster) → `Properties.Tags` L21 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster1' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L29 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L37 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.Tags` L45 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh0' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.Tags` L61 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh1' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L72 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.Tags` L83 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh3' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.Tags` L95 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh4' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L48 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L80 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L102 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Mesh` (AWS::AppMesh::Mesh) → `Properties.Tags` L22 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Mesh' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L35 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L61 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L13 in `good_functions_findinmap_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L17 in `good_functions_findinmap_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L25 in `good_functions_findinmap_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `S3BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `S3BucketB` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `S3BucketC` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketC' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L15 in `good_functions_get_stack_output_yaml` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic10` (AWS::SNS::Topic) → `Properties.Tags` L106 in `good_functions_get_stack_output_yaml` - > Resource 'Topic10' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L23 in `good_functions_get_stack_output_yaml` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L33 in `good_functions_get_stack_output_yaml` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L44 in `good_functions_get_stack_output_yaml` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic5` (AWS::SNS::Topic) → `Properties.Tags` L55 in `good_functions_get_stack_output_yaml` - > Resource 'Topic5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic6` (AWS::SNS::Topic) → `Properties.Tags` L65 in `good_functions_get_stack_output_yaml` - > Resource 'Topic6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic7` (AWS::SNS::Topic) → `Properties.Tags` L74 in `good_functions_get_stack_output_yaml` - > Resource 'Topic7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic8` (AWS::SNS::Topic) → `Properties.Tags` L83 in `good_functions_get_stack_output_yaml` - > Resource 'Topic8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic9` (AWS::SNS::Topic) → `Properties.Tags` L95 in `good_functions_get_stack_output_yaml` - > Resource 'Topic9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ConfigApplication` (AWS::AppConfig::Application) → `Properties.Tags` L25 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'ConfigApplication' of type 'AWS::AppConfig::Application' supports Tags but none are configured -- **I9040** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.Tags` L30 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'ConfigEnvironment' of type 'AWS::AppConfig::Environment' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L35 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_functions_relationship_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `good_functions_relationship_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_functions_select_string_index_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_functions_select_string_index_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L27 in `good_functions_select_string_index_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `TestRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_functions_sub_needed_custom_excludes_yaml` - > Resource 'TestRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IOTPolicies` (AWS::IoT::Policy) → `Properties.Tags` L120 in `good_functions_sub_needed_yaml` - > Resource 'IOTPolicies' of type 'AWS::IoT::Policy' supports Tags but none are configured -- **I9040** `Key` (AWS::ApiGateway::ApiKey) → `Properties.Tags` L84 in `good_functions_sub_needed_yaml` - > Resource 'Key' of type 'AWS::ApiGateway::ApiKey' supports Tags but none are configured -- **I9040** `TestGoodStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L139 in `good_functions_sub_needed_yaml` - > Resource 'TestGoodStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `MyStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L66 in `good_functions_sub_yaml` - > Resource 'MyStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L51 in `good_functions_sub_yaml` - > Resource 'myAlb' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L32 in `good_functions_sub_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L43 in `good_functions_sub_yaml` - > Resource 'mySubStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `myVPc2` (AWS::EC2::VPC) → `Properties.Tags` L71 in `good_functions_sub_yaml` - > Resource 'myVPc2' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `ElasticIP` (AWS::EC2::EIP) → `Properties.Tags` L119 in `good_generic_yaml` - > Resource 'ElasticIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L123 in `good_generic_yaml` - > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L144 in `good_generic_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `LambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L162 in `good_generic_yaml` - > Resource 'LambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L74 in `good_generic_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.Tags` L94 in `good_generic_yaml` - > Resource 'MyEC2Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_generic_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L90 in `good_generic_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ProvisionedProduct` (AWS::ServiceCatalog::CloudFormationProvisionedProduct) → `Properties.Tags` L8 in `good_getatt_provisioned_product_outputs_yaml` - > Resource 'ProvisionedProduct' of type 'AWS::ServiceCatalog::CloudFormationProvisionedProduct' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `good_getatt_provisioned_product_outputs_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_getazs_resolves_current_regions_yaml` - > Resource 'SubnetApEast2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_getazs_resolves_current_regions_yaml` - > Resource 'SubnetMxCentral1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `ProdBucket` (AWS::S3::Bucket) → `Properties.Tags` L22 in `good_good_conditions_valid_refs_yaml` - > Resource 'ProdBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.Tags` L16 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Resource 'RoleInlinePolicy' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Tags` L75 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Resource 'SSOPermissionSet' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured -- **I9040** `SomeBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_iam_intrinsic_resource_arns_yaml` - > Resource 'SomeBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L18 in `good_iam_valid_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TopicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L18 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicAliasName` (AWS::SNS::Topic) → `Properties.Tags` L14 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicAliasName' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicIntrinsicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L30 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicIntrinsicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicKeyId` (AWS::SNS::Topic) → `Properties.Tags` L6 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicMultiRegionKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L26 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicMultiRegionKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicMultiRegionKeyId` (AWS::SNS::Topic) → `Properties.Tags` L22 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicMultiRegionKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_snapstart_yaml` - > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_zipfile_yaml` - > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `good_mappings_used_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `good_mappings_valid_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_minimal_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `OtherResource` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_modules_minimal_yaml` - > Resource 'OtherResource' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Instance` (AWS::Neptune::DBInstance) → `Properties.Tags` L4 in `good_neptune_valid_instanceclass_yaml` - > Resource 'Instance' of type 'AWS::Neptune::DBInstance' supports Tags but none are configured -- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `good_no_value_yaml` - > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Cluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L8 in `good_no_w3010_on_unlisted_type_yaml` - > Resource 'Cluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L17 in `good_output_value_string_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L16 in `good_override_complete_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_complete_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L12 in `good_override_complete_yaml` - > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_required_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_param_constraints_valid_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_parameters_not_used_parameters_yaml` - > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyAPI` (AWS::Serverless::Api) → `Properties.Tags` L15 in `good_parameters_used_transform_removed_yaml` - > Resource 'MyAPI' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_parameters_used_transforms_yaml` - > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `mySubnet21` (AWS::EC2::Subnet) → `Properties.Tags` L56 in `good_properties_ec2_vpc_yaml` - > Resource 'mySubnet21' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet22` (AWS::EC2::Subnet) → `Properties.Tags` L64 in `good_properties_ec2_vpc_yaml` - > Resource 'mySubnet22' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L31 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc2` (AWS::EC2::VPC) → `Properties.Tags` L36 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc2' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc3` (AWS::EC2::VPC) → `Properties.Tags` L41 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc3' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc4` (AWS::EC2::VPC) → `Properties.Tags` L46 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc4' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc5` (AWS::EC2::VPC) → `Properties.Tags` L51 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc5' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `NatGW` (AWS::EC2::NatGateway) → `Properties.Tags` L29 in `good_redshift_private_yaml` - > Resource 'NatGW' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `good_redshift_private_yaml` - > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured -- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `good_redshift_private_yaml` - > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `good_redshift_private_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `good_redshift_private_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `Cluster` (AWS::Redshift::Cluster) → `Properties.Tags` L4 in `good_redshift_valid_nodetype_yaml` - > Resource 'Cluster' of type 'AWS::Redshift::Cluster' supports Tags but none are configured -- **I9040** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.Tags` L12 in `good_region_conditional_resource_type_yaml` - > Resource 'Pool' of type 'AWS::DeviceFarm::DevicePool' supports Tags but none are configured -- **I9040** `NestedStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `good_resources_cloudformation_nested_stack_dynamic_yaml` - > Resource 'NestedStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L39 in `good_resources_cloudformation_stacks_yaml` - > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackInvalidPath` (AWS::CloudFormation::Stack) → `Properties.Tags` L31 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackInvalidPath' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackIsWebUrl` (AWS::CloudFormation::Stack) → `Properties.Tags` L15 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackIsWebUrl' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L7 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackUrlIsObject` (AWS::CloudFormation::Stack) → `Properties.Tags` L23 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackUrlIsObject' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_resources_cloudfront_aliases_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `good_resources_codepipeline_yaml` - > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_deletionpolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L18 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `good_resources_dynamodb_attributes_yaml` - > Resource 'DDBTable1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.Tags` L36 in `good_resources_dynamodb_attributes_yaml` - > Resource 'DDBTable2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L50 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L125 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FifthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L108 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FourthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L25 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L33 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L42 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyOptionalClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L17 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L142 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SixthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L89 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `IAMInstanceProfile` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `good_resources_iam_instance_profile_yaml` - > Resource 'IAMInstanceProfile' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Instance` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_resources_iam_instance_profile_yaml` - > Resource 'Instance' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Ecr` (AWS::ECR::Repository) → `Properties.Tags` L6 in `good_resources_iam_resource_policy_yaml` - > Resource 'Ecr' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `good_resources_name_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L76 in `good_resources_primary_identifiers_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_resources_primary_identifiers_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L30 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L53 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TESTROLE` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_properties_allowed_pattern_yaml` - > Resource 'TESTROLE' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Subnet) → `Properties.Tags` L6 in `good_resources_properties_az_cdk_yaml` - > Resource 'Instance' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L11 in `good_resources_properties_exclusive_yaml` - > Resource 'Alarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.Tags` L88 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'IngestionPipeline' of type 'AWS::OSIS::Pipeline' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L31 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Stack` (AWS::CloudFormation::Stack) → `Properties.Tags` L13 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Resource 'Stack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `IamRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IamRoleWithConditions` (AWS::IAM::Role) → `Properties.Tags` L24 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRoleWithConditions' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IamRoleWithNestedConditions` (AWS::IAM::Role) → `Properties.Tags` L36 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRoleWithNestedConditions' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L17 in `good_resources_properties_password_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L44 in `good_resources_properties_password_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Tags` L26 in `good_resources_properties_password_yaml` - > Resource 'myNewDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L35 in `good_resources_properties_password_yaml` - > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `good_resources_properties_string_size_yaml` - > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_resources_properties_templated_code_sam_yaml` - > Resource 'Function' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `AppSync` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L4 in `good_resources_properties_templated_code_yaml` - > Resource 'AppSync' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L24 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L31 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance6' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `FunctionRole` (AWS::IAM::Role) → `Properties.Tags` L39 in `good_resources_update_policy_supported_yaml` - > Resource 'FunctionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L8 in `good_resources_update_policy_supported_yaml` - > Resource 'MyASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L28 in `good_resources_update_policy_supported_yaml` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_updatereplacepolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L5 in `good_sam_api_stagename_valid_yaml` - > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_sam_connector_valid_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L3 in `good_sam_connector_valid_yaml` - > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_deploymentpreference_with_alias_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_dlq_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_image_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_provisioned_concurrency_with_alias_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L9 in `good_sam_function_runtime_handler_via_globals_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_url_config_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_zip_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L19 in `good_sam_globals_all_valid_sections_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_globals_empty_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `AliasParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_alias_ref_yaml` - > Resource 'AliasParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_alias_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ApiIdParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'ApiIdParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `ApiSubParam` (AWS::SSM::Parameter) → `Properties.Tags` L22 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'ApiSubParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_restapi_stage_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `StageParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_restapi_stage_ref_yaml` - > Resource 'StageParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `RoleArnParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'RoleArnParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `RoleRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'RoleRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_no_primarykey_yaml` - > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured -- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_valid_yaml` - > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured -- **I9040** `MySM` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_sam_statemachine_definition_only_yaml` - > Resource 'MySM' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_schema_valid_resources_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_schema_valid_resources_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_simple_sub_prefix_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `good_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L75 in `good_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `good_sqs_fifo_valid_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `good_ssm_document_valid_yaml` - > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_ssm_parameter_name_type_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `good_stepfunctions_valid_yaml` - > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L23 in `good_string_length_unknowable_values_json` - > Resource 'JoinedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_string_length_unknowable_values_json` - > Resource 'JoinedFromAReference' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_string_length_unknowable_values_json` - > Resource 'NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.Tags` L43 in `good_string_length_unknowable_values_json` - > Resource 'OnlySomeChoicesTooLong' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L37 in `good_string_length_unknowable_values_json` - > Resource 'SubstitutedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_sub_not_needed_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `App1` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_transform_applications_location_yaml` - > Resource 'App1' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `App2` (AWS::Serverless::Application) → `Properties.Tags` L9 in `good_transform_applications_location_yaml` - > Resource 'App2' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L22 in `good_transform_auto_publish_alias_yaml` - > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SkillFunction2` (AWS::Serverless::Function) → `Properties.Tags` L31 in `good_transform_auto_publish_alias_yaml` - > Resource 'SkillFunction2' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_auto_publish_code_sha256_yaml` - > Resource 'LambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_transform_function_use_s3_uri_yaml` - > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `HelloWorldFunction` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_transform_function_using_image_yaml` - > Resource 'HelloWorldFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L96 in `good_transform_language_extension_yaml` - > Resource 'MySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `good_transform_language_extension_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.Tags` L90 in `good_transform_language_extension_yaml` - > Resource 'SecurityGroups' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TestLambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L80 in `good_transform_language_extension_yaml` - > Resource 'TestLambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `TestStateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L67 in `good_transform_language_extension_yaml` - > Resource 'TestStateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_transform_list_transform_many_yaml` - > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Lambda::Function) → `Properties.Tags` L9 in `good_transform_list_transform_not_sam_yaml` - > Resource 'SkillFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_list_transform_yaml` - > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L23 in `good_transform_serverless_api_yaml` - > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_serverless_api_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LiteralAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_transform_serverless_auto_publish_alias_yaml` - > Resource 'LiteralAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ParameterAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_serverless_auto_publish_alias_yaml` - > Resource 'ParameterAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L7 in `good_transform_serverless_function_yaml` - > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L73 in `good_transform_serverless_function_yaml` - > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L11 in `good_transform_serverless_function_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_globals_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `StateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_transform_step_function_local_definition_yaml` - > Resource 'StateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `AppName` (AWS::Serverless::Application) → `Properties.Tags` L20 in `good_transform_yaml` - > Resource 'AppName' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `MyServerlessFunctionLogicalID` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_yaml` - > Resource 'MyServerlessFunctionLogicalID' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ImportedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `good_unique_items_deploy_time_values_json` - > Resource 'ImportedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `SelectedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L44 in `good_unique_items_deploy_time_values_json` - > Resource 'SelectedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `StackOutputSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L12 in `good_unique_items_deploy_time_values_json` - > Resource 'StackOutputSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L24 in `good_vpc_subnets_yaml` - > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `good_vpc_subnets_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_vpc_subnets_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L4 in `integration_availability-zones_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `KMS` (AWS::KMS::Key) → `Properties.Tags` L3 in `integration_aws-dynamodb-table_yaml` - > Resource 'KMS' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `Table1` (AWS::DynamoDB::Table) → `Properties.Tags` L11 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Table2` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Table3` (AWS::DynamoDB::Table) → `Properties.Tags` L49 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table3' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L4 in `integration_aws-ec2-instance_yaml` - > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured -- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L9 in `integration_aws-ec2-networkinterface_yaml` - > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L7 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L13 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet3` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet4` (AWS::EC2::Subnet) → `Properties.Tags` L22 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet4' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet5` (AWS::EC2::Subnet) → `Properties.Tags` L28 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet5' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Function` (AWS::Lambda::Function) → `Properties.Tags` L4 in `integration_aws-lambda-function_yaml` - > Resource 'Function' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L10 in `integration_aws-lambda-function_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Tags` L111 in `integration_cfn-gather_yaml` - > Resource 'AuroraCluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L26 in `integration_cfn-gather_yaml` - > Resource 'AwsvpcTaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L117 in `integration_cfn-gather_yaml` - > Resource 'BadEngineInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `FargateService` (AWS::ECS::Service) → `Properties.Tags` L16 in `integration_cfn-gather_yaml` - > Resource 'FargateService' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L104 in `integration_cfn-gather_yaml` - > Resource 'FifoMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `FifoProcessor` (AWS::Lambda::Function) → `Properties.Tags` L93 in `integration_cfn-gather_yaml` - > Resource 'FifoProcessor' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L39 in `integration_cfn-gather_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `RestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L52 in `integration_cfn-gather_yaml` - > Resource 'RestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApi2` (AWS::ApiGateway::RestApi) → `Properties.Tags` L73 in `integration_cfn-gather_yaml` - > Resource 'RestApi2' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ServiceNoNetConfig` (AWS::ECS::Service) → `Properties.Tags` L34 in `integration_cfn-gather_yaml` - > Resource 'ServiceNoNetConfig' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L88 in `integration_cfn-gather_yaml` - > Resource 'SqsFifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.Tags` L81 in `integration_cfn-gather_yaml` - > Resource 'StageBadApi' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `StandardDLQ` (AWS::SQS::Queue) → `Properties.Tags` L47 in `integration_cfn-gather_yaml` - > Resource 'StandardDLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L6 in `integration_cfn-gather_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `KmsKey` (AWS::KMS::Key) → `Properties.Tags` L6 in `integration_custom-resources_yaml` - > Resource 'KmsKey' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `integration_deployment-file-template_yaml` - > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L27 in `integration_deployment-file-template_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L23 in `integration_deployment-file-template_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `Broker` (AWS::AmazonMQ::Broker) → `Properties.Tags` L20 in `integration_dynamic-references_yaml` - > Resource 'Broker' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured -- **I9040** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L6 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L13 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMappingBadDynamicReference' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L34 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMappingSpaces' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `Instance1` (AWS::EC2::Instance) → `Properties.Tags` L27 in `integration_formats_yaml` - > Resource 'Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L21 in `integration_formats_yaml` - > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `integration_formats_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L10 in `integration_formats_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `InvalidMissing` (AWS::SNS::Topic) → `Properties.Tags` L45 in `integration_get-stack-output_yaml` - > Resource 'InvalidMissing' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `InvalidType` (AWS::SNS::Topic) → `Properties.Tags` L52 in `integration_get-stack-output_yaml` - > Resource 'InvalidType' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidIf` (AWS::SNS::Topic) → `Properties.Tags` L34 in `integration_get-stack-output_yaml` - > Resource 'ValidIf' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidJoin` (AWS::SNS::Topic) → `Properties.Tags` L23 in `integration_get-stack-output_yaml` - > Resource 'ValidJoin' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidTopic` (AWS::SNS::Topic) → `Properties.Tags` L15 in `integration_get-stack-output_yaml` - > Resource 'ValidTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DocDBCluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L23 in `integration_getatt-types_yaml` - > Resource 'DocDBCluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured -- **I9040** `SsmParameter` (AWS::SSM::Parameter) → `Properties.Tags` L16 in `integration_getatt-types_yaml` - > Resource 'SsmParameter' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `TestCluster` (AWS::ECS::Cluster) → `Properties.Tags` L25 in `integration_getatt-types_yaml` - > Resource 'TestCluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `TestFargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `integration_getatt-types_yaml` - > Resource 'TestFargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TestFargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L42 in `integration_getatt-types_yaml` - > Resource 'TestFargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TestLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L50 in `integration_getatt-types_yaml` - > Resource 'TestLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Tags` L56 in `integration_getatt-types_yaml` - > Resource 'TestTaskDefinitionWithGetAtt' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CloudFront2` (AWS::CloudFront::Distribution) → `Properties.Tags` L42 in `integration_ref-no-value_yaml` - > Resource 'CloudFront2' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `IamRole3` (AWS::IAM::Role) → `Properties.Tags` L31 in `integration_ref-no-value_yaml` - > Resource 'IamRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L7 in `integration_ref-types_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L11 in `integration_ref-types_yaml` - > Resource 'FargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `integration_ref-types_yaml` - > Resource 'FargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L57 in `integration_ref-types_yaml` - > Resource 'LoadBalancer' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L65 in `integration_ref-types_yaml` - > Resource 'LogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L48 in `integration_ref-types_yaml` - > Resource 'SecurityGroup1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L53 in `integration_ref-types_yaml` - > Resource 'SecurityGroup2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L38 in `integration_ref-types_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L43 in `integration_ref-types_yaml` - > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Tags` L92 in `integration_ref-types_yaml` - > Resource 'TaskDefinitionWithRefToParameter' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Tags` L71 in `integration_ref-types_yaml` - > Resource 'TaskDefinitionWithRefToResource' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L34 in `integration_ref-types_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L93 in `integration_resources-cloudformation-init_yaml` - > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `DmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L296 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `DmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L399 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L331 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L171 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `VmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L274 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L206 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L491 in `lsp_comprehensive_json` - > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L846 in `lsp_comprehensive_json` - > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L716 in `lsp_comprehensive_json` - > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L802 in `lsp_comprehensive_json` - > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L204 in `lsp_comprehensive_yaml` - > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L369 in `lsp_comprehensive_yaml` - > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L293 in `lsp_comprehensive_yaml` - > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L343 in `lsp_comprehensive_yaml` - > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `lsp_condition-usage_json` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L86 in `lsp_condition-usage_json` - > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_condition-usage_json` - > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L94 in `lsp_condition-usage_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L142 in `lsp_condition-usage_yaml` - > Resource 'DevSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L88 in `lsp_condition-usage_yaml` - > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.Tags` L170 in `lsp_condition-usage_yaml` - > Resource 'LogicalConditionResource' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L55 in `lsp_condition-usage_yaml` - > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L136 in `lsp_condition-usage_yaml` - > Resource 'ProductionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L42 in `lsp_constants_json` - > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L25 in `lsp_constants_yaml` - > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L32 in `lsp_parameter_usage_json` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L40 in `lsp_parameter_usage_json` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L48 in `lsp_parameter_usage_json` - > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L56 in `lsp_parameter_usage_json` - > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L64 in `lsp_parameter_usage_json` - > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L28 in `lsp_parameter_usage_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L34 in `lsp_parameter_usage_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L41 in `lsp_parameter_usage_yaml` - > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L47 in `lsp_parameter_usage_yaml` - > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L52 in `lsp_parameter_usage_yaml` - > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket6` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_parameter_usage_yaml` - > Resource 'Bucket6' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket7` (AWS::S3::Bucket) → `Properties.Tags` L63 in `lsp_parameter_usage_yaml` - > Resource 'Bucket7' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L4 in `lsp_simple_json` - > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `lsp_simple_yaml` - > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L8 in `lsp_test-template_yaml` - > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Serverless::Function) → `Properties.Tags` L4 in `lsp_test-template_yaml` - > Resource 'MyFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L162 in `public_lambda-poller_json` - > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L116 in `public_lambda-poller_json` - > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `public_lambda-poller_json` - > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L185 in `public_lambda-poller_yaml` - > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L162 in `public_lambda-poller_yaml` - > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L17 in `public_lambda-poller_yaml` - > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L1689 in `public_watchmaker_json` - > Resource 'WatchmakerInstanceLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2045 in `quickstart_cis_benchmark_yaml` - > Resource 'BillingChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L2201 in `quickstart_cis_benchmark_yaml` - > Resource 'BillingChangesCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1984 in `quickstart_cis_benchmark_yaml` - > Resource 'CloudTrailCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1774 in `quickstart_cis_benchmark_yaml` - > Resource 'ConsoleLoginFailureCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1737 in `quickstart_cis_benchmark_yaml` - > Resource 'ConsoleSigninWithoutMFACloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Tags` L1937 in `quickstart_cis_benchmark_yaml` - > Resource 'DetectConfigChanges' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Tags` L1906 in `quickstart_cis_benchmark_yaml` - > Resource 'DetectS3BucketPolicyChanges' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2069 in `quickstart_cis_benchmark_yaml` - > Resource 'Ec2TerminationCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.Tags` L1002 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailBucketRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.Tags` L1119 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailLogIntegrityRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.Tags` L889 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.Tags` L1397 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateConfigInAllRegionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.Tags` L1301 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateKeyRotationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.Tags` L702 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluatePolicyPermissionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.Tags` L230 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateRootAccountRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.Tags` L798 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateUserPolicyAssociationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.Tags` L1216 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForInstanceRoleUseRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.Tags` L609 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForRoleForMfaOnUsersRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.Tags` L500 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcDefaultSecurityGroupsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.Tags` L424 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcFlowLogRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.Tags` L1502 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcPeeringRouteTablesRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.Tags` L2254 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionToDisableUnusedCredentials' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.Tags` L1859 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionToFormatCloudWatchEvent' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.Tags` L123 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctiontForEvaluateCisBenchmarkingPreconditions' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.Tags` L1602 in `quickstart_cis_benchmark_yaml` - > Resource 'GetCloudTrailCloudWatchLog' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1699 in `quickstart_cis_benchmark_yaml` - > Resource 'IAMRootActivityCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2007 in `quickstart_cis_benchmark_yaml` - > Resource 'IamPolicyChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1811 in `quickstart_cis_benchmark_yaml` - > Resource 'KMSCustomerKeyDeletionCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1962 in `quickstart_cis_benchmark_yaml` - > Resource 'KmsKeyUseCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `MasterConfigRole` (AWS::IAM::Role) → `Properties.Tags` L78 in `quickstart_cis_benchmark_yaml` - > Resource 'MasterConfigRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2120 in `quickstart_cis_benchmark_yaml` - > Resource 'NetworkAclChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2150 in `quickstart_cis_benchmark_yaml` - > Resource 'NetworkChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `RoleForCloudWatchEvents` (AWS::IAM::Role) → `Properties.Tags` L1831 in `quickstart_cis_benchmark_yaml` - > Resource 'RoleForCloudWatchEvents' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RoleForDisableUnusedCredentialsFunction` (AWS::IAM::Role) → `Properties.Tags` L2221 in `quickstart_cis_benchmark_yaml` - > Resource 'RoleForDisableUnusedCredentialsFunction' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Tags` L2348 in `quickstart_cis_benchmark_yaml` - > Resource 'ScheduledRuleForDisableUnusedCredentials' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2092 in `quickstart_cis_benchmark_yaml` - > Resource 'SecurityGroupChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.Tags` L1588 in `quickstart_cis_benchmark_yaml` - > Resource 'SnsTopicForCloudWatchEvents' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1661 in `quickstart_cis_benchmark_yaml` - > Resource 'UnauthorizedAttemptCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L240 in `quickstart_config-rules_json` - > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L99 in `quickstart_config-rules_json` - > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L119 in `quickstart_iam_json` - > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L191 in `quickstart_iam_json` - > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L304 in `quickstart_iam_json` - > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `quickstart_iam_json` - > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rEipNat` (AWS::EC2::EIP) → `Properties.Tags` L71 in `quickstart_nat-instance_json` - > Resource 'rEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rCWAlarmHighCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L645 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmHighCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmHighCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L663 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmHighCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmLowCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L681 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmLowCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmLowCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L699 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmLowCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rDBSubnetGroup` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L716 in `quickstart_nist_application_yaml` - > Resource 'rDBSubnetGroup' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Tags` L960 in `quickstart_nist_application_yaml` - > Resource 'rPostProcInstanceRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Tags` L1006 in `quickstart_nist_application_yaml` - > Resource 'rRDSInstanceMySQL' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `rS3ELBAccessLogs` (AWS::S3::Bucket) → `Properties.Tags` L1062 in `quickstart_nist_application_yaml` - > Resource 'rS3ELBAccessLogs' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1139 in `quickstart_nist_application_yaml` - > Resource 'rSecurityGroupWeb' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `rWebContentBucket` (AWS::S3::Bucket) → `Properties.Tags` L1179 in `quickstart_nist_application_yaml` - > Resource 'rWebContentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L99 in `quickstart_nist_config_rules_yaml` - > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L282 in `quickstart_nist_config_rules_yaml` - > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L280 in `quickstart_nist_high_main_yaml` - > Resource 'ApplicationTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ConfigRulesTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L393 in `quickstart_nist_high_main_yaml` - > Resource 'ConfigRulesTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `IamTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L412 in `quickstart_nist_high_main_yaml` - > Resource 'IamTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `LoggingTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L425 in `quickstart_nist_high_main_yaml` - > Resource 'LoggingTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L446 in `quickstart_nist_high_main_yaml` - > Resource 'ManagementVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L527 in `quickstart_nist_high_main_yaml` - > Resource 'ProductionVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L64 in `quickstart_nist_iam_yaml` - > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L144 in `quickstart_nist_iam_yaml` - > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L243 in `quickstart_nist_iam_yaml` - > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L319 in `quickstart_nist_iam_yaml` - > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rArchiveLogsBucket` (AWS::S3::Bucket) → `Properties.Tags` L43 in `quickstart_nist_logging_yaml` - > Resource 'rArchiveLogsBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailBucket` (AWS::S3::Bucket) → `Properties.Tags` L121 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L144 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailChangeAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCloudTrailLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L159 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `rCloudTrailLoggingLocal` (AWS::CloudTrail::Trail) → `Properties.Tags` L164 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailLoggingLocal' of type 'AWS::CloudTrail::Trail' supports Tags but none are configured -- **I9040** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Tags` L187 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Tags` L325 in `quickstart_nist_logging_yaml` - > Resource 'rCloudWatchLogsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L392 in `quickstart_nist_logging_yaml` - > Resource 'rIAMCreateAccessKeyAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L408 in `quickstart_nist_logging_yaml` - > Resource 'rIAMPolicyChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L443 in `quickstart_nist_logging_yaml` - > Resource 'rNetworkAclChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L472 in `quickstart_nist_logging_yaml` - > Resource 'rRootActivityAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rSecurityAlarmTopic` (AWS::SNS::Topic) → `Properties.Tags` L486 in `quickstart_nist_logging_yaml` - > Resource 'rSecurityAlarmTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L494 in `quickstart_nist_logging_yaml` - > Resource 'rSecurityGroupChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L523 in `quickstart_nist_logging_yaml` - > Resource 'rUnauthorizedAttemptAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L336 in `quickstart_nist_vpc_management_yaml` - > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L395 in `quickstart_nist_vpc_management_yaml` - > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L401 in `quickstart_nist_vpc_management_yaml` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L548 in `quickstart_nist_vpc_management_yaml` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L558 in `quickstart_nist_vpc_management_yaml` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L304 in `quickstart_nist_vpc_production_yaml` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.Tags` L367 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNACLPrivate' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured -- **I9040** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.Tags` L372 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNACLPublic' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L518 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L528 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `OpenShiftStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L185 in `quickstart_openshift_master_yaml` - > Resource 'OpenShiftStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `VPCStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L243 in `quickstart_openshift_master_yaml` - > Resource 'VPCStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L747 in `quickstart_openshift_yaml` - > Resource 'ContainerAccessELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `KeyGen` (AWS::Lambda::Function) → `Properties.Tags` L799 in `quickstart_openshift_yaml` - > Resource 'KeyGen' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L814 in `quickstart_openshift_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1055 in `quickstart_openshift_yaml` - > Resource 'OpenShiftInternalSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1282 in `quickstart_openshift_yaml` - > Resource 'OpenShiftMasterELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1317 in `quickstart_openshift_yaml` - > Resource 'OpenShiftMasterInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1370 in `quickstart_openshift_yaml` - > Resource 'OpenShiftNodeInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1395 in `quickstart_openshift_yaml` - > Resource 'OpenShiftNodeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1637 in `quickstart_openshift_yaml` - > Resource 'OpenShiftSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SetupRole` (AWS::IAM::Role) → `Properties.Tags` L1657 in `quickstart_openshift_yaml` - > Resource 'SetupRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `quickstart_test_yaml` - > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L920 in `quickstart_vpc-management_json` - > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L723 in `quickstart_vpc-management_json` - > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L767 in `quickstart_vpc-management_json` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L775 in `quickstart_vpc-management_json` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L380 in `quickstart_vpc-management_json` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.Tags` L483 in `quickstart_vpc_json` - > Resource 'DHCPOptions' of type 'AWS::EC2::DHCPOptions' supports Tags but none are configured -- **I9040** `NAT1EIP` (AWS::EC2::EIP) → `Properties.Tags` L1749 in `quickstart_vpc_json` - > Resource 'NAT1EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT2EIP` (AWS::EC2::EIP) → `Properties.Tags` L1768 in `quickstart_vpc_json` - > Resource 'NAT2EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT3EIP` (AWS::EC2::EIP) → `Properties.Tags` L1787 in `quickstart_vpc_json` - > Resource 'NAT3EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT4EIP` (AWS::EC2::EIP) → `Properties.Tags` L1806 in `quickstart_vpc_json` - > Resource 'NAT4EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.Tags` L1825 in `quickstart_vpc_json` - > Resource 'NATGateway1' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.Tags` L1841 in `quickstart_vpc_json` - > Resource 'NATGateway2' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.Tags` L1857 in `quickstart_vpc_json` - > Resource 'NATGateway3' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.Tags` L1873 in `quickstart_vpc_json` - > Resource 'NATGateway4' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L2096 in `quickstart_vpc_json` - > Resource 'NATInstanceSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L2116 in `quickstart_vpc_json` - > Resource 'S3VPCEndpoint' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured +- **W2509** → `Parameters.DBPassword` L6 in `integration_resources-cloudformation-init_yaml` + > Parameter 'DBPassword' appears to be a password but does not have NoEcho set to true + +## Intentional Divergence - 216 correct findings across 7 rules + +These rules have cfn-lint equivalents, but authoritative CloudFormation +or IAM behavior proves the unmatched cases are correct. They remain +distinct from both false positives and engine-extra checks. -### W9003 - 168 findings +### W9003 - 191 findings - **W9003** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L9 in `bad_aurora_with_allocated_storage_yaml` > 100 is not of type 'string' - automatically coerced (number to string) @@ -20678,6 +1415,10 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > 1 is not of type 'string' - automatically coerced (number to string) - **W9003** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.2.DeviceIndex` L41 in `integration_formats_yaml` > 2 is not of type 'string' - automatically coerced (number to string) +- **W9003** `Database` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L650 in `lsp_comprehensive_json` + > 100 (from Fn::If on condition 'IsProduction') is not of type 'string' - automatically coerced (number to string) +- **W9003** `Database` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L273 in `lsp_comprehensive_yaml` + > 100 (from Fn::If on condition 'IsProduction') is not of type 'string' - automatically coerced (number to string) - **W9003** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupEgress.0.IpProtocol` L196 in `lsp_comprehensive_yaml` > -1 is not of type 'string' - automatically coerced (number to string) - **W9003** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.MetricTransformations.0.MetricValue` L2197 in `quickstart_cis_benchmark_yaml` @@ -20814,6 +1555,48 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > '20' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.TimeoutInMinutes` L577 in `quickstart_nist_high_main_yaml` > '20' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.0.AssociatePublicIpAddress` L365 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.0.DeleteOnTermination` L366 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `KeyGen` (AWS::Lambda::Function) → `Properties.Timeout` L811 in `quickstart_openshift_yaml` + > '5' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L853 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L905 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L1077 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L1130 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L1362 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.FromPort` L1403 in `quickstart_openshift_yaml` + > '8080' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.ToPort` L1405 in `quickstart_openshift_yaml` + > '8080' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.FromPort` L1408 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.ToPort` L1410 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L1459 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.1.Ebs.VolumeSize` L1463 in `quickstart_openshift_yaml` + > '110' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.FromPort` L1645 in `quickstart_openshift_yaml` + > '8443' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.ToPort` L1647 in `quickstart_openshift_yaml` + > '8444' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.FromPort` L1650 in `quickstart_openshift_yaml` + > '22' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.ToPort` L1652 in `quickstart_openshift_yaml` + > '22' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.TimeoutInMinutes` L386 in `quickstart_vpc-management_json` > '20' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupEgress.0.FromPort` L818 in `quickstart_vpc-management_json` @@ -20925,6 +1708,15875 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9003** `VPC` (AWS::EC2::VPC) → `Properties.EnableDnsSupport` L515 in `quickstart_vpc_json` > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +### I3011 - 12 findings - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy + +- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) + +### F3003 - 6 findings - Required Resource properties are missing + +- **F3003** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties` L69 in `bad_cross_resource_task10_yaml` + > 'TransitEncryptionEnabled' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'AllocatedStorage' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'Iops' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'StorageType' is a required property (from extension) +- **F3003** `Function3` (AWS::Lambda::Function) → `Properties` L25 in `bad_resources_lambda_required_properties_yaml` + > 'Runtime' is a required property (from extension) +- **F3003** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties` L37 in `gh-issues_issue-235_yaml` + > 'StorageEncrypted' is a required property (from extension) + +### E1028 - 3 findings + +- **E1028** → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression +- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.0` L236 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression +- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.2.Fn::If.0` L241 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression + +### F3002 - 2 findings - Resource properties are invalid + +- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadKey` L60 in `bad_conditions_yaml` + > Additional properties are not allowed ('BadKey' was unexpected) +- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadValue` L60 in `bad_conditions_yaml` + > Additional properties are not allowed ('BadValue' was unexpected) + +### E3510 - 1 findings - Validate identity based IAM polices + +- **E3510** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyDocument.Id` L47 in `bad_resources_iam_identity_policy_e3510_yaml` + > Additional properties are not allowed ('Id' was unexpected) + +### W1019 - 1 findings + +- **W1019** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` + > Parameter 'UnusedKey' not used in Fn::Sub template string + +## Reference Suppressed - 4 findings excluded from parity scoring + +These engine diagnostics correspond to checks explicitly disabled by +template-local cfn-lint configuration. They are shown for transparency +but are neither false positives nor engine-extra findings. + +### F3002 - 2 findings + +- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_directives_yaml` + > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) +- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_mandatory_checks_yaml` + > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) + +### E3001 - 1 findings + +- **E3001** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `BadProperty` L19 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastPass' has invalid property 'BadProperty'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, + +### W3030 - 1 findings + +- **W3030** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.VersioningConfiguration.Status` L30 in `bad_core_directives_yaml` + > 'Enabled1' is not one of ['Enabled', 'Suspended'] + +## Reference Out of Scope - 20 findings excluded from recall + +These reference diagnostics belong to explicitly documented checks that +are not comparable to offline template validation. They remain visible +here and are never silently discarded or counted as false negatives. + +### E0002 - 8 findings + +> Scope rationale: cfn-lint rule-execution failure rather than a template contract. + +- **E0002** L1 in `bad_core_E3001_resource_shape_yaml` + > Unknown exception while processing rule E1029: "'str_node' object has no attribute 'get'" +- **E0002** L1 in `bad_core_conditions_list_yaml` + > Unknown exception while processing rule W8001: "'list_node' object has no attribute 'items'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule E3007: "argument of type 'NoneType' is not iterable" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W2001: "'NoneType' object has no attribute 'keys'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W2501: "'NoneType' object has no attribute 'keys'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W7001: "'list_node' object has no attribute 'items'" +- **E0002** L1 in `bad_functions_foreach_no_transform_yaml` + > Unknown exception while processing rule E1029: "'list_node' object has no attribute 'get'" +- **E0002** L1 in `gh-issues_issue-235_yaml` + > Unknown exception while processing rule I3100: "'str_node' object has no attribute 'get'" + +### E3043 - 8 findings + +> Scope rationale: requires loading a referenced nested template from the local filesystem. + +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "One" is not specified when condition "IsUsWest2" is True and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified when condition "IsUsWest2" is False and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified when condition "IsUsWest2" is False and when condition "IsUsEast1" is True +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsWest2" is False and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsWest2" is True and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Zero" doesn't exist in nested stack template when condition "IsUsWest2" is False and when condition "IsUsEast1" is True +- **E3043** `StackNormal` → `Properties.Parameters` L10 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified at Resources/StackNormal/Properties/Parameters +- **E3043** `StackNormal` → `Properties.Parameters.Three` L12 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template at Resources/StackNormal/Properties/Parameters/Three + +### W4005 - 2 findings + +> Scope rationale: cfn-lint-specific metadata configuration. + +- **W4005** → `Metadata.cfn-lint.config.ignore_checks` L6 in `bad_core_config_parameters_yaml` + > 'E0101' is not of type 'array' +- **W4005** → `Metadata.cfn-lint.config.bad_checks` L12 in `integration_metdata_yaml` + > Additional properties are not allowed ('bad_checks' was unexpected) + +### W4001 - 1 findings + +> Scope rationale: CloudFormation console-interface metadata is outside the validator scope. + +- **W4001** → `Metadata.AWS::CloudFormation::Interface.ParameterGroups.0.Parameters.0` L9 in `integration_metdata_yaml` + > 'Vpc' is not one of ['VpcId'] + +### W6001 - 1 findings + +> Scope rationale: cross-stack import advisory is outside offline template correctness. + +- **W6001** → `Outputs.ImportedValue.Value.Fn::ImportValue` L39 in `good_output_value_string_yaml` + > The output value {'Fn::ImportValue': 'SomeExportedName'} is an import from another output + +## Reference Incorrect - 8 cfn-lint findings excluded from FN and recall across 2 rules + +These are cfn-lint findings demonstrably wrong per CloudFormation's actual +behavior. They are excluded from false negatives and recall calculation. + +### E3048 - 5 incorrect findings - Validate ECS Fargate tasks have required properties and values + +- **E3048** `ThirtyTwoVcpuUnsupportedSixtyFourGb` → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' +- **E3048** `ThirtyTwoVcpuUnsupportedTwoFortyGb` → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > 32768 is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] +- **E3048** `ThirtyTwoVcpuOneTwentyGb` → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` + > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] +- **E3048** `ThirtyTwoVcpuSixtyGb` → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` + > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' +- **E3048** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` + > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] + +### E3047 - 3 incorrect findings - Validate ECS Fargate tasks have the right combination of CPU and memory + +- **E3047** `ThirtyTwoVcpuOneTwentyGb` → `Properties` L71 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32768' is not compatible with memory '122880' +- **E3047** `ThirtyTwoVcpuSixtyGb` → `Properties` L55 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32 vCPU' is not compatible with memory '60 GB' +- **E3047** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties` L87 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32768' is not compatible with memory '244 GB' + +## Severity Mismatches - 140 matched identity pairs + +The same canonical diagnostic identity was paired, but severity differs +between the reference and the engine. The pair remains a TP. + +- **E1001** `` in `bad_generic_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_not_cloudformation_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_date_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_null_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_yaml`: reference Error vs engine Fatal +- **E1001** `` in `good_custom_is-defined_yaml`: reference Error vs engine Fatal +- **E1001** `` in `lsp_constants_json`: reference Error vs engine Fatal +- **E1001** `` in `lsp_constants_yaml`: reference Error vs engine Fatal +- **E1011** `Bucket` in `bad_findinmap_bad_yaml`: reference Error vs engine Fatal +- **E3001** `Fn::ForEach::Buckets` in `bad_functions_foreach_no_transform_yaml`: reference Error vs engine Fatal +- **E3001** `my.Instance` in `bad_resources_name_yaml`: reference Error vs engine Fatal +- **E3001** `my_Instance` in `bad_resources_name_yaml`: reference Error vs engine Fatal +- **E7001** `` in `bad_invalid_mapping_structure_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction2` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction3` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `EC2Instance` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3012** `myTable` in `bad_core_config_configure_e3012_yaml`: reference Fatal vs engine Warning +- **F3012** `rAMIComplianceFunction` in `quickstart_nist_config_rules_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailValidationFunction` in `quickstart_nist_config_rules_yaml`: reference Fatal vs engine Warning +- **F3012** `rArchiveLogsBucket` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rArchiveLogsBucket` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailLogGroup` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNatInstanceTemplate` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupPeered` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupPeered` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromMgmt` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromMgmt` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCManagement` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCManagement` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNatInstanceTemplate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupMgmtBastion` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupMgmtBastion` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCProduction` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCProduction` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3030** `ComputeEnvironment` in `bad_W3030_enum_case_insensitive_mismatch_yaml`: reference Fatal vs engine Warning +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastFail` in `bad_core_directives_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastFail` in `bad_core_mandatory_checks_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastPass` in `bad_core_mandatory_checks_yaml`: reference Fatal vs engine Warning +- **F3030** `MyEC2Instance` in `bad_properties_ebs_yaml`: reference Fatal vs engine Warning +- **F3030** `Bucket` in `bad_schema_enum_violation_yaml`: reference Fatal vs engine Warning +- **F3030** `Bucket` in `bad_schema_type_mismatch_yaml`: reference Fatal vs engine Warning +- **F3030** `ImagePipeline7DDDE57F` in `gh-issues_issue-186-imagebuilder_json`: reference Fatal vs engine Warning +- **F3030** `MyFunction` in `gh-issues_issue-47_json`: reference Fatal vs engine Warning +- **F3030** `FutureNodeFunc` in `gh-issues_issue-68_json`: reference Fatal vs engine Warning +- **F3030** `MyFunc` in `gh-issues_issue-68_json`: reference Fatal vs engine Warning +- **F3030** `Table2` in `integration_aws-dynamodb-table_yaml`: reference Fatal vs engine Warning +- **W3049** `TargetGroup` in `bad_ecs_dynamic_port_no_traffic_yaml`: reference Error vs engine Warning +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: reference Error vs engine Warning +- **W3049** `TargetGroup` in `gh-issues_issue-42_yaml`: reference Error vs engine Info + +## Engine Extra - 8089 correct findings across 30 rules + +These are correct diagnostics the engine reports that cfn-lint does not cover. + +### I9001 - 5465 findings + +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `bad_E1050_dynamic_ref_malformed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L11 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `A` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `B` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `C` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `D` (AWS::S3::Bucket) → `Properties.BucketName` L21 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `JoinBucket` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralA` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralB` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `RefBucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L19 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L20 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L24 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `bad_E3023_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `bad_E3023_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `bad_E3023_conditional_record_items_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerLiteral` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L21 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerParam` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L40 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L29 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L28 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L27 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L48 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L47 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L46 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerB` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L20 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L28 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.ResourceId` L27 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.RestApiId` L26 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `GoodCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L34 in `bad_F3006_invalid_aws_namespaces_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `bad_F3018_conditional_required_novalue_yaml` + > Property 'PermissionModel' is create-only; updating it will cause resource replacement +- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `bad_F3018_conditional_required_novalue_yaml` + > Property 'StackSetName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `VpcControl` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `bad_I9001_conditional_create_only_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.CidrBlock` L8 in `bad_I9001_conditional_create_only_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `bad_I9001_conditional_create_only_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_W1028_allowedvalues_excludes_literal_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L8 in `bad_W1053_dynref_spaces_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_W1054_raw_pseudo_param_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L13 in `bad_W3010_full_coverage_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L45 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.AvailabilityZone` L17 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L18 in `bad_W3010_full_coverage_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L22 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `bad_W3010_full_coverage_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `bad_W3010_full_coverage_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.AvailabilityZone` L63 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.Engine` L65 in `bad_W3010_full_coverage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L36 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L35 in `bad_W3010_full_coverage_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L34 in `bad_W3010_full_coverage_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L54 in `bad_W3010_full_coverage_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L55 in `bad_W3010_full_coverage_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L56 in `bad_W3010_full_coverage_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L15 in `bad_W3030_enum_case_insensitive_mismatch_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `bad_W3030_enum_case_insensitive_mismatch_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L10 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `bad_aurora_with_allocated_storage_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `bad_aurora_with_allocated_storage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L56 in `bad_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.Device` L75 in `bad_conditions_yaml` + > Property 'Device' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.InstanceId` L73 in `bad_conditions_yaml` + > Property 'InstanceId' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.VolumeId` L74 in `bad_conditions_yaml` + > Property 'VolumeId' is create-only; updating it will cause resource replacement +- **I9001** `BadConditionType` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ValidResource` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L92 in `bad_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L87 in `bad_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `bad_core_conditions_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L37 in `bad_core_conditions_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L65 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L66 in `bad_core_conditions_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `bad_core_conditions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `bad_core_conditions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L21 in `bad_core_config_configure_e3012_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L17 in `bad_core_config_configure_e3012_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L10 in `bad_cross_resource_task10_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L42 in `bad_cross_resource_task10_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BadFargateService` (AWS::ECS::Service) → `Properties.LaunchType` L76 in `bad_cross_resource_task10_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L55 in `bad_cross_resource_task10_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.PackageType` L56 in `bad_cross_resource_task10_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L20 in `bad_cross_resource_task10_yaml` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L14 in `bad_cross_resource_task10_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L15 in `bad_cross_resource_task10_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L35 in `bad_cross_resource_task10_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L36 in `bad_cross_resource_task10_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L37 in `bad_cross_resource_task10_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `bad_cross_resource_task10_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `bad_cross_resource_task10_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `bad_cross_resource_task10_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_cross_resource_task10_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_cross_resource_task10_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MySNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L26 in `bad_duplicate_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_duplicate_primary_id_multi_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `bad_duplicate_primary_id_multi_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_duplicate_primary_id_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_duplicate_primary_id_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_attribute_mismatch_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_attribute_mismatch_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_prod_no_kms_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.TableName` L7 in `bad_dynamodb_prod_no_kms_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L15 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L16 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L17 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `bad_ecs_fargate_mismatch_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `bad_ecs_fargate_mismatch_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L8 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L9 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `bad_ecs_fargate_mismatch_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `bad_ecs_role_no_boundary_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L27 in `bad_ecs_role_no_boundary_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L26 in `bad_ecs_role_no_boundary_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L6 in `bad_elb_http_443_yaml` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.Cluster` L9 in `bad_fargate_daemon_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.LaunchType` L6 in `bad_fargate_daemon_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L7 in `bad_fargate_daemon_yaml` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `bad_fargate_daemon_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L16 in `bad_fargate_daemon_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `bad_fargate_daemon_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L17 in `bad_fargate_daemon_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L18 in `bad_fargate_daemon_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L14 in `bad_fargate_daemon_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_findinmap_bad_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_formatters_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L9 in `bad_formatters_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_base64_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L11 in `bad_functions_base64_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L11 in `bad_functions_findinmap_enhanced_invalid_key_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L16 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L22 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L34 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L31 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `bad_functions_import_value_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_import_value_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_join_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L11 in `bad_functions_join_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `bad_functions_join_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_functions_join_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L54 in `bad_functions_ref_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L51 in `bad_functions_ref_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L52 in `bad_functions_ref_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L53 in `bad_functions_ref_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L62 in `bad_functions_ref_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L66 in `bad_functions_ref_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L35 in `bad_functions_ref_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_functions_ref_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L33 in `bad_functions_ref_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L34 in `bad_functions_ref_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L43 in `bad_functions_ref_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L46 in `bad_functions_ref_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `bad_functions_ref_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L12 in `bad_functions_ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_functions_ref_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `bad_functions_ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L30 in `bad_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `bad_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L10 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L18 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L17 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L28 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L35 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AdditionalInfo` L12 in `bad_functions_sub_needed_yaml` + > Property 'AdditionalInfo' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `bad_functions_sub_needed_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `mySnsTopic` (AWS::SNS::Topic) → `Properties.TopicName` L33 in `bad_functions_sub_needed_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L114 in `bad_generic_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L122 in `bad_generic_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L48 in `bad_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L43 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L44 in `bad_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L45 in `bad_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L63 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L222 in `bad_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.ImageId` L219 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.InstanceType` L220 in `bad_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.KeyName` L221 in `bad_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L223 in `bad_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L212 in `bad_generic_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L213 in `bad_generic_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L105 in `bad_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L81 in `bad_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L139 in `bad_generic_yaml` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L196 in `bad_generic_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L204 in `bad_generic_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `myAcl` (AWS::WAFRegional::WebACL) → `Properties.Name` L143 in `bad_generic_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L15 in `bad_hard_coded_arn_properties_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L36 in `bad_hard_coded_arn_properties_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_hardcoded_partition_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L10 in `bad_hardcoded_partition_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `Role` (AWS::IAM::Role) → `Properties.Path` L6 in `bad_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `R` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_if_wrong_arity_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.EngineName` L6 in `bad_issues_yaml` + > Property 'EngineName' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.MajorEngineVersion` L7 in `bad_issues_yaml` + > Property 'MajorEngineVersion' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.OptionGroupDescription` L8 in `bad_issues_yaml` + > Property 'OptionGroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Fn` (AWS::Lambda::Function) → `Properties.PackageType` L11 in `bad_lambda_image_handler_intrinsic_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_no_snapstart_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `bad_lambda_permission_no_source_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `bad_lambda_permission_no_source_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `bad_lambda_permission_no_source_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `bad_lambda_permission_no_source_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_snapstart_bad_runtime_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L21 in `bad_lambda_sqs_timeout_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zip_no_handler_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zipfile_java_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.ImageId` L89 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.InstanceType` L90 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.UserData` L91 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.ImageId` L980 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.InstanceType` L981 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.UserData` L982 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.ImageId` L9890 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.InstanceType` L9891 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.UserData` L9892 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.ImageId` L9989 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.InstanceType` L9990 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.UserData` L9991 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.ImageId` L10088 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.InstanceType` L10089 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.UserData` L10090 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.ImageId` L10187 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.InstanceType` L10188 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.UserData` L10189 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.ImageId` L10286 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.InstanceType` L10287 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.UserData` L10288 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.ImageId` L10385 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.InstanceType` L10386 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.UserData` L10387 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.ImageId` L10484 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.InstanceType` L10485 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.UserData` L10486 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.ImageId` L10583 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.InstanceType` L10584 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.UserData` L10585 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.ImageId` L10682 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.InstanceType` L10683 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.UserData` L10684 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.ImageId` L10781 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.InstanceType` L10782 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.UserData` L10783 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.ImageId` L1079 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.InstanceType` L1080 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.UserData` L1081 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.ImageId` L10880 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.InstanceType` L10881 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.UserData` L10882 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.ImageId` L10979 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.InstanceType` L10980 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.UserData` L10981 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.ImageId` L11078 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.InstanceType` L11079 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.UserData` L11080 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.ImageId` L11177 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.InstanceType` L11178 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.UserData` L11179 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.ImageId` L11276 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.InstanceType` L11277 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.UserData` L11278 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.ImageId` L11375 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.InstanceType` L11376 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.UserData` L11377 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.ImageId` L11474 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.InstanceType` L11475 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.UserData` L11476 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.ImageId` L11573 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.InstanceType` L11574 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.UserData` L11575 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.ImageId` L11672 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.InstanceType` L11673 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.UserData` L11674 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.ImageId` L11771 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.InstanceType` L11772 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.UserData` L11773 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.ImageId` L1178 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.InstanceType` L1179 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.UserData` L1180 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.ImageId` L11870 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.InstanceType` L11871 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.UserData` L11872 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.ImageId` L11969 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.InstanceType` L11970 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.UserData` L11971 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.ImageId` L12068 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.InstanceType` L12069 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.UserData` L12070 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.ImageId` L12167 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.InstanceType` L12168 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.UserData` L12169 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.ImageId` L12266 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.InstanceType` L12267 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.UserData` L12268 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.ImageId` L12365 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.InstanceType` L12366 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.UserData` L12367 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.ImageId` L12464 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.InstanceType` L12465 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.UserData` L12466 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.ImageId` L12563 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.InstanceType` L12564 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.UserData` L12565 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.ImageId` L12662 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.InstanceType` L12663 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.UserData` L12664 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.ImageId` L12761 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.InstanceType` L12762 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.UserData` L12763 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.ImageId` L1277 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.InstanceType` L1278 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.UserData` L1279 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.ImageId` L12860 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.InstanceType` L12861 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.UserData` L12862 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.ImageId` L12959 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.InstanceType` L12960 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.UserData` L12961 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.ImageId` L13058 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.InstanceType` L13059 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.UserData` L13060 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.ImageId` L13157 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.InstanceType` L13158 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.UserData` L13159 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.ImageId` L13256 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.InstanceType` L13257 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.UserData` L13258 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.ImageId` L13355 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.InstanceType` L13356 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.UserData` L13357 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.ImageId` L13454 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.InstanceType` L13455 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.UserData` L13456 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.ImageId` L13553 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.InstanceType` L13554 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.UserData` L13555 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.ImageId` L13652 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.InstanceType` L13653 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.UserData` L13654 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.ImageId` L13751 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.InstanceType` L13752 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.UserData` L13753 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.ImageId` L1376 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.InstanceType` L1377 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.UserData` L1378 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.ImageId` L13850 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.InstanceType` L13851 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.UserData` L13852 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.ImageId` L13949 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.InstanceType` L13950 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.UserData` L13951 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.ImageId` L14048 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.InstanceType` L14049 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.UserData` L14050 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.ImageId` L14147 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.InstanceType` L14148 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.UserData` L14149 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.ImageId` L14246 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.InstanceType` L14247 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.UserData` L14248 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.ImageId` L14345 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.InstanceType` L14346 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.UserData` L14347 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.ImageId` L14444 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.InstanceType` L14445 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.UserData` L14446 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.ImageId` L14543 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.InstanceType` L14544 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.UserData` L14545 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.ImageId` L14642 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.InstanceType` L14643 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.UserData` L14644 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.ImageId` L14741 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.InstanceType` L14742 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.UserData` L14743 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.ImageId` L1475 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.InstanceType` L1476 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.UserData` L1477 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.ImageId` L14840 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.InstanceType` L14841 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.UserData` L14842 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.ImageId` L14939 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.InstanceType` L14940 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.UserData` L14941 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.ImageId` L15038 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.InstanceType` L15039 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.UserData` L15040 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.ImageId` L15137 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.InstanceType` L15138 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.UserData` L15139 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.ImageId` L15236 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.InstanceType` L15237 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.UserData` L15238 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.ImageId` L15335 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.InstanceType` L15336 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.UserData` L15337 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.ImageId` L15434 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.InstanceType` L15435 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.UserData` L15436 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.ImageId` L15533 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.InstanceType` L15534 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.UserData` L15535 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.ImageId` L15632 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.InstanceType` L15633 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.UserData` L15634 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.ImageId` L15731 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.InstanceType` L15732 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.UserData` L15733 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.ImageId` L1574 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.InstanceType` L1575 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.UserData` L1576 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.ImageId` L15830 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.InstanceType` L15831 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.UserData` L15832 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.ImageId` L15929 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.InstanceType` L15930 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.UserData` L15931 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.ImageId` L16028 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.InstanceType` L16029 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.UserData` L16030 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.ImageId` L16127 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.InstanceType` L16128 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.UserData` L16129 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.ImageId` L16226 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.InstanceType` L16227 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.UserData` L16228 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.ImageId` L16325 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.InstanceType` L16326 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.UserData` L16327 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.ImageId` L16424 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.InstanceType` L16425 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.UserData` L16426 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.ImageId` L16523 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.InstanceType` L16524 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.UserData` L16525 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.ImageId` L16622 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.InstanceType` L16623 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.UserData` L16624 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.ImageId` L16721 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.InstanceType` L16722 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.UserData` L16723 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.ImageId` L1673 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.InstanceType` L1674 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.UserData` L1675 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.ImageId` L16820 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.InstanceType` L16821 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.UserData` L16822 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.ImageId` L16919 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.InstanceType` L16920 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.UserData` L16921 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.ImageId` L17018 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.InstanceType` L17019 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.UserData` L17020 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.ImageId` L17117 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.InstanceType` L17118 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.UserData` L17119 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.ImageId` L17216 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.InstanceType` L17217 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.UserData` L17218 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.ImageId` L17315 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.InstanceType` L17316 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.UserData` L17317 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.ImageId` L17414 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.InstanceType` L17415 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.UserData` L17416 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.ImageId` L17513 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.InstanceType` L17514 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.UserData` L17515 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.ImageId` L17612 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.InstanceType` L17613 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.UserData` L17614 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.ImageId` L17711 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.InstanceType` L17712 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.UserData` L17713 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.ImageId` L1772 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.InstanceType` L1773 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.UserData` L1774 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.ImageId` L17810 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.InstanceType` L17811 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.UserData` L17812 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.ImageId` L17909 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.InstanceType` L17910 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.UserData` L17911 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.ImageId` L18008 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.InstanceType` L18009 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.UserData` L18010 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.ImageId` L18107 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.InstanceType` L18108 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.UserData` L18109 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.ImageId` L18206 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.InstanceType` L18207 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.UserData` L18208 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.ImageId` L18305 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.InstanceType` L18306 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.UserData` L18307 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.ImageId` L18404 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.InstanceType` L18405 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.UserData` L18406 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.ImageId` L18503 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.InstanceType` L18504 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.UserData` L18505 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.ImageId` L18602 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.InstanceType` L18603 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.UserData` L18604 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.ImageId` L18701 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.InstanceType` L18702 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.UserData` L18703 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.ImageId` L1871 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.InstanceType` L1872 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.UserData` L1873 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.ImageId` L18800 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.InstanceType` L18801 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.UserData` L18802 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.ImageId` L18899 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.InstanceType` L18900 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.UserData` L18901 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.ImageId` L18998 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.InstanceType` L18999 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.UserData` L19000 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.ImageId` L19097 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.InstanceType` L19098 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.UserData` L19099 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.ImageId` L19196 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.InstanceType` L19197 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.UserData` L19198 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.ImageId` L19295 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.InstanceType` L19296 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.UserData` L19297 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.ImageId` L19394 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.InstanceType` L19395 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.UserData` L19396 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.ImageId` L19493 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.InstanceType` L19494 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.UserData` L19495 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.ImageId` L19592 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.InstanceType` L19593 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.UserData` L19594 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.ImageId` L19691 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.InstanceType` L19692 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.UserData` L19693 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.ImageId` L188 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.InstanceType` L189 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.UserData` L190 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.ImageId` L1970 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.InstanceType` L1971 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.UserData` L1972 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.ImageId` L19790 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.InstanceType` L19791 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.UserData` L19792 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.ImageId` L19889 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.InstanceType` L19890 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.UserData` L19891 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.ImageId` L19988 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.InstanceType` L19989 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.UserData` L19990 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.ImageId` L20087 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.InstanceType` L20088 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.UserData` L20089 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.ImageId` L20186 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.InstanceType` L20187 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.UserData` L20188 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.ImageId` L20285 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.InstanceType` L20286 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.UserData` L20287 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.ImageId` L20384 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.InstanceType` L20385 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.UserData` L20386 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.ImageId` L20483 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.InstanceType` L20484 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.UserData` L20485 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.ImageId` L20582 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.InstanceType` L20583 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.UserData` L20584 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.ImageId` L20681 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.InstanceType` L20682 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.UserData` L20683 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.ImageId` L2069 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.InstanceType` L2070 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.UserData` L2071 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.ImageId` L20780 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.InstanceType` L20781 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.UserData` L20782 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.ImageId` L20879 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.InstanceType` L20880 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.UserData` L20881 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.ImageId` L20978 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.InstanceType` L20979 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.UserData` L20980 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.ImageId` L21077 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.InstanceType` L21078 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.UserData` L21079 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.ImageId` L21176 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.InstanceType` L21177 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.UserData` L21178 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.ImageId` L21275 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.InstanceType` L21276 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.UserData` L21277 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.ImageId` L21374 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.InstanceType` L21375 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.UserData` L21376 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.ImageId` L21473 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.InstanceType` L21474 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.UserData` L21475 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.ImageId` L21572 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.InstanceType` L21573 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.UserData` L21574 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.ImageId` L21671 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.InstanceType` L21672 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.UserData` L21673 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.ImageId` L2168 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.InstanceType` L2169 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.UserData` L2170 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.ImageId` L21770 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.InstanceType` L21771 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.UserData` L21772 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.ImageId` L21869 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.InstanceType` L21870 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.UserData` L21871 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.ImageId` L21968 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.InstanceType` L21969 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.UserData` L21970 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.ImageId` L22067 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.InstanceType` L22068 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.UserData` L22069 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.ImageId` L22166 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.InstanceType` L22167 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.UserData` L22168 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.ImageId` L22265 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.InstanceType` L22266 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.UserData` L22267 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.ImageId` L22364 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.InstanceType` L22365 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.UserData` L22366 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.ImageId` L22463 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.InstanceType` L22464 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.UserData` L22465 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.ImageId` L22562 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.InstanceType` L22563 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.UserData` L22564 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.ImageId` L22661 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.InstanceType` L22662 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.UserData` L22663 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.ImageId` L2267 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.InstanceType` L2268 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.UserData` L2269 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.ImageId` L22760 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.InstanceType` L22761 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.UserData` L22762 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.ImageId` L22859 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.InstanceType` L22860 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.UserData` L22861 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.ImageId` L22958 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.InstanceType` L22959 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.UserData` L22960 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.ImageId` L23057 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.InstanceType` L23058 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.UserData` L23059 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.ImageId` L23156 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.InstanceType` L23157 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.UserData` L23158 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.ImageId` L23255 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.InstanceType` L23256 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.UserData` L23257 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.ImageId` L23354 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.InstanceType` L23355 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.UserData` L23356 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.ImageId` L23453 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.InstanceType` L23454 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.UserData` L23455 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.ImageId` L23552 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.InstanceType` L23553 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.UserData` L23554 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.ImageId` L23651 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.InstanceType` L23652 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.UserData` L23653 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.ImageId` L2366 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.InstanceType` L2367 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.UserData` L2368 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.ImageId` L23750 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.InstanceType` L23751 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.UserData` L23752 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.ImageId` L23849 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.InstanceType` L23850 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.UserData` L23851 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.ImageId` L23948 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.InstanceType` L23949 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.UserData` L23950 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.ImageId` L24047 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.InstanceType` L24048 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.UserData` L24049 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.ImageId` L24146 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.InstanceType` L24147 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.UserData` L24148 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.ImageId` L24245 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.InstanceType` L24246 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.UserData` L24247 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.ImageId` L24344 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.InstanceType` L24345 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.UserData` L24346 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.ImageId` L24443 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.InstanceType` L24444 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.UserData` L24445 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.ImageId` L24542 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.InstanceType` L24543 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.UserData` L24544 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.ImageId` L24641 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.InstanceType` L24642 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.UserData` L24643 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.ImageId` L2465 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.InstanceType` L2466 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.UserData` L2467 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.ImageId` L24740 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.InstanceType` L24741 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.UserData` L24742 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.ImageId` L24839 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.InstanceType` L24840 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.UserData` L24841 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.ImageId` L24938 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.InstanceType` L24939 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.UserData` L24940 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.ImageId` L25037 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.InstanceType` L25038 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.UserData` L25039 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.ImageId` L25136 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.InstanceType` L25137 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.UserData` L25138 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.ImageId` L25235 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.InstanceType` L25236 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.UserData` L25237 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.ImageId` L25334 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.InstanceType` L25335 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.UserData` L25336 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.ImageId` L25433 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.InstanceType` L25434 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.UserData` L25435 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.ImageId` L25532 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.InstanceType` L25533 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.UserData` L25534 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.ImageId` L25631 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.InstanceType` L25632 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.UserData` L25633 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.ImageId` L2564 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.InstanceType` L2565 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.UserData` L2566 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.ImageId` L25730 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.InstanceType` L25731 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.UserData` L25732 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.ImageId` L25829 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.InstanceType` L25830 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.UserData` L25831 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.ImageId` L25928 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.InstanceType` L25929 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.UserData` L25930 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.ImageId` L26027 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.InstanceType` L26028 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.UserData` L26029 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.ImageId` L26126 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.InstanceType` L26127 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.UserData` L26128 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.ImageId` L26225 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.InstanceType` L26226 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.UserData` L26227 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.ImageId` L26324 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.InstanceType` L26325 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.UserData` L26326 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.ImageId` L26423 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.InstanceType` L26424 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.UserData` L26425 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.ImageId` L26522 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.InstanceType` L26523 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.UserData` L26524 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.ImageId` L26621 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.InstanceType` L26622 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.UserData` L26623 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.ImageId` L2663 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.InstanceType` L2664 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.UserData` L2665 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.ImageId` L26720 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.InstanceType` L26721 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.UserData` L26722 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.ImageId` L26819 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.InstanceType` L26820 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.UserData` L26821 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.ImageId` L26918 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.InstanceType` L26919 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.UserData` L26920 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.ImageId` L27017 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.InstanceType` L27018 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.UserData` L27019 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.ImageId` L27116 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.InstanceType` L27117 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.UserData` L27118 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.ImageId` L27215 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.InstanceType` L27216 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.UserData` L27217 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.ImageId` L27314 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.InstanceType` L27315 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.UserData` L27316 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.ImageId` L27413 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.InstanceType` L27414 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.UserData` L27415 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.ImageId` L27512 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.InstanceType` L27513 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.UserData` L27514 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.ImageId` L27611 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.InstanceType` L27612 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.UserData` L27613 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.ImageId` L2762 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.InstanceType` L2763 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.UserData` L2764 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.ImageId` L27710 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.InstanceType` L27711 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.UserData` L27712 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.ImageId` L27809 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.InstanceType` L27810 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.UserData` L27811 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.ImageId` L27908 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.InstanceType` L27909 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.UserData` L27910 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.ImageId` L28007 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.InstanceType` L28008 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.UserData` L28009 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.ImageId` L28106 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.InstanceType` L28107 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.UserData` L28108 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.ImageId` L28205 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.InstanceType` L28206 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.UserData` L28207 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.ImageId` L28304 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.InstanceType` L28305 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.UserData` L28306 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.ImageId` L28403 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.InstanceType` L28404 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.UserData` L28405 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.ImageId` L28502 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.InstanceType` L28503 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.UserData` L28504 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.ImageId` L28601 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.InstanceType` L28602 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.UserData` L28603 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.ImageId` L2861 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.InstanceType` L2862 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.UserData` L2863 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.ImageId` L28700 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.InstanceType` L28701 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.UserData` L28702 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.ImageId` L28799 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.InstanceType` L28800 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.UserData` L28801 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.ImageId` L28898 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.InstanceType` L28899 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.UserData` L28900 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.ImageId` L28997 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.InstanceType` L28998 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.UserData` L28999 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.ImageId` L29096 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.InstanceType` L29097 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.UserData` L29098 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.ImageId` L29195 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.InstanceType` L29196 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.UserData` L29197 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.ImageId` L29294 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.InstanceType` L29295 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.UserData` L29296 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.ImageId` L29393 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.InstanceType` L29394 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.UserData` L29395 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.ImageId` L29492 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.InstanceType` L29493 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.UserData` L29494 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.ImageId` L29591 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.InstanceType` L29592 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.UserData` L29593 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.ImageId` L287 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.InstanceType` L288 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.UserData` L289 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.ImageId` L2960 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.InstanceType` L2961 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.UserData` L2962 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.ImageId` L3059 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.InstanceType` L3060 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.UserData` L3061 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.ImageId` L3158 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.InstanceType` L3159 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.UserData` L3160 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.ImageId` L3257 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.InstanceType` L3258 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.UserData` L3259 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.ImageId` L3356 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.InstanceType` L3357 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.UserData` L3358 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.ImageId` L3455 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.InstanceType` L3456 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.UserData` L3457 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.ImageId` L3554 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.InstanceType` L3555 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.UserData` L3556 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.ImageId` L3653 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.InstanceType` L3654 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.UserData` L3655 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.ImageId` L3752 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.InstanceType` L3753 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.UserData` L3754 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.ImageId` L3851 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.InstanceType` L3852 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.UserData` L3853 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.ImageId` L386 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.InstanceType` L387 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.UserData` L388 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.ImageId` L3950 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.InstanceType` L3951 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.UserData` L3952 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.ImageId` L4049 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.InstanceType` L4050 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.UserData` L4051 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.ImageId` L4148 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.InstanceType` L4149 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.UserData` L4150 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.ImageId` L4247 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.InstanceType` L4248 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.UserData` L4249 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.ImageId` L4346 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.InstanceType` L4347 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.UserData` L4348 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.ImageId` L4445 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.InstanceType` L4446 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.UserData` L4447 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.ImageId` L4544 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.InstanceType` L4545 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.UserData` L4546 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.ImageId` L4643 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.InstanceType` L4644 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.UserData` L4645 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.ImageId` L4742 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.InstanceType` L4743 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.UserData` L4744 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.ImageId` L4841 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.InstanceType` L4842 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.UserData` L4843 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.ImageId` L485 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.InstanceType` L486 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.UserData` L487 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.ImageId` L4940 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.InstanceType` L4941 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.UserData` L4942 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.ImageId` L5039 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.InstanceType` L5040 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.UserData` L5041 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.ImageId` L5138 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.InstanceType` L5139 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.UserData` L5140 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.ImageId` L5237 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.InstanceType` L5238 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.UserData` L5239 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.ImageId` L5336 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.InstanceType` L5337 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.UserData` L5338 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.ImageId` L5435 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.InstanceType` L5436 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.UserData` L5437 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.ImageId` L5534 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.InstanceType` L5535 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.UserData` L5536 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.ImageId` L5633 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.InstanceType` L5634 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.UserData` L5635 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.ImageId` L5732 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.InstanceType` L5733 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.UserData` L5734 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.ImageId` L5831 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.InstanceType` L5832 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.UserData` L5833 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.ImageId` L584 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.InstanceType` L585 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.UserData` L586 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.ImageId` L5930 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.InstanceType` L5931 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.UserData` L5932 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.ImageId` L6029 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.InstanceType` L6030 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.UserData` L6031 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.ImageId` L6128 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.InstanceType` L6129 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.UserData` L6130 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.ImageId` L6227 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.InstanceType` L6228 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.UserData` L6229 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.ImageId` L6326 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.InstanceType` L6327 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.UserData` L6328 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.ImageId` L6425 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.InstanceType` L6426 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.UserData` L6427 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.ImageId` L6524 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.InstanceType` L6525 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.UserData` L6526 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.ImageId` L6623 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.InstanceType` L6624 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.UserData` L6625 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.ImageId` L6722 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.InstanceType` L6723 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.UserData` L6724 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.ImageId` L6821 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.InstanceType` L6822 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.UserData` L6823 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.ImageId` L683 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.InstanceType` L684 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.UserData` L685 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.ImageId` L6920 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.InstanceType` L6921 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.UserData` L6922 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.ImageId` L7019 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.InstanceType` L7020 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.UserData` L7021 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.ImageId` L7118 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.InstanceType` L7119 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.UserData` L7120 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.ImageId` L7217 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.InstanceType` L7218 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.UserData` L7219 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.ImageId` L7316 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.InstanceType` L7317 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.UserData` L7318 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.ImageId` L7415 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.InstanceType` L7416 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.UserData` L7417 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.ImageId` L7514 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.InstanceType` L7515 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.UserData` L7516 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.ImageId` L7613 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.InstanceType` L7614 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.UserData` L7615 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.ImageId` L7712 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.InstanceType` L7713 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.UserData` L7714 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.ImageId` L7811 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.InstanceType` L7812 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.UserData` L7813 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.ImageId` L782 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.InstanceType` L783 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.UserData` L784 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.ImageId` L7910 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.InstanceType` L7911 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.UserData` L7912 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.ImageId` L8009 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.InstanceType` L8010 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.UserData` L8011 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.ImageId` L8108 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.InstanceType` L8109 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.UserData` L8110 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.ImageId` L8207 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.InstanceType` L8208 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.UserData` L8209 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.ImageId` L8306 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.InstanceType` L8307 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.UserData` L8308 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.ImageId` L8405 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.InstanceType` L8406 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.UserData` L8407 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.ImageId` L8504 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.InstanceType` L8505 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.UserData` L8506 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.ImageId` L8603 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.InstanceType` L8604 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.UserData` L8605 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.ImageId` L8702 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.InstanceType` L8703 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.UserData` L8704 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.ImageId` L8801 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.InstanceType` L8802 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.UserData` L8803 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.ImageId` L881 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.InstanceType` L882 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.UserData` L883 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.ImageId` L8900 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.InstanceType` L8901 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.UserData` L8902 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.ImageId` L8999 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.InstanceType` L9000 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.UserData` L9001 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.ImageId` L9098 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.InstanceType` L9099 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.UserData` L9100 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.ImageId` L9197 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.InstanceType` L9198 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.UserData` L9199 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.ImageId` L9296 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.InstanceType` L9297 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.UserData` L9298 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.ImageId` L9395 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.InstanceType` L9396 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.UserData` L9397 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.ImageId` L9494 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.InstanceType` L9495 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.UserData` L9496 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.ImageId` L9593 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.InstanceType` L9594 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.UserData` L9595 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.ImageId` L9692 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.InstanceType` L9693 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.UserData` L9694 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.ImageId` L9791 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.InstanceType` L9792 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.UserData` L9793 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `bad_mappings_used_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `bad_mappings_used_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L18 in `bad_override_complete_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `bad_override_complete_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myS3BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `bad_override_include_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L9 in `bad_override_include_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `bad_override_include_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L6 in `bad_pipeline_no_source_first_stage_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_previous_gen_instance_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L6 in `bad_previous_gen_instance_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Engine` L17 in `bad_previous_generation_instances_yaml` + > Property 'Engine' is create-only; updating it will cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L27 in `bad_previous_generation_instances_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L8 in `bad_previous_generation_instances_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L7 in `bad_previous_generation_instances_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L12 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_properties_ebs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L11 in `bad_properties_ebs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L27 in `bad_properties_ebs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L33 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L45 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L43 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L44 in `bad_properties_ebs_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L21 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L22 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Engine` L30 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L31 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L39 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L40 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L43 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L45 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L73 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L74 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L58 in `bad_properties_rt_association_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L64 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L65 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L34 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L36 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L51 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L53 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L28 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L58 in `bad_properties_sg_ingress_yaml` + > Property 'CidrIp' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L56 in `bad_properties_sg_ingress_yaml` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L54 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L55 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L57 in `bad_properties_sg_ingress_yaml` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L79 in `bad_properties_sg_ingress_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L80 in `bad_properties_sg_ingress_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L62 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L63 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L64 in `bad_properties_sg_ingress_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L68 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L69 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L70 in `bad_properties_sg_ingress_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L74 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupName` L75 in `bad_properties_sg_ingress_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_properties_sg_ingress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L31 in `bad_properties_sg_ingress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L32 in `bad_properties_sg_ingress_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L10 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Db` (AWS::RDS::DBInstance) → `Properties.Engine` L8 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L7 in `bad_rds_public_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L8 in `bad_rds_public_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L10 in `bad_rds_public_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L34 in `bad_redshift_internet_accessible_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L33 in `bad_redshift_internet_accessible_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `bad_redshift_internet_accessible_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `bad_redshift_internet_accessible_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `bad_redshift_internet_accessible_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_redshift_internet_accessible_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_redshift_internet_accessible_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_redshift_internet_accessible_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L29 in `bad_refs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_refs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L27 in `bad_refs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L28 in `bad_refs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L37 in `bad_refs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L41 in `bad_refs_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L10 in `bad_refs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_refs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L8 in `bad_refs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L9 in `bad_refs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L18 in `bad_refs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_refs_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myBucket` (AWS::S3::Bucket) → `Properties.BucketName` L71 in `bad_resources_circular_dependency_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L75 in `bad_resources_circular_dependency_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L54 in `bad_resources_circular_dependency_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L55 in `bad_resources_circular_dependency_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_resources_circular_dependency_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L149 in `bad_resources_circular_dependency_yaml` + > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L150 in `bad_resources_circular_dependency_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.ImageId` L216 in `bad_resources_circular_dependency_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.UserData` L217 in `bad_resources_circular_dependency_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Path` L110 in `bad_resources_circular_dependency_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.RoleName` L100 in `bad_resources_circular_dependency_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L26 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L27 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L36 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L37 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L44 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L45 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L226 in `bad_resources_circular_dependency_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L223 in `bad_resources_circular_dependency_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Volumes` L258 in `bad_resources_circular_dependency_yaml` + > Property 'Volumes' is create-only; updating it will cause resource replacement +- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `bad_resources_codepipeline_stages_second_stage_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_resources_creation_policy_unsupported_e3055_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_deletionpolicy_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L27 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L43 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L25 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L24 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L84 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L74 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L64 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L53 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L36 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L10 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L206 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L204 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L205 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L203 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L195 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L193 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L194 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L192 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L139 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L137 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L134 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L138 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L136 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L135 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L167 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L165 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L162 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L166 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L164 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L163 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L153 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L151 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Family` L148 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Memory` L152 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L150 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L149 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L125 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L123 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L120 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L124 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L122 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L121 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L182 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L179 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L176 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L180 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L178 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L181 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L177 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L44 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L42 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L38 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L43 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L41 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L39 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L94 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L92 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L93 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L91 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L110 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L107 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L103 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L108 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L106 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L109 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L104 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L62 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L57 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L53 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L58 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L59 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L54 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L77 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Family` L71 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L29 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L23 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L24 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L104 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L102 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Family` L99 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L103 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L101 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L100 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L117 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L115 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Family` L112 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L116 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L114 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L113 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L13 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L65 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L63 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L60 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L64 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L62 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L61 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L78 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L76 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L73 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L77 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L75 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L74 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L91 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L89 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L86 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L90 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L24 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L21 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L25 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L23 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L22 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L39 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L34 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L38 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L36 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L35 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L47 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L51 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L49 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L48 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L41 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L46 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L96 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L100 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L22 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L30 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L14 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L60 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L64 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L79 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L82 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `rIamRole` (AWS::IAM::Role) → `Properties.RoleName` L9 in `bad_resources_iam_iam_policy_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L89 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'InstanceArn' is create-only; updating it will cause resource replacement +- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Name` L90 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyName` L44 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.RoleName` L45 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.GroupName` L76 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.PolicyName` L77 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `bad_resources_iam_managed_policy_description_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `bad_resources_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `bad_resources_iam_ref_with_path_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `bad_resources_iam_ref_with_path_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `bad_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `bad_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L74 in `bad_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `bad_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L9 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Function2` (AWS::Lambda::Function) → `Properties.PackageType` L22 in `bad_resources_lambda_required_properties_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L151 in `bad_resources_primary_identifiers_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Project1` (AWS::CodeBuild::Project) → `Properties.Name` L168 in `bad_resources_primary_identifiers_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Project2` (AWS::CodeBuild::Project) → `Properties.Name` L188 in `bad_resources_primary_identifiers_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.Path` L39 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.RoleName` L40 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L62 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L63 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L85 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L86 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.Path` L108 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.RoleName` L109 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.Path` L130 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.RoleName` L131 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L27 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L34 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Engine` L53 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Engine` L60 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_resources_rds_not_enum_master_username_join_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L9 in `bad_resources_rds_not_enum_master_username_join_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.Engine` L6 in `bad_resources_rds_not_enum_master_username_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyTopic` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `bad_resources_sns_topic_name_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_resources_update_policy_unsupported_e3016_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_updatereplacepolicy_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GroupInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L61 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L105 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMixedInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L89 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupUnresolvedCnameCardinality` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L131 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L26 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L27 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L15 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L16 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L49 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L50 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L37 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L38 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L121 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.Name` L122 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L45 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.Name` L46 in `bad_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRecordSetsInvalidFirst` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L54 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRecordSetsInvalidSecond` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L68 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L50 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L51 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L40 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L41 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L110 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L111 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L64 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L65 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L75 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L76 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L86 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.Name` L87 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyHostedZone` (AWS::Route53::HostedZone) → `Properties.Name` L19 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L99 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L100 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyRecordSetGroup` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L121 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L27 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L28 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PoorlyConfiguredRoute53` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L174 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.ValidationSpecification` L35 in `bad_sagemaker_instance_types_yaml` + > Property 'ValidationSpecification' is create-only; updating it will cause resource replacement +- **I9001** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.JobResources` L15 in `bad_sagemaker_instance_types_yaml` + > Property 'JobResources' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_additional_props_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Name` L8 in `bad_schema_composition_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L12 in `bad_schema_conditional_type_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_enum_violation_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `bad_schema_format_violation_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L8 in `bad_schema_format_violation_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SubnetId` L7 in `bad_schema_format_violation_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L37 in `bad_schema_lifecycle_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EolLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L26 in `bad_schema_lifecycle_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L19 in `bad_schema_lifecycle_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L20 in `bad_schema_lifecycle_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.MeshName` L13 in `bad_schema_lifecycle_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_schema_numeric_bounds_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Name` L22 in `bad_schema_property_constraints_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PatternBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_property_constraints_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateAuthorityArn` L11 in `bad_schema_property_constraints_yaml` + > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateSigningRequest` L12 in `bad_schema_property_constraints_yaml` + > Property 'CertificateSigningRequest' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.SigningAlgorithm` L13 in `bad_schema_property_constraints_yaml` + > Property 'SigningAlgorithm' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.Validity` L14 in `bad_schema_property_constraints_yaml` + > Property 'Validity' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L14 in `bad_schema_required_xor_conditional_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L17 in `bad_schema_required_xor_conditional_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L18 in `bad_schema_required_xor_conditional_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L16 in `bad_schema_required_xor_conditional_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L19 in `bad_schema_required_xor_conditional_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `Lambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_schema_string_length_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L26 in `bad_schema_structural_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L29 in `bad_schema_structural_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L30 in `bad_schema_structural_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L28 in `bad_schema_structural_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L31 in `bad_schema_structural_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L37 in `bad_schema_structural_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L39 in `bad_schema_structural_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.VpcId` L20 in `bad_schema_structural_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_type_mismatch_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.CertificateAuthorityArn` L7 in `bad_schema_write_only_yaml` + > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement +- **I9001** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_security_issues_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_bad_port_range_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_open_egress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_simple_sub_param_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `bad_sns_cross_account_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L81 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `bad_sqs_fifo_no_suffix_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DLQ` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L11 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.QueueName` L10 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `bad_ssm_document_invalid_yaml` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `bad_ssm_document_invalid_yaml` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_sub_needed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_sub_nested_intrinsic_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_outside_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_outside_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_outside_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L17 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L16 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L15 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L23 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L22 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L29 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L28 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.VpcId` L27 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L35 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.CidrBlock` L34 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.VpcId` L33 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `bad_subnet_overlap_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_overlap_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `bad_subnet_overlap_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `bad_subnet_overlap_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `BadBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_unknown_properties_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L95 in `cdk_DemoStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L80 in `cdk_DemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.TableName` L86 in `cdk_DemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L128 in `cdk_DemoStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Name` L12 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L69 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L24 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'BrokerName' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L25 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'DeploymentMode' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EncryptionOptions` L26 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EncryptionOptions' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L29 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EngineType' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L32 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement +- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L203 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L1078 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.AppId` L18 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Property 'AppId' is create-only; updating it will cause resource replacement +- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.BranchName` L23 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Property 'BranchName' is create-only; updating it will cause resource replacement +- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentFEC31BD04feb54db86e2f8eed94e1b28001143ce` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L739 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L765 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.StageName` L767 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.ParentId` L780 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.PathPart` L785 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L787 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L882 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L911 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L914 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Action` L797 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.FunctionName` L799 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Principal` L804 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.SourceArn` L806 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Action` L841 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.FunctionName` L843 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Principal` L848 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.SourceArn` L850 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1052 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1083 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1086 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Action` L924 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.FunctionName` L926 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Principal` L931 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.SourceArn` L933 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Action` L968 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.FunctionName` L970 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.SourceArn` L977 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1009 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1038 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1041 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1097 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1099 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1101 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1450 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1479 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1482 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Action` L1365 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.FunctionName` L1367 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Principal` L1372 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.SourceArn` L1374 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Action` L1409 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.FunctionName` L1411 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Principal` L1416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.SourceArn` L1418 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1196 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1225 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1228 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Action` L1111 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.FunctionName` L1113 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Principal` L1118 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.SourceArn` L1120 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Action` L1155 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1157 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Principal` L1162 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1164 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1493 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1524 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1527 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1323 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1352 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1355 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Action` L1238 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.FunctionName` L1240 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Principal` L1245 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.SourceArn` L1247 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Action` L1282 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.FunctionName` L1284 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Principal` L1289 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.SourceArn` L1291 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentDA408F9D41ab700bc8db89ed7cb2c6250ab97c0a` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L231 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L270 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.StageName` L272 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.ParentId` L285 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.PathPart` L290 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L292 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L371 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L420 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L423 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Action` L302 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.FunctionName` L304 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Principal` L309 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.SourceArn` L311 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Action` L338 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.FunctionName` L340 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Principal` L345 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.SourceArn` L347 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.ParentId` L434 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.PathPart` L436 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L438 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L449 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L499 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L502 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Action` L305 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.FunctionName` L307 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Principal` L312 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.SourceArn` L314 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `operationalAuthorizer363A7D2B` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L393 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentB29CB257026bd226d852d73169d333911fdd4fa6` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L432 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L474 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.StageName` L476 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.ParentId` L486 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.PathPart` L491 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L493 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L596 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L599 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Action` L539 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.FunctionName` L541 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Principal` L546 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.SourceArn` L548 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Action` L503 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.FunctionName` L505 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Principal` L510 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.SourceArn` L512 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L87 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L96 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L352 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L361 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L807 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L892 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L898 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeployment92F2CB49668bc8f388b84571173cc408b70fc6fa` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L726 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L746 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.StageName` L748 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.ParentId` L909 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.PathPart` L914 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L916 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L927 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.ResourceId` L932 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.RestApiId` L935 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L644 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `nestedstackvpcVPCGWA39BF2BE` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTable5302591F` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableEA03EC80` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTable518786D0` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableF3884194` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L7 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `chatappapideployment` (AWS::ApiGatewayV2::Deployment) → `Properties.ApiId` L676 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L692 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L698 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.TableName` L33 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `connectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L505 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `connectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L604 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `disconnectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L538 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `disconnectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L628 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `messagelambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L571 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `messageroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L652 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L494 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L501 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L555 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L558 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L570 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `ASGScalingPolicyAModestLoadC5714E5A` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L622 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L704 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L721 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L790 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L802 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L803 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L810 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L812 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L736 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L759 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L764 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L766 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L771 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L772 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.ApiId` L171 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.Name` L182 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.ApiId` L277 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.Name` L288 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CarApiSchema8E4784D9` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L94 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `CarsFunction7C2F2ED2` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L305 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DefectsFunction929174B7` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L333 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L61 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.TableName` L71 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.ApiId` L361 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.FieldName` L369 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.TypeName` L385 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.ApiId` L398 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.FieldName` L406 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.TypeName` L422 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `AppSync2EventBridgeApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L17 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Action` L237 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.FunctionName` L239 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Principal` L244 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.SourceArn` L246 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L90 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L118 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ItemsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L31 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L135 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L141 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L144 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L140 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L147 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L152 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L90 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L97 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L102 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L65 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L72 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L77 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `PostsApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L17 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L46 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L54 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PostsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L31 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L115 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L122 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L127 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `IncomingDataBucketPolicyCA22042A` (AWS::S3::BucketPolicy) → `Properties.Bucket` L33 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L642 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Domain' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L625 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'ServerId' is create-only; updating it will cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L582 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L425 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L642 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Domain' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L625 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'ServerId' is create-only; updating it will cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L582 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L425 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vault23237E5B` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L216 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupVaultName' is create-only; updating it will cause resource replacement +- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L254 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupPlanId' is create-only; updating it will cause resource replacement +- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L259 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupSelection' is create-only; updating it will cause resource replacement +- **I9001** `testBucketPolicy47484917` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L568 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L577 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1085 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceRole` L750 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.InstanceRole' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceTypes` L755 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.InstanceTypes' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.SecurityGroupIds` L764 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L772 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L780 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L789 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L850 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.RepositoryName` L10 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.CidrBlock` L21 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L24 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L317 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.RouteTableId` L322 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTable3DBEEA60` (AWS::EC2::RouteTable) → `Properties.VpcId` L293 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L304 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L307 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L252 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.CidrBlock` L259 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.VpcId` L276 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L398 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.RouteTableId` L403 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTable7EFB668D` (AWS::EC2::RouteTable) → `Properties.VpcId` L374 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L385 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L388 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L333 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.CidrBlock` L340 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.VpcId` L357 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L107 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.RouteTableId` L112 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L141 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L147 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L94 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L97 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableDADE381A` (AWS::EC2::RouteTable) → `Properties.VpcId` L83 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L42 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L49 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L233 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.RouteTableId` L238 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTable29142B7F` (AWS::EC2::RouteTable) → `Properties.VpcId` L209 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L220 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L223 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L168 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L175 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.VpcId` L192 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCVPCGWDD05DB82` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L431 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L494 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L501 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L555 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L558 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L570 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L667 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L682 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L691 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L621 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L632 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L644 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L649 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L651 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L656 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L657 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Name` L394 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Name` L409 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteBucketPolicyE10E3262` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Content` L154 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Description` L160 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1641 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1642 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1643 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1652 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Name` L2309 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipelineArtifactsBucketEncryptionKeyAliasC52C67EF` (AWS::KMS::Alias) → `Properties.AliasName` L2074 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AliasName' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipelineArtifactsBucketPolicyC49383E9` (AWS::S3::BucketPolicy) → `Properties.Bucket` L2123 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.CidrBlock` L1097 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L1100 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1489 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.RouteTableId` L1494 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTable4D91A516` (AWS::EC2::RouteTable) → `Properties.VpcId` L1457 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1472 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1475 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1412 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1419 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.VpcId` L1436 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1586 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.RouteTableId` L1591 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTable918A9411` (AWS::EC2::RouteTable) → `Properties.VpcId` L1554 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1569 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1572 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1509 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1516 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.VpcId` L1533 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1197 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.RouteTableId` L1202 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1237 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1243 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableA4D922A0` (AWS::EC2::RouteTable) → `Properties.VpcId` L1165 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1180 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1183 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1127 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.VpcId` L1144 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1343 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.RouteTableId` L1348 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1383 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1389 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTable12CC8384` (AWS::EC2::RouteTable) → `Properties.VpcId` L1311 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1326 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1329 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1266 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1273 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.VpcId` L1290 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcVPCGW361426E5` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L1627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.ApplicationName` L1955 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ApplicationName' is create-only; updating it will cause resource replacement +- **I9001** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.ComputePlatform` L1942 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ComputePlatform' is create-only; updating it will cause resource replacement +- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L1781 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L1793 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L1805 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.ServiceName` L1836 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1853 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1862 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L1879 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L1881 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L1886 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L1888 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L1893 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L181 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L183 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L188 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L189 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L190 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L191 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L195 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1662 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1663 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1664 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1671 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1673 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L1717 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L1734 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L1758 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1683 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1701 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `cfnAuth` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L366 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentCB1FF57464f3e9f368e40968a1aeabdb5bcc9580` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L134 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L153 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.StageName` L155 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.ParentId` L168 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.PathPart` L173 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L175 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L273 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L302 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L305 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.FunctionName` L187 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.SourceArn` L194 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L238 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `DemoResource5B5C546C` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L141 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `DemoResourceResource1DB79ECAB` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L167 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.QueueName` L70 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.TopicName` L27 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.KeySchema` L88 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L260 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L270 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.KeySchema` L507 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L481 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L491 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L566 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.ImageId` L577 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.InstanceType` L579 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L580 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SubnetId` L595 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.UserData` L604 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Content` L353 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Description` L359 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `EC2assetBucketPolicy31C0B372` (AWS::S3::BucketPolicy) → `Properties.Bucket` L277 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L542 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.CidrBlock` L7 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L91 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.RouteTableId` L96 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTable140320E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L67 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L78 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L81 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L26 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.CidrBlock` L33 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.VpcId` L50 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L175 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.RouteTableId` L180 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L162 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L165 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableD6971BF3` (AWS::EC2::RouteTable) → `Properties.VpcId` L151 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L110 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.CidrBlock` L117 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.VpcId` L134 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW3AFA48F6` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L211 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableE62E4ED6` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTable3E531D9B` (AWS::EC2::RouteTable) → `Properties.VpcId` L132 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L143 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L146 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L91 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.VpcId` L115 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L247 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.ImageId` L258 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.InstanceType` L260 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L261 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SubnetId` L270 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.UserData` L279 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L156 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L197 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.AutoScalingGroupProvider.AutoScalingGroupArn` L692 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AutoScalingGroupProvider.AutoScalingGroupArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L679 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L634 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L646 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L592 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L595 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L597 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L598 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L607 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L201 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L213 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L214 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L221 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L223 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L62 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L122 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L131 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L170 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L179 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L180 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L147 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L156 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L68 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L80 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L81 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L88 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L90 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L62 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L120 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L129 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L168 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L173 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L178 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L143 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L150 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Cluster` L1113 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.LaunchType` L1125 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1126 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L1028 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L1033 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1034 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1035 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1039 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Cluster` L1080 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.LaunchType` L1092 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1114 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1049 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1069 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Family` L1030 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1031 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1032 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1036 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L1042 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L1054 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1070 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L1022 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1023 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1024 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1028 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Cluster` L729 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.LaunchType` L742 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L495 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L564 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L576 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L577 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L584 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L586 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L510 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L521 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L533 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L538 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L540 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L545 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L546 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L789 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L798 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L812 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L814 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L819 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L821 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L826 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L616 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L641 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L643 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Family` L648 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Memory` L649 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L650 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L651 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L655 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L487 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L511 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L523 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L524 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L525 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L527 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Cluster` L670 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.LaunchType` L683 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L730 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L739 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L801 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L804 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ResourceId` L755 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ScalableDimension` L788 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ServiceNamespace` L789 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L557 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L582 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L584 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Family` L589 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Memory` L590 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L591 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L592 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L596 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L599 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L611 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L647 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L656 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L492 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L511 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L513 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L518 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L519 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L520 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L521 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L525 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Action` L140 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L142 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Principal` L147 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L149 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Endpoint` L16 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Protocol` L18 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.TopicArn` L20 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeployment0905F2A51149e52ed55821cdb6db0214e7f00a2c` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L77 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L97 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.StageName` L99 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.ParentId` L112 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.PathPart` L117 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L119 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L130 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L132 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L134 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L145 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.ResourceId` L158 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.RestApiId` L161 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L239 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Components` L50 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Components' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ContainerType` L76 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'ContainerType' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.DockerfileTemplateData` L77 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'DockerfileTemplateData' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Name` L78 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ParentImage` L80 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'ParentImage' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.TargetRepository` L91 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'TargetRepository' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Version` L97 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L30 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L31 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L32 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L33 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L6 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L7 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L8 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L9 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Name` L212 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Name` L188 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L18 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L19 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L20 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L21 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Action` L95 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Principal` L102 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.SourceArn` L104 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Action` L40 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.FunctionName` L42 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Principal` L47 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.SourceArn` L49 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.DashboardName` L150 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Property 'DashboardName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L86 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L93 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Content` L9 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Description` L15 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L70 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L62 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.FunctionName` L87 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeployment406A9BD66039252bdc49ee37076fc3c8f3a2eed8` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L207 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L229 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.StageName` L231 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L328 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.ResourceId` L360 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.RestApiId` L366 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Action` L243 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.FunctionName` L245 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Principal` L250 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.SourceArn` L252 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Action` L287 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.FunctionName` L289 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Principal` L294 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.SourceArn` L296 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.ParentId` L377 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.PathPart` L382 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L384 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Action` L648 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.FunctionName` L650 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Principal` L655 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.SourceArn` L657 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Action` L692 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L694 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Principal` L699 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L701 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L733 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.ResourceId` L762 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.RestApiId` L765 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L606 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.ResourceId` L635 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.RestApiId` L638 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Action` L521 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.FunctionName` L523 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Principal` L528 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.SourceArn` L530 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Action` L565 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.FunctionName` L567 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Principal` L572 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.SourceArn` L574 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L479 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.ResourceId` L508 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.RestApiId` L511 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Action` L394 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.FunctionName` L396 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Principal` L401 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.SourceArn` L403 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Action` L438 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.FunctionName` L440 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Principal` L445 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.SourceArn` L447 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.QueueName` L87 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Endpoint` L140 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Protocol` L135 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.TopicArn` L137 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.QueueName` L15 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Endpoint` L68 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Protocol` L63 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.TopicArn` L65 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L442 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L296 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeployment0A3D40CC3de72833f42963bffb25d554063d867d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L516 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L534 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.StageName` L548 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.ContentType` L694 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.Name` L695 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.RestApiId` L692 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.ContentType` L671 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.Name` L672 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.RestApiId` L669 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L558 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L563 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L565 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.ResourceId` L577 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.RestApiId` L580 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L176 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteDefaultRouteIntegration9F0AC785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L226 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteF9949FE6` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L245 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.FunctionName` L187 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.SourceArn` L194 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L268 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L270 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Name` L6 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Action` L173 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.FunctionName` L175 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Principal` L180 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.SourceArn` L182 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.FunctionName` L143 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.Qualifier` L145 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Qualifier' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Endpoint` L197 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Protocol` L192 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.TopicArn` L194 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.EventBusName` L463 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Action` L494 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.FunctionName` L496 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Principal` L501 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.SourceArn` L503 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Action` L345 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.FunctionName` L347 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Principal` L352 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.SourceArn` L354 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.EventBusName` L306 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentC364859Eae40584f53d9b7bb31907a57bb781ad3` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L577 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L595 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.StageName` L609 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.ContentType` L755 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.Name` L756 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.RestApiId` L753 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.ContentType` L732 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.Name` L733 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.RestApiId` L730 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L619 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L624 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L626 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L636 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.ResourceId` L638 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.RestApiId` L641 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeployment8F20C3E380de34421a04eed5e7cc4a28266c5690` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L247 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L265 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.StageName` L279 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.ContentType` L422 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.Name` L423 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.RestApiId` L420 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.ParentId` L289 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.PathPart` L294 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L296 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L306 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L308 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L311 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.ContentType` L399 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.Name` L400 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.RestApiId` L397 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L172 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L177 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L894 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L896 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L902 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Action` L854 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.FunctionName` L856 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Principal` L861 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.SourceArn` L863 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Action` L810 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.FunctionName` L812 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Principal` L817 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.SourceArn` L819 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeployment318525DA98cf1fe46f6a8379cb8241a5e412a297` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L634 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L651 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L656 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L666 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L671 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L673 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Action` L727 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.FunctionName` L729 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Principal` L734 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.SourceArn` L736 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Action` L683 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.FunctionName` L685 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Principal` L690 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.SourceArn` L692 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L767 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L769 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L772 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Action` L251 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.FunctionName` L253 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Principal` L258 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.SourceArn` L260 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Action` L401 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.FunctionName` L403 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Principal` L408 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.SourceArn` L410 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Action` L551 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.FunctionName` L553 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Principal` L558 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.SourceArn` L560 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Action` L718 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L720 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Principal` L725 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L727 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Action` L674 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.FunctionName` L676 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Principal` L681 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.SourceArn` L683 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L758 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L760 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L766 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeployment9F2A82FA10260421dc831e654354d72baa60bfb0` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L498 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L515 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.StageName` L520 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L530 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L535 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L537 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L631 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.ResourceId` L633 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.RestApiId` L636 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Action` L591 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.FunctionName` L593 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Principal` L598 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.SourceArn` L600 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Action` L547 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.FunctionName` L549 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Principal` L554 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.SourceArn` L556 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Action` L415 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.FunctionName` L417 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Principal` L422 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.SourceArn` L424 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L745 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L794 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L796 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Family` L801 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Memory` L802 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L803 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L804 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L808 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L213 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L216 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L544 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L542 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L528 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L531 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L511 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L480 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L475 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L477 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L625 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L623 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L592 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L609 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L612 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L561 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L556 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L558 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L298 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L331 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L337 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L267 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L284 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L287 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L236 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L231 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L233 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L422 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L420 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L453 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L459 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L389 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L406 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L409 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L353 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L355 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L652 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L1108 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Action` L1484 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.FunctionName` L1486 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Principal` L1491 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.SourceArn` L1493 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Action` L1626 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1628 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Principal` L1633 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1635 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Action` L1275 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.FunctionName` L1277 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Principal` L1282 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.SourceArn` L1284 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteCB8326BD` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L248 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteDefaultRouteIntegrationF55AEBDB` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L229 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L271 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Action` L1836 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L1838 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Principal` L1843 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L1845 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Action` L1792 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.FunctionName` L1794 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Principal` L1799 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.SourceArn` L1801 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1876 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1878 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1884 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeployment96972FE77ef5b9d25f9d7a35316435e48684bb49` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L1616 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L1633 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.StageName` L1638 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1648 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1653 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1655 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1749 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1751 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1754 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Action` L1709 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.FunctionName` L1711 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Principal` L1716 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.SourceArn` L1718 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Action` L1665 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.FunctionName` L1667 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Principal` L1672 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.SourceArn` L1674 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L679 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L681 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L687 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Action` L639 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.FunctionName` L641 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Principal` L646 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.SourceArn` L648 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Action` L595 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.FunctionName` L597 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Principal` L602 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.SourceArn` L604 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeployment318525DAd36b722f04bf6c9ce03a896415e5529d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L419 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L436 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L441 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L451 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L456 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L458 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Action` L512 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.FunctionName` L514 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Principal` L519 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.SourceArn` L521 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Action` L468 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.FunctionName` L470 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Principal` L475 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.SourceArn` L477 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L552 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L554 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L557 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L345 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Action` L193 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.FunctionName` L195 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Principal` L200 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.SourceArn` L202 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.ApiId` L157 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.Name` L162 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ApiDefaultApiKeyF991C37B` (AWS::AppSync::ApiKey) → `Properties.ApiId` L75 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.ApiId` L380 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.Name` L385 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.ApiId` L235 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.FieldName` L240 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.TypeName` L241 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.ApiId` L307 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.FieldName` L312 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.TypeName` L313 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.ApiId` L259 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.FieldName` L264 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.TypeName` L265 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.ApiId` L283 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.FieldName` L288 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.TypeName` L289 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.ApiId` L211 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.FieldName` L216 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.TypeName` L217 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.ApiId` L187 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.FieldName` L192 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.TypeName` L193 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.ApiId` L410 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.FieldName` L415 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.TypeName` L416 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiSchema510EECD7` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L60 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.KeySchema` L447 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `thesimplegraphqlserviceapikey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L434 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteB7B22F2B` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L248 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteDefaultRouteIntegration4584A785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L229 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L271 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultRoute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L295 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `Integ` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L267 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L190 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L244 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L254 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L256 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentDDF5787C50cd54e1b820c67ddfe6e24991b1dd3f` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L165 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L181 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.StageName` L201 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.ParentId` L211 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.PathPart` L216 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L218 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L312 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.ResourceId` L314 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.RestApiId` L317 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Action` L228 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Principal` L235 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Action` L272 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.FunctionName` L274 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Principal` L279 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.SourceArn` L281 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Scope` L9 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'Scope' is create-only; updating it will cause resource replacement +- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.ResourceArn` L106 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'ResourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.WebACLArn` L125 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'WebACLArn' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Action` L189 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.FunctionName` L191 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.SourceArn` L198 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Endpoint` L213 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Protocol` L208 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Region` L219 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.TopicArn` L210 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Action` L130 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.FunctionName` L132 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Principal` L137 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.SourceArn` L139 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Endpoint` L154 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Protocol` L149 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Region` L160 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.TopicArn` L151 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Action` L160 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.FunctionName` L162 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Principal` L167 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.SourceArn` L169 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Endpoint` L184 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Protocol` L179 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Region` L190 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.TopicArn` L181 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L354 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Action` L153 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.FunctionName` L155 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Principal` L160 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.SourceArn` L162 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Endpoint` L177 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Protocol` L172 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Region` L183 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.TopicArn` L174 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Action` L327 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.FunctionName` L329 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Principal` L334 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.SourceArn` L336 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Endpoint` L351 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Protocol` L346 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.TopicArn` L348 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentB3CB89A0a689bf68bef2302d0715c2d1a50794fc` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L76 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L95 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.StageName` L109 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.ContentType` L352 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.Name` L353 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.RestApiId` L350 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L119 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.ResourceId` L121 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.RestApiId` L127 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.ContentType` L329 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.Name` L330 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.RestApiId` L327 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.ParentId` L216 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.PathPart` L221 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L223 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L233 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.ResourceId` L235 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.RestApiId` L238 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeployment248C0700a88c9b4f7fb5eae343fa3265f3ea5ffe` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L134 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L154 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.StageName` L156 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L169 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L174 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L176 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.SourceArn` L238 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Action` L273 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.FunctionName` L275 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Principal` L280 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.SourceArn` L282 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L314 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.ResourceId` L359 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.RestApiId` L362 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L188 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.ResourceId` L216 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.RestApiId` L219 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentD1A021868a8af37caaafdc0f762b784f7555ad86` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L552 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L571 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.StageName` L573 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.ParentId` L586 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.PathPart` L591 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L593 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Action` L603 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.FunctionName` L605 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Principal` L610 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.SourceArn` L612 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Action` L647 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.FunctionName` L649 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Principal` L654 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.SourceArn` L656 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L688 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.ResourceId` L717 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.RestApiId` L720 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Action` L181 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.FunctionName` L183 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Principal` L188 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.SourceArn` L190 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Action` L291 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.FunctionName` L293 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Principal` L298 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.SourceArn` L300 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L149 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.ResourceId` L154 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.RestApiId` L160 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeployment621CA0B04c89657aa92ebebc2018c4cd4a761ecd` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L114 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L134 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.StageName` L136 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L171 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L176 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L178 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L189 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.ResourceId` L247 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.RestApiId` L250 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L359 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Database` L681 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Name` L682 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L683 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L684 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `gluecrawlerroleB13EEB29` (AWS::IAM::Role) → `Properties.RoleName` L555 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `logauditingworkgroup` (AWS::Athena::WorkGroup) → `Properties.Name` L618 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `logsbucketE18563D9` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `logsbucketPolicy6C60198C` (AWS::S3::BucketPolicy) → `Properties.Bucket` L42 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `logscrawler` (AWS::Glue::Crawler) → `Properties.Name` L571 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L651 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L652 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L653 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L654 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `queryoutputbucket3DDDB997` (AWS::S3::Bucket) → `Properties.BucketName` L185 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `queryoutputbucketPolicy2BC02580` (AWS::S3::BucketPolicy) → `Properties.Bucket` L216 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Content` L292 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Description` L298 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L666 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L667 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L668 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L669 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.RoleName` L19 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.RoleName` L83 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Description` L55 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Path` L56 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L11 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'S3BucketArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L26 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'S3BucketArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.DestinationLocationArn` L38 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'DestinationLocationArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.SourceLocationArn` L44 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'SourceLocationArn' is create-only; updating it will cause resource replacement +- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L256 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L273 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L291 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L303 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L304 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L311 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L313 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L131 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L147 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L21 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L32 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L34 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L39 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L41 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L46 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L95 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L98 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L100 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L101 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L102 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L117 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L222 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L240 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L168 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L169 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L187 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L198 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L200 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L205 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L207 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L212 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.RouteTableId` L305 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L287 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L290 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableF6513BC2` (AWS::EC2::RouteTable) → `Properties.VpcId` L276 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L235 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.VpcId` L259 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L381 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.RouteTableId` L386 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTable9AC81FAC` (AWS::EC2::RouteTable) → `Properties.VpcId` L357 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L368 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L371 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L316 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.CidrBlock` L323 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.VpcId` L340 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTable17DA183D` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTable3609F42C` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCVPCGWC9B93E30` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L414 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L98 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Engine` L100 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L115 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `RDSSecretAttachment39FC3A79` (AWS::SecretsManager::SecretTargetAttachment) → `Properties.SecretId` L80 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'SecretId' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L7 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L25 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `efsstorage` (AWS::EFS::FileSystem) → `Properties.Encrypted` L6 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'Encrypted' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L15 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L16 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L34 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Action` L314 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.FunctionName` L316 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Principal` L321 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.SourceArn` L323 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Action` L292 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.FunctionName` L294 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Principal` L299 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.SourceArn` L301 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L1012 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupPlanId' is create-only; updating it will cause resource replacement +- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L1017 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupSelection' is create-only; updating it will cause resource replacement +- **I9001** `BackupVault3A9C5852` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L939 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupVaultName' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L606 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.ImageId` L617 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.InstanceType` L619 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L620 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SubnetId` L629 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.UserData` L638 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L504 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L528 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Action` L828 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.FunctionName` L830 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Principal` L835 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.SourceArn` L837 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L652 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L653 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L685 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableB5578A45` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTable5CB16C6C` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTable0BDD81D8` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableF7A722BD` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L475 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L492 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L494 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKVPCGW6C4E6589` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L735 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L742 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.ImageId` L756 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.InstanceType` L758 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.KeyName` L759 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L760 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SubnetId` L769 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.UserData` L778 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTable3887499F` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTable30EC1F5C` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableC0F77754` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTable5A43F858` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCVPCGW60A84FEA` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.RepositoryName` L17 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.RepositoryName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Cluster` L474 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.LaunchType` L482 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.ServiceName` L518 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L337 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L366 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L368 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Family` L373 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Memory` L374 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L375 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L376 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L380 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.ClusterName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Name` L29 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Vpc` L31 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Vpc' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L219 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L252 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L257 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L259 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L264 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L42 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L602 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L619 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L637 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Cluster` L402 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.LaunchType` L411 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.ServiceName` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L273 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L302 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L304 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Family` L309 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Memory` L310 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L311 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L312 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L316 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.ListenerArn` L668 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ListenerArn' is create-only; updating it will cause resource replacement +- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L551 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L566 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L567 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L568 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L582 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Applications` L317 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Applications' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Configurations` L322 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Configurations' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.JobFlowRole` L365 in `cdk_py-emr--emr-cluster.template_json` + > Property 'JobFlowRole' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.LogUri` L367 in `cdk_py-emr--emr-cluster.template_json` + > Property 'LogUri' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Name` L378 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ReleaseLabel` L379 in `cdk_py-emr--emr-cluster.template_json` + > Property 'ReleaseLabel' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ServiceRole` L381 in `cdk_py-emr--emr-cluster.template_json` + > Property 'ServiceRole' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Steps` L383 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Steps' is create-only; updating it will cause resource replacement +- **I9001** `emrjobflowprofile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L303 in `cdk_py-emr--emr-cluster.template_json` + > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement +- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-emr--emr-cluster.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `vpcVPCGW7984C166` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L210 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-emr--emr-cluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableA38152FE` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-emr--emr-cluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-emr--emr-cluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_py-emr--emr-cluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableA6135437` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_py-emr--emr-cluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_py-emr--emr-cluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.PolicyName` L416 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.Principal` L418 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.Principal` L448 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.ThingName` L469 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ThingName' is create-only; updating it will cause resource replacement +- **I9001** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.FunctionName` L76 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L519 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `CfnPolicy` (AWS::IoT::Policy) → `Properties.PolicyName` L407 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `CfnRole` (AWS::IAM::Role) → `Properties.RoleName` L510 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `IoTCertCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L339 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MyCdkThing` (AWS::IoT::Thing) → `Properties.ThingName` L6 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ThingName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L86 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L93 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.FunctionName` L51 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.PackageType` L53 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Content` L11 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Description` L17 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L452 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.ResourceId` L477 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.RestApiId` L483 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Action` L419 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.FunctionName` L421 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Principal` L426 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.SourceArn` L428 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Action` L383 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.FunctionName` L385 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Principal` L390 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.SourceArn` L392 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeployment97FF782966d8a7a27285a49d048d420aab9f3106` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L224 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L244 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.StageName` L246 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.DomainName` L493 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDomainMapurlshortappUrlShortenerApiB1BAB0CD7C6BCC1C` (AWS::ApiGateway::BasePathMapping) → `Properties.DomainName` L509 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L259 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L264 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L266 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L345 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L370 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L373 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Action` L312 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.FunctionName` L314 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.SourceArn` L321 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Action` L276 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.FunctionName` L278 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Principal` L283 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.SourceArn` L285 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L539 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.Name` L540 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L47 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L49 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Family` L54 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Memory` L55 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L61 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L185 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L193 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Cluster` L139 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.LaunchType` L152 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L317 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement +- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L324 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L471 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'Direction' is create-only; updating it will cause resource replacement +- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L484 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement +- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L407 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'Direction' is create-only; updating it will cause resource replacement +- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L420 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTable6E169019` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTable0899A697` (AWS::EC2::RouteTable) → `Properties.VpcId` L132 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L143 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L146 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L91 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.VpcId` L115 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L436 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L461 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L334 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L397 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Action` L103 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.FunctionName` L105 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Principal` L110 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceAccount` L112 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceArn` L115 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.KeySchema` L134 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L433 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L444 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L336 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L351 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L401 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L404 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L406 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L407 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L416 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L83 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L86 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L293 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L298 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L280 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L283 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L269 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L228 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L235 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L252 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L167 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L172 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L201 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L207 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L154 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L157 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L143 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L102 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L109 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L126 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L326 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L510 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L523 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L466 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResolverQueryLogConfigId` L494 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'ResolverQueryLogConfigId' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResourceId` L497 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.DestinationArn` L479 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationArn' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Name` L484 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Name` L549 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L559 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L564 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Bucket` L193 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Name` L195 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `examplebucketPolicyE09B485E` (AWS::S3::BucketPolicy) → `Properties.Bucket` L33 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Action` L171 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.FunctionName` L173 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.SourceAccount` L182 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `s3ObjectLambdaAP` (AWS::S3ObjectLambda::AccessPoint) → `Properties.Name` L238 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.CidrBlock` L71 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L74 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMDocumentTestVpcVPCGW7C58FC59` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L191 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L155 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.RouteTableId` L160 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTable4C0F352E` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L97 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L405 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.ImageId` L416 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.InstanceType` L418 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L419 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SubnetId` L428 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.UserData` L441 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L362 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L381 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Content` L6 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.DocumentType` L36 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Name` L37 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Content` L133 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Description` L139 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicWebsiteBucketPolicy8E799A1F` (AWS::S3::BucketPolicy) → `Properties.Bucket` L36 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L107 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L6 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeployment77C863276f473a57d5bd4cb772b382f83651c7a2` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L139 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L158 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.StageName` L160 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.ParentId` L170 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.PathPart` L175 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L177 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L234 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L319 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L322 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Name` L11 in `gh-issues_issue-144_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Source.Name` L13 in `gh-issues_issue-144_yaml` + > Property 'Source.Name' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Action` L32 in `gh-issues_issue-183_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L33 in `gh-issues_issue-183_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L34 in `gh-issues_issue-183_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L35 in `gh-issues_issue-183_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Action` L22 in `gh-issues_issue-183_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L23 in `gh-issues_issue-183_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L24 in `gh-issues_issue-183_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L25 in `gh-issues_issue-183_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L15 in `gh-issues_issue-186-clb_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L19 in `gh-issues_issue-186-clb_json` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ImagePipeline7DDDE57F` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L24 in `gh-issues_issue-186-imagebuilder_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L24 in `gh-issues_issue-226_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `gh-issues_issue-226_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L68 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L69 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Engine` L143 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Engine` L138 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L190 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceAutomatedBackupsArn` L191 in `gh-issues_issue-235_yaml` + > Property 'SourceDBInstanceAutomatedBackupsArn' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L27 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.StorageEncrypted` L28 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L149 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Engine` L148 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBClusterSnapshotIdentifier` L167 in `gh-issues_issue-235_yaml` + > Property 'DBClusterSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L166 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L80 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L79 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L56 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L57 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L62 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L63 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L227 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L226 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L228 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L109 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L110 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L220 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L219 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L221 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L85 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L86 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L202 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L91 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L92 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L207 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L208 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L115 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L116 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Engine` L133 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L121 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L122 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L161 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Engine` L160 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Engine` L172 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L173 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L74 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L44 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L45 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L127 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L128 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.KmsKeyId` L39 in `gh-issues_issue-235_yaml` + > Property 'KmsKeyId' is create-only; updating it will cause resource replacement +- **I9001** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Engine` L213 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L155 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L154 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L196 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBClusterIdentifier` L197 in `gh-issues_issue-235_yaml` + > Property 'SourceDBClusterIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L178 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceIdentifier` L179 in `gh-issues_issue-235_yaml` + > Property 'SourceDBInstanceIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L184 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.SourceDbiResourceId` L185 in `gh-issues_issue-235_yaml` + > Property 'SourceDbiResourceId' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L50 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L51 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L103 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L104 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L97 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L98 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L20 in `gh-issues_issue-246_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.Name` L21 in `gh-issues_issue-246_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L6 in `gh-issues_issue-247_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L12 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L21 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.Name` L22 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L30 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L57 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L58 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L66 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.Name` L67 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L75 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L48 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L49 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L39 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L40 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-34_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-34_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `gh-issues_issue-34_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `gh-issues_issue-34_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L11 in `gh-issues_issue-36_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `gh-issues_issue-37_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L6 in `gh-issues_issue-37_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L7 in `gh-issues_issue-37_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Name` L6 in `gh-issues_issue-38_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-39_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L12 in `gh-issues_issue-39_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L35 in `gh-issues_issue-39_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L16 in `gh-issues_issue-40_yaml` + > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement +- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.NodeType` L17 in `gh-issues_issue-40_yaml` + > Property 'NodeType' is create-only; updating it will cause resource replacement +- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L28 in `gh-issues_issue-40_yaml` + > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement +- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.NodeType` L29 in `gh-issues_issue-40_yaml` + > Property 'NodeType' is create-only; updating it will cause resource replacement +- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.Name` L5 in `gh-issues_issue-40_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.RoleArn` L6 in `gh-issues_issue-40_yaml` + > Property 'RoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-41_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L35 in `gh-issues_issue-42-if_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L28 in `gh-issues_issue-42-if_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L29 in `gh-issues_issue-42-if_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L30 in `gh-issues_issue-42-if_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `gh-issues_issue-42-if_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L18 in `gh-issues_issue-42-if_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L30 in `gh-issues_issue-42-ref_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L23 in `gh-issues_issue-42-ref_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L24 in `gh-issues_issue-42-ref_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L25 in `gh-issues_issue-42-ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `gh-issues_issue-42-ref_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `gh-issues_issue-42-ref_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L23 in `gh-issues_issue-42_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L16 in `gh-issues_issue-42_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L17 in `gh-issues_issue-42_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L18 in `gh-issues_issue-42_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `gh-issues_issue-42_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `gh-issues_issue-42_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L7 in `gh-issues_issue-45_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L6 in `gh-issues_issue-45_json` + > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L8 in `gh-issues_issue-45_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.RoleArn` L7 in `gh-issues_issue-46_json` + > Property 'RoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-47_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.DBClusterIdentifier` L11 in `gh-issues_issue-49_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-49_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-49_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L6 in `gh-issues_issue-52_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L7 in `gh-issues_issue-52_json` + > Property 'NodeRole' is create-only; updating it will cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Subnets` L8 in `gh-issues_issue-52_json` + > Property 'Subnets' is create-only; updating it will cause resource replacement +- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L596 in `gh-issues_issue-53_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L605 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.AmiType` L957 in `gh-issues_issue-53_json` + > Property 'AmiType' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L959 in `gh-issues_issue-53_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.InstanceTypes` L962 in `gh-issues_issue-53_json` + > Property 'InstanceTypes' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L966 in `gh-issues_issue-53_json` + > Property 'NodeRole' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Subnets` L976 in `gh-issues_issue-53_json` + > Property 'Subnets' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Content` L462 in `gh-issues_issue-53_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Description` L468 in `gh-issues_issue-53_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.LicenseInfo` L469 in `gh-issues_issue-53_json` + > Property 'LicenseInfo' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `gh-issues_issue-53_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L334 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.RouteTableId` L339 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTable886260DA` (AWS::EC2::RouteTable) → `Properties.VpcId` L316 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L324 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L327 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L270 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.VpcId` L298 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L411 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.RouteTableId` L416 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTable1EDE83AC` (AWS::EC2::RouteTable) → `Properties.VpcId` L393 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L401 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L404 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L347 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.CidrBlock` L354 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.VpcId` L375 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L86 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.RouteTableId` L91 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.AllocationId` L118 in `gh-issues_issue-53_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.SubnetId` L124 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTable5F0A6273` (AWS::EC2::RouteTable) → `Properties.VpcId` L68 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L22 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.VpcId` L50 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L210 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.RouteTableId` L215 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.AllocationId` L242 in `gh-issues_issue-53_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.SubnetId` L248 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L200 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L203 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableEC6A2C2A` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L146 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L153 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcVPCGWEFD8AF3B` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L438 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `WeakConsumer` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `gh-issues_issue-56_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `Canary` (AWS::Synthetics::Canary) → `Properties.Name` L6 in `gh-issues_issue-62_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-65_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Action` L18 in `gh-issues_issue-65_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.FunctionName` L19 in `gh-issues_issue-65_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Principal` L20 in `gh-issues_issue-65_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.SourceAccount` L21 in `gh-issues_issue-65_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L6 in `gh-issues_issue-67_json` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `gh-issues_issue-68_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MyFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L7 in `gh-issues_issue-68_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CompoundSub` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRight` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `good_E9001_aws_cdk_metadata_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L8 in `good_W3010_getazs_not_flagged_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_W3010_getazs_not_flagged_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_W3010_getazs_not_flagged_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_W3010_getazs_not_flagged_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Authorizer1` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L19 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Deployment1` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L36 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L27 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L26 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L25 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L40 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.StageName` L42 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L9 in `good_aurora_dbinstance_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `good_aurora_dbinstance_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `good_aurora_dbinstance_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BucketLong` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `good_both_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketShort` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_both_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_complex_conditions_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L41 in `good_complex_conditions_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_complex_conditions_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L37 in `good_complex_conditions_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L39 in `good_complex_conditions_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DevBucket` (AWS::S3::Bucket) → `Properties.BucketName` L46 in `good_complex_conditions_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `good_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L96 in `good_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L91 in `good_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `good_core_conditions_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L37 in `good_core_conditions_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L67 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L69 in `good_core_conditions_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `good_core_conditions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `good_core_conditions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_core_config_default_e3012_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `good_core_config_default_e3012_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L63 in `good_core_resource_attributes_yaml` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.BucketName` L82 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DependsOnList` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_is-defined_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_custom_is-not-defined_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-large_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-small_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L14 in `good_deletion_policies_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.Engine` L10 in `good_deletion_policies_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L11 in `good_deletion_policies_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `good_dynamodb_provisioned_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_provisioned_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_dynamodb_valid_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_valid_attributes_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `good_ecs_awsvpc_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `good_ecs_awsvpc_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L203 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L201 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L202 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L200 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L199 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L155 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L153 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L154 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L152 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L151 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L191 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L189 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L190 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L188 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L187 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L143 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L141 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L142 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L140 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L139 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L177 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.KeySchema` L166 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L112 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L108 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L129 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L127 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L123 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L128 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L126 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L124 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L70 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L67 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L63 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L68 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L66 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L69 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L64 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Family` L48 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L51 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L49 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L81 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.TableName` L79 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L97 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.TableName` L92 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L17 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L15 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L16 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L14 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L37 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L35 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Family` L31 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Memory` L36 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L34 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L32 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L114 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L108 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Family` L105 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Memory` L109 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L110 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L106 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L24 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L25 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L16 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L48 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L43 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L40 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L44 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L42 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L41 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L80 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L72 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L73 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L64 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L56 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L60 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L58 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L96 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L90 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `good_ecs_fargate_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `good_ecs_fargate_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `good_ecs_fargate_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L19 in `good_ecs_fargate_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L10 in `good_ecs_fargate_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L11 in `good_ecs_fargate_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L7 in `good_ecs_fargate_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L16 in `good_enum_case_insensitive_casing_yaml` + > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L18 in `good_enum_case_insensitive_casing_yaml` + > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L20 in `good_enum_case_insensitive_casing_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `good_enum_case_insensitive_casing_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L27 in `good_enum_case_insensitive_casing_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L25 in `good_enum_case_insensitive_casing_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L19 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L35 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L12 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster0` (AWS::ECS::Cluster) → `Properties.ClusterName` L14 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster1` (AWS::ECS::Cluster) → `Properties.ClusterName` L22 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L30 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L38 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.MeshName` L46 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.MeshName` L62 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L73 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.MeshName` L84 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.MeshName` L96 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L49 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L81 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L103 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh` (AWS::AppMesh::Mesh) → `Properties.MeshName` L23 in `good_functions_findinmap_enhanced_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L36 in `good_functions_findinmap_enhanced_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L62 in `good_functions_findinmap_enhanced_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L27 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.ApplicationId` L31 in `good_functions_relationship_conditions_sam_yaml` + > Property 'ApplicationId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L31 in `good_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `good_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_functions_select_string_index_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_functions_select_string_index_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L22 in `good_functions_select_string_index_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_functions_select_string_index_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L28 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TestRole` (AWS::IAM::Role) → `Properties.RoleName` L10 in `good_functions_sub_needed_custom_excludes_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L90 in `good_functions_sub_needed_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.ResourceId` L114 in `good_functions_sub_needed_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.RestApiId` L115 in `good_functions_sub_needed_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `IOTPolicies` (AWS::IoT::Policy) → `Properties.PolicyName` L121 in `good_functions_sub_needed_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L57 in `good_functions_sub_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L58 in `good_functions_sub_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L60 in `good_functions_sub_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Name` L52 in `good_functions_sub_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L33 in `good_functions_sub_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L35 in `good_functions_sub_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVPc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L73 in `good_functions_sub_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L125 in `good_generic_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L133 in `good_generic_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L79 in `good_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L75 in `good_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L76 in `good_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L77 in `good_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L86 in `good_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L88 in `good_generic_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L98 in `good_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L95 in `good_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `good_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.KeyName` L97 in `good_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L106 in `good_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.UserData` L114 in `good_generic_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L69 in `good_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L45 in `good_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_getazs_resolves_current_regions_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_getazs_resolves_current_regions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_getazs_resolves_current_regions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_getazs_resolves_current_regions_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_getazs_resolves_current_regions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_getazs_resolves_current_regions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.PolicyName` L66 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.UserName` L65 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.RoleName` L17 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L76 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'InstanceArn' is create-only; updating it will cause resource replacement +- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Name` L77 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `good_lambda_permission_source_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `good_lambda_permission_source_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `good_lambda_permission_source_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `good_lambda_permission_source_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L12 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L13 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L14 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L15 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_snapstart_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_zipfile_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `good_mappings_used_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `good_mappings_used_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `good_no_value_yaml` + > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `good_no_value_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `good_no_value_yaml` + > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `good_no_value_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `good_no_value_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `good_no_value_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L145 in `good_no_value_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L148 in `good_no_value_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `good_no_value_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `good_no_value_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.AvailabilityZones` L12 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'AvailabilityZones' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.DBClusterIdentifier` L9 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.MasterUsername` L10 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `good_override_complete_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_complete_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L13 in `good_override_complete_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_required_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L20 in `good_parameters_not_used_parameters_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L21 in `good_parameters_not_used_parameters_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L23 in `good_parameters_not_used_parameters_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L23 in `good_parameters_used_transforms_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L24 in `good_parameters_used_transforms_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L26 in `good_parameters_used_transforms_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.CidrBlock` L58 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.VpcId` L61 in `good_properties_ec2_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.CidrBlock` L65 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `good_properties_ec2_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L32 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L33 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L38 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L37 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.CidrBlock` L43 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L42 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.CidrBlock` L48 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L47 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.CidrBlock` L53 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L52 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L41 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L43 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L32 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L34 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L64 in `good_properties_rt_association_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L70 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L71 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L49 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L51 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L57 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L59 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NatGW` (AWS::EC2::NatGateway) → `Properties.SubnetId` L30 in `good_redshift_private_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L35 in `good_redshift_private_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L34 in `good_redshift_private_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `good_redshift_private_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `good_redshift_private_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `good_redshift_private_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `good_redshift_private_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `good_redshift_private_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `good_redshift_private_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.DBName` L9 in `good_redshift_valid_nodetype_yaml` + > Property 'DBName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.MasterUsername` L7 in `good_redshift_valid_nodetype_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.ProjectArn` L14 in `good_region_conditional_resource_type_yaml` + > Property 'ProjectArn' is create-only; updating it will cause resource replacement +- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `good_resources_codepipeline_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `good_resources_dynamodb_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L47 in `good_resources_dynamodb_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedIndex` (AWS::DynamoDB::Table) → `Properties.KeySchema` L31 in `good_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L55 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L60 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L126 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L130 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L109 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L113 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L27 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L35 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L44 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L19 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L74 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L80 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L143 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L147 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L93 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L99 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `good_resources_iam_managed_policy_description_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `good_resources_iam_policy_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `good_resources_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `good_resources_iam_ref_with_path_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `good_resources_iam_ref_with_path_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `good_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `good_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L74 in `good_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `good_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Function3` (AWS::Lambda::Function) → `Properties.PackageType` L29 in `good_resources_lambda_required_properties_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `good_resources_name_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Action` L92 in `good_resources_primary_identifiers_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.FunctionName` L91 in `good_resources_primary_identifiers_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Principal` L93 in `good_resources_primary_identifiers_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Action` L98 in `good_resources_primary_identifiers_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `good_resources_primary_identifiers_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Principal` L99 in `good_resources_primary_identifiers_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L40 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L41 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L63 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L64 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.Path` L9 in `good_resources_properties_allowed_pattern_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.RoleName` L8 in `good_resources_properties_allowed_pattern_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L8 in `good_resources_properties_az_cdk_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.VpcId` L7 in `good_resources_properties_az_cdk_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L12 in `good_resources_properties_exclusive_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L6 in `good_resources_properties_exclusive_yaml` + > Property 'CidrIp' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L8 in `good_resources_properties_exclusive_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L7 in `good_resources_properties_exclusive_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L5 in `good_resources_properties_exclusive_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L39 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.PipelineName` L89 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'PipelineName' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L41 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `Authorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L6 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L21 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L45 in `good_resources_properties_password_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Engine` L29 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L30 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L39 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L10 in `good_resources_properties_templated_code_yaml` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L26 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L12 in `good_resources_rds_not_enum_master_username_parameter_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L13 in `good_resources_rds_not_enum_master_username_parameter_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_resources_s3_access-control-obsolete_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L13 in `good_resources_s3_access-control-obsolete_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L15 in `good_resources_update_policy_supported_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L16 in `good_resources_update_policy_supported_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `good_resources_update_policy_supported_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.FunctionName` L23 in `good_resources_update_policy_supported_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.Name` L25 in `good_resources_update_policy_supported_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `good_resources_update_policy_supported_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GroupBothBranchesValid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L36 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMutuallyExclusiveCnameItems` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupUnreachableInvalid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L51 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L13 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.Name` L14 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L65 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.Name` L66 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L25 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.Name` L26 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `good_route53_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `good_route53_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `good_route53_conditional_record_items_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L14 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.Name` L15 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L61 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.Name` L62 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L30 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L16 in `good_schema_required_xor_resource_condition_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L19 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L20 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L18 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L21 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `good_schema_valid_resources_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_simple_sub_prefix_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L76 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `good_sqs_fifo_valid_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `good_sqs_fifo_valid_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `good_ssm_document_valid_yaml` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `good_ssm_document_valid_yaml` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `good_ssm_parameter_name_type_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `good_stackset_conditional_template_source_yaml` + > Property 'PermissionModel' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `good_stackset_conditional_template_source_yaml` + > Property 'StackSetName' is create-only; updating it will cause resource replacement +- **I9001** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.BucketName` L44 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L38 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_sub_not_needed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L99 in `good_transform_language_extension_yaml` + > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `good_transform_language_extension_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L97 in `good_transform_language_extension_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L58 in `good_transform_language_extension_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L91 in `good_transform_language_extension_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L92 in `good_transform_language_extension_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L25 in `good_vpc_subnets_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L26 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `good_vpc_subnets_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_vpc_subnets_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L7 in `integration_availability-zones_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L5 in `integration_availability-zones_yaml` + > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `integration_availability-zones_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L11 in `integration_availability-zones_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.TableName` L12 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L35 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.TableName` L31 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.KeySchema` L59 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.TableName` L50 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `integration_aws-ec2-instance_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L12 in `integration_aws-ec2-instance_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L13 in `integration_aws-ec2-instance_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L7 in `integration_aws-ec2-instance_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L14 in `integration_aws-ec2-launchtemplate_yaml` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L14 in `integration_aws-ec2-networkinterface_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L10 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L8 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L14 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L19 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L24 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.Ipv6CidrBlock` L25 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv6CidrBlock' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L23 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L30 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L31 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L32 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.VpcId` L29 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L112 in `integration_cfn-gather_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L113 in `integration_cfn-gather_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `integration_cfn-gather_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L27 in `integration_cfn-gather_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L118 in `integration_cfn-gather_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L120 in `integration_cfn-gather_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CognitoAuthorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L57 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Deployment` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L78 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `FargateService` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `integration_cfn-gather_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L105 in `integration_cfn-gather_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `FifoProcessor` (AWS::Lambda::Function) → `Properties.FunctionName` L94 in `integration_cfn-gather_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L40 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L41 in `integration_cfn-gather_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L67 in `integration_cfn-gather_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.ResourceId` L66 in `integration_cfn-gather_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.RestApiId` L65 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L89 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L90 in `integration_cfn-gather_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L82 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.StageName` L84 in `integration_cfn-gather_yaml` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `StandardDLQ` (AWS::SQS::Queue) → `Properties.FifoQueue` L48 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `integration_cfn-gather_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `integration_cfn-gather_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L8 in `integration_cfn-gather_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L11 in `integration_custom-resources_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Affinity` L34 in `integration_deployment-file-template_yaml` + > Property 'Affinity' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `integration_deployment-file-template_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L36 in `integration_deployment-file-template_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L37 in `integration_deployment-file-template_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Tenancy` L38 in `integration_deployment-file-template_yaml` + > Property 'Tenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L28 in `integration_deployment-file-template_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `integration_deployment-file-template_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L30 in `integration_deployment-file-template_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L24 in `integration_deployment-file-template_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L30 in `integration_dynamic-references_yaml` + > Property 'BrokerName' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L24 in `integration_dynamic-references_yaml` + > Property 'DeploymentMode' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L25 in `integration_dynamic-references_yaml` + > Property 'EngineType' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L31 in `integration_dynamic-references_yaml` + > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L9 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L16 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L37 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `integration_formats_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L29 in `integration_formats_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L30 in `integration_formats_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `integration_formats_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L22 in `integration_formats_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `integration_formats_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `integration_formats_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `integration_formats_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.AvailabilityZone` L10 in `integration_getatt-types_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstancePlatform` L13 in `integration_getatt-types_yaml` + > Property 'InstancePlatform' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstanceType` L12 in `integration_getatt-types_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L57 in `integration_getatt-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L68 in `integration_getatt-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L69 in `integration_getatt-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Memory` L70 in `integration_getatt-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L71 in `integration_getatt-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `integration_getatt-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L74 in `integration_getatt-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L116 in `integration_ref-types_yaml` + > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L114 in `integration_ref-types_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L115 in `integration_ref-types_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L117 in `integration_ref-types_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L59 in `integration_ref-types_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L58 in `integration_ref-types_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L49 in `integration_ref-types_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L50 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L54 in `integration_ref-types_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L39 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L40 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L44 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L45 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `integration_ref-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L104 in `integration_ref-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L105 in `integration_ref-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Memory` L106 in `integration_ref-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `integration_ref-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L108 in `integration_ref-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L110 in `integration_ref-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L72 in `integration_ref-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L83 in `integration_ref-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L84 in `integration_ref-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Memory` L85 in `integration_ref-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L86 in `integration_ref-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `integration_ref-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L89 in `integration_ref-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L35 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L94 in `integration_resources-cloudformation-init_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L118 in `issues_sam_w_conditions_yaml` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `issues_sam_w_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L345 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L343 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L334 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L332 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L391 in `issues_sam_w_conditions_yaml` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L390 in `issues_sam_w_conditions_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L392 in `issues_sam_w_conditions_yaml` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L393 in `issues_sam_w_conditions_yaml` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L139 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L138 in `issues_sam_w_conditions_yaml` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Path` L140 in `issues_sam_w_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `TenantInfoReadPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L154 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L220 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L218 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L209 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L207 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L266 in `issues_sam_w_conditions_yaml` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L265 in `issues_sam_w_conditions_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L267 in `issues_sam_w_conditions_yaml` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L268 in `issues_sam_w_conditions_yaml` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L567 in `lsp_comprehensive_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L569 in `lsp_comprehensive_json` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L583 in `lsp_comprehensive_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L492 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L494 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L674 in `lsp_comprehensive_json` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L636 in `lsp_comprehensive_json` + > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L647 in `lsp_comprehensive_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L664 in `lsp_comprehensive_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L681 in `lsp_comprehensive_json` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L658 in `lsp_comprehensive_json` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L848 in `lsp_comprehensive_json` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L719 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L737 in `lsp_comprehensive_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L804 in `lsp_comprehensive_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L510 in `lsp_comprehensive_json` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L403 in `lsp_comprehensive_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L395 in `lsp_comprehensive_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L392 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L879 in `lsp_comprehensive_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L364 in `lsp_comprehensive_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L444 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L446 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L238 in `lsp_comprehensive_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L239 in `lsp_comprehensive_yaml` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L243 in `lsp_comprehensive_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L205 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L206 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L280 in `lsp_comprehensive_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L269 in `lsp_comprehensive_yaml` + > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L271 in `lsp_comprehensive_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L276 in `lsp_comprehensive_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L281 in `lsp_comprehensive_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L370 in `lsp_comprehensive_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L294 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L295 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L306 in `lsp_comprehensive_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L344 in `lsp_comprehensive_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L217 in `lsp_comprehensive_yaml` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L161 in `lsp_comprehensive_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L160 in `lsp_comprehensive_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L159 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L391 in `lsp_comprehensive_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L143 in `lsp_comprehensive_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L177 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L178 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L106 in `lsp_condition-usage_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L95 in `lsp_condition-usage_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L96 in `lsp_condition-usage_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L87 in `lsp_condition-usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L59 in `lsp_condition-usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L107 in `lsp_condition-usage_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.SecurityGroups` L109 in `lsp_condition-usage_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L96 in `lsp_condition-usage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L97 in `lsp_condition-usage_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L143 in `lsp_condition-usage_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L89 in `lsp_condition-usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L171 in `lsp_condition-usage_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `NestedConditionResource` (AWS::S3::BucketPolicy) → `Properties.Bucket` L150 in `lsp_condition-usage_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_condition-usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L137 in `lsp_condition-usage_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `lsp_constants_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L43 in `lsp_constants_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `lsp_constants_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `lsp_constants_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L50 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L66 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L36 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L48 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L53 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket6` (AWS::S3::Bucket) → `Properties.BucketName` L59 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket7` (AWS::S3::Bucket) → `Properties.BucketName` L64 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L133 in `public_lambda-poller_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L192 in `public_lambda-poller_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L194 in `public_lambda-poller_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `public_lambda-poller_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L198 in `public_lambda-poller_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L37 in `public_lambda-poller_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L172 in `public_lambda-poller_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L197 in `public_lambda-poller_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L198 in `public_lambda-poller_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L199 in `public_lambda-poller_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L200 in `public_lambda-poller_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L27 in `public_lambda-poller_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.DatabaseName` L23 in `public_rds-cluster_yaml` + > Property 'DatabaseName' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L24 in `public_rds-cluster_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.EngineMode` L25 in `public_rds-cluster_yaml` + > Property 'EngineMode' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L21 in `public_rds-cluster_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L1342 in `public_watchmaker_json` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.ImageId` L1399 in `public_watchmaker_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L1402 in `public_watchmaker_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.KeyName` L1405 in `public_watchmaker_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1407 in `public_watchmaker_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.UserData` L1452 in `public_watchmaker_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1691 in `public_watchmaker_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2046 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L2202 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L2187 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1985 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Action` L1090 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1089 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1091 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Action` L974 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L973 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Action` L1187 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1186 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1188 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Action` L1366 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1365 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1367 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Action` L768 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L767 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L769 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Action` L858 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L857 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L859 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Action` L1269 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1268 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1270 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Action` L674 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L673 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Principal` L675 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Action` L559 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L558 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L560 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Action` L489 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L488 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Principal` L490 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Action` L1558 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1557 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1559 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEncryptedVolumes` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L373 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L983 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrailBucket` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1099 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrailLogIntegrity` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1197 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateConfigInAllRegions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1481 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateKeyRotations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1376 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluatePolicyPermissions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L777 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateRootAccount` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L328 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateUserPolicyAssociations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L867 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForIamPasswordPolicy` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L202 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForInstanceRoleUses` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1279 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForMfaForUsers` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L681 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L342 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForRestrictedSsh` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L389 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L405 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcDefaultSecurityGroupss` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L569 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcFlowLogs` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L588 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcPeeringRouteTabless` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1568 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1775 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleLoginFailureCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1761 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1738 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleSigninWithoutMfaCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1722 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Name` L1938 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Name` L1907 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2070 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L1473 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L1472 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L1474 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L318 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L317 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1003 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1120 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.FunctionName` L890 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1398 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1302 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L703 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.FunctionName` L231 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L799 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1217 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.FunctionName` L610 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L501 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.FunctionName` L425 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1503 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.FunctionName` L2255 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.FunctionName` L1860 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.FunctionName` L124 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.FunctionName` L1603 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1700 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `IAMRootActivityCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1685 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2008 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1812 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `KMSCustomerKeyDeletionCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1798 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1963 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Action` L1898 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.FunctionName` L1897 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Principal` L1899 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Action` L2343 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.FunctionName` L2342 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Principal` L2344 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2121 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2151 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Name` L2349 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2093 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.TopicName` L1589 in `quickstart_cis_benchmark_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1662 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `UnauthorizedAttemptsCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1651 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L233 in `quickstart_config-rules_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `quickstart_config-rules_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L234 in `quickstart_config-rules_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L325 in `quickstart_config-rules_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L323 in `quickstart_config-rules_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L326 in `quickstart_config-rules_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L301 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L63 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L48 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L83 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L133 in `quickstart_config-rules_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L110 in `quickstart_config-rules_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L141 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L213 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L326 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L47 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L144 in `quickstart_nat-instance_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L150 in `quickstart_nat-instance_json` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.ImageId` L130 in `quickstart_nat-instance_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L97 in `quickstart_nat-instance_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.KeyName` L101 in `quickstart_nat-instance_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L132 in `quickstart_nat-instance_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.UserData` L112 in `quickstart_nat-instance_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNatInstanceEni` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L79 in `quickstart_nat-instance_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L157 in `quickstart_nat-instance_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.RouteTableId` L159 in `quickstart_nat-instance_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L379 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L381 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L383 in `quickstart_nist_application_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L384 in `quickstart_nist_application_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L387 in `quickstart_nist_application_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L509 in `quickstart_nist_application_yaml` + > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L511 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L513 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L515 in `quickstart_nist_application_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L516 in `quickstart_nist_application_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L519 in `quickstart_nist_application_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingDownApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L564 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingDownWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L572 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L585 in `quickstart_nist_application_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L598 in `quickstart_nist_application_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L611 in `quickstart_nist_application_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L624 in `quickstart_nist_application_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingUpApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L632 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingUpWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L640 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L734 in `quickstart_nist_application_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L745 in `quickstart_nist_application_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L748 in `quickstart_nist_application_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L770 in `quickstart_nist_application_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L783 in `quickstart_nist_application_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.ImageId` L801 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L803 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L804 in `quickstart_nist_application_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L807 in `quickstart_nist_application_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.UserData` L812 in `quickstart_nist_application_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L955 in `quickstart_nist_application_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Path` L970 in `quickstart_nist_application_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L1022 in `quickstart_nist_application_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBName` L1012 in `quickstart_nist_application_yaml` + > Property 'DBName' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L1014 in `quickstart_nist_application_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Engine` L1015 in `quickstart_nist_application_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L1019 in `quickstart_nist_application_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L1020 in `quickstart_nist_application_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L1021 in `quickstart_nist_application_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rS3AccessLogsPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1030 in `quickstart_nist_application_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1067 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1090 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1094 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1118 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1122 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1136 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1140 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1147 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1151 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1175 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rWebContentS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1201 in `quickstart_nist_application_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L165 in `quickstart_nist_config_rules_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L167 in `quickstart_nist_config_rules_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L170 in `quickstart_nist_config_rules_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L174 in `quickstart_nist_config_rules_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L176 in `quickstart_nist_config_rules_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `quickstart_nist_config_rules_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L185 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L223 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L238 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L251 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L277 in `quickstart_nist_config_rules_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L292 in `quickstart_nist_config_rules_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L59 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L139 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L238 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L314 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rArchiveLogsBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L64 in `quickstart_nist_logging_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailChange` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L136 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L149 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L182 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Path` L196 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L235 in `quickstart_nist_logging_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Path` L334 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMCreateAccessKey` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L384 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L397 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L412 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMPolicyChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L425 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMRootActivity` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L436 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L448 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rNetworkAclChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L464 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L476 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L499 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L515 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L527 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rUnauthorizedAttempts` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L540 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L306 in `quickstart_nist_vpc_management_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L310 in `quickstart_nist_vpc_management_yaml` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L315 in `quickstart_nist_vpc_management_yaml` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L317 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L322 in `quickstart_nist_vpc_management_yaml` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L326 in `quickstart_nist_vpc_management_yaml` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L411 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L422 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L433 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L435 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L440 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L445 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L447 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L452 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L457 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L459 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L464 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L469 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L471 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L476 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L513 in `quickstart_nist_vpc_management_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L515 in `quickstart_nist_vpc_management_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L517 in `quickstart_nist_vpc_management_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L518 in `quickstart_nist_vpc_management_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L526 in `quickstart_nist_vpc_management_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L550 in `quickstart_nist_vpc_management_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L554 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L589 in `quickstart_nist_vpc_management_yaml` + > Property 'PeerVpcId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L594 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L599 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L601 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L606 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L608 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L613 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L615 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L619 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L623 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L629 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L631 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L639 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L641 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L649 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L651 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L659 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L661 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L671 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L679 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L683 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L699 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L703 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L713 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L728 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L732 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L748 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L753 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L756 in `quickstart_nist_vpc_management_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L765 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L767 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L181 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L183 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L191 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L196 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L198 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L210 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L212 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L220 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L225 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L227 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L235 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L240 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L250 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L255 in `quickstart_nist_vpc_production_yaml` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L257 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L262 in `quickstart_nist_vpc_production_yaml` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L263 in `quickstart_nist_vpc_production_yaml` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L275 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L285 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L290 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L292 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentProdIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L313 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L327 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L329 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L334 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L336 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L341 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L343 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L348 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L350 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L355 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L357 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L362 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L364 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L369 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L374 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L379 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L381 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L387 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L392 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L394 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L400 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L406 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L412 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L419 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L425 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L430 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L432 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L438 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L444 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L450 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L455 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L457 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L463 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L469 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L475 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L482 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L488 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L495 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L501 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L507 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L513 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L520 in `quickstart_nist_vpc_production_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L524 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L558 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L560 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L565 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L567 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L572 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L574 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L579 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L581 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L586 in `quickstart_nist_vpc_production_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L590 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L595 in `quickstart_nist_vpc_production_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.RouteTableId` L599 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMain` (AWS::EC2::RouteTable) → `Properties.VpcId` L607 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableProdPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L615 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L619 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L633 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L637 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L651 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L655 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L674 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.CidrBlock` L679 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L682 in `quickstart_nist_vpc_production_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L356 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.InstanceType` L361 in `quickstart_openshift_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.KeyName` L363 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L364 in `quickstart_openshift_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.UserData` L376 in `quickstart_openshift_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L751 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L768 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L824 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L847 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L855 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L902 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L907 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L909 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L915 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L917 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L918 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L921 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1056 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1061 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1069 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1079 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1127 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1132 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1134 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1140 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1142 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1143 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1146 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1286 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1311 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1321 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1340 in `quickstart_openshift_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1343 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1354 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1364 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1371 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1386 in `quickstart_openshift_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1389 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1396 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1412 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1456 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1466 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1468 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1474 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1476 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1477 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1480 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1638 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1654 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SetupRole` (AWS::IAM::Role) → `Properties.Path` L1666 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SetupRoleProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L1689 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `quickstart_test_yaml` + > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `quickstart_test_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `quickstart_test_yaml` + > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `quickstart_test_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `quickstart_test_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `quickstart_test_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L141 in `quickstart_test_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L144 in `quickstart_test_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `quickstart_test_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `quickstart_test_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L732 in `quickstart_vpc-management_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L738 in `quickstart_vpc-management_json` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L835 in `quickstart_vpc-management_json` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L832 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L542 in `quickstart_vpc-management_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L546 in `quickstart_vpc-management_json` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L789 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L370 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L472 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L469 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L475 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L490 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L487 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L493 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L508 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L505 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L511 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L526 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L523 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L529 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L650 in `quickstart_vpc-management_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L640 in `quickstart_vpc-management_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L643 in `quickstart_vpc-management_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L652 in `quickstart_vpc-management_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L659 in `quickstart_vpc-management_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L777 in `quickstart_vpc-management_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L780 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L844 in `quickstart_vpc-management_json` + > Property 'PeerVpcId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L847 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L595 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L598 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L617 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L620 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L628 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L631 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L588 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L583 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L911 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L905 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L866 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L860 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L881 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L875 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L896 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L890 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L571 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L559 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L804 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L806 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L421 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L423 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L745 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L440 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L442 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L343 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L345 in `quickstart_vpc-management_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L606 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L609 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L485 in `quickstart_vpc_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L501 in `quickstart_vpc_json` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1827 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1833 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1843 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1849 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1859 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1865 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1875 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1881 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L1891 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.InstanceType` L1900 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.KeyName` L1924 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1908 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L1943 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.InstanceType` L1952 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.KeyName` L1976 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1960 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L1995 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.InstanceType` L2004 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.KeyName` L2028 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2012 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L2047 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L2056 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.KeyName` L2080 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2064 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L2097 in `quickstart_vpc_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L2099 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L577 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L574 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.VpcId` L571 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L954 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L952 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L933 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L987 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L984 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L607 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L604 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.VpcId` L601 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1248 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1298 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1295 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1267 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1269 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1273 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1281 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1283 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1287 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1206 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1204 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1185 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1239 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1236 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L637 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L634 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.VpcId` L631 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1017 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1015 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L996 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1050 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1047 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L667 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L664 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.VpcId` L661 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1370 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1420 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1417 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1389 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1391 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1395 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1403 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1405 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1409 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1328 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1326 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1307 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1361 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1358 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L697 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L694 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.VpcId` L691 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1080 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1078 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1059 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1113 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1110 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L727 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L724 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.VpcId` L721 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1492 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1542 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1539 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1511 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1513 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1517 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1525 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1527 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1531 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1450 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1448 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1429 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1483 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1480 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L757 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L754 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.VpcId` L751 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1143 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1141 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1122 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1176 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1173 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L787 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L784 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.VpcId` L781 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1614 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1664 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1661 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1633 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1635 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1639 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1647 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1649 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1653 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1572 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1570 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1551 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1605 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1602 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L816 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L813 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L810 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1706 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1703 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L846 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L843 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L840 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1717 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1714 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L877 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L874 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L871 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1729 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1726 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L908 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L905 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L902 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1741 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1738 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1693 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1691 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1672 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L2203 in `quickstart_vpc_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L2215 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L510 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L513 in `quickstart_vpc_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L534 in `quickstart_vpc_json` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L531 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCGatewayAttachment` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L559 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement + +### I9040 - 2297 findings + +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `A` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_E3019_four_way_group_yaml` + > Resource 'A' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `B` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_E3019_four_way_group_yaml` + > Resource 'B' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `C` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E3019_four_way_group_yaml` + > Resource 'C' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `D` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_E3019_four_way_group_yaml` + > Resource 'D' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'ExplicitSubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `JoinBucket` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'JoinBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LiteralA` (AWS::S3::Bucket) → `Properties.Tags` L25 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'LiteralA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LiteralB` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'LiteralB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RefBucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'RefBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubBucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'SubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApiA` (AWS::ApiGateway::RestApi) → `Properties.Tags` L10 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Resource 'RestApiA' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApiB` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Resource 'RestApiB' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E8007_condition_undefined_in_expr_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `bad_E9106_condition_cycle_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `GoodFunction` (AWS::Serverless::Function) → `Properties.Tags` L27 in `bad_F3006_invalid_aws_namespaces_yaml` + > Resource 'GoodFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.Tags` L7 in `bad_F3018_conditional_required_novalue_yaml` + > Resource 'MissingTemplateSourceInOneWorld' of type 'AWS::CloudFormation::StackSet' supports Tags but none are configured +- **I9040** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.Tags` L7 in `bad_F3031_log_group_name_dollar_brace_yaml` + > Resource 'InvalidLiteralName' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1019_sub_unused_key_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_W1028_allowedvalues_excludes_literal_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyConnection` (AWS::DMS::Endpoint) → `Properties.Tags` L5 in `bad_W1051_secretsmanager_at_arn_yaml` + > Resource 'MyConnection' of type 'AWS::DMS::Endpoint' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1053_dynref_spaces_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_W1054_raw_pseudo_param_yaml` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_W3010_full_coverage_yaml` + > Resource 'Asg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L44 in `bad_W3010_full_coverage_yaml` + > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L16 in `bad_W3010_full_coverage_yaml` + > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L21 in `bad_W3010_full_coverage_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Rds` (AWS::RDS::DBInstance) → `Properties.Tags` L62 in `bad_W3010_full_coverage_yaml` + > Resource 'Rds' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L33 in `bad_W3010_full_coverage_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L53 in `bad_W3010_full_coverage_yaml` + > Resource 'Tg' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `Volume` (AWS::EC2::Volume) → `Properties.Tags` L39 in `bad_W3010_full_coverage_yaml` + > Resource 'Volume' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_W9006_every_allowed_value_too_long_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_W9053_equivalent_conditions_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_aurora_with_allocated_storage_yaml` + > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Dist` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_alias_yaml` + > Resource 'Dist' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_origin_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifact_counts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifacts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `DummyBucket` (AWS::S3::Bucket) → `Properties.Tags` L35 in `bad_conditions_condition_functions_json` + > Resource 'DummyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `bad_conditions_properties_fn_if_json` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L85 in `bad_conditions_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `NewVolume` (AWS::EC2::Volume) → `Properties.Tags` L79 in `bad_conditions_yaml` + > Resource 'NewVolume' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `BadConditionType` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_core_E3001_resource_shape_yaml` + > Resource 'BadConditionType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_core_E3001_resource_shape_yaml` + > Resource 'BadDependsOnType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_E3001_resource_shape_yaml` + > Resource 'UnknownAttribute' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ValidResource` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_core_E3001_resource_shape_yaml` + > Resource 'ValidResource' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L97 in `bad_core_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_core_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `bad_core_conditions_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `bad_core_conditions_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L51 in `bad_core_conditions_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L64 in `bad_core_conditions_yaml` + > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `bad_core_conditions_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `bad_core_config_configure_e3012_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_directives_yaml` + > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L34 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_directives_yaml` + > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L29 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L22 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ScalarCreationPolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L6 in `bad_core_resource_attributes_yaml` + > Resource 'ScalarCreationPolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `ScalarUpdatePolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L9 in `bad_core_resource_attributes_yaml` + > Resource 'ScalarUpdatePolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `StandardVersion` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_core_resource_attributes_yaml` + > Resource 'StandardVersion' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `UnsupportedAttributes` (AWS::S3::Bucket) → `Properties.Tags` L18 in `bad_core_resource_attributes_yaml` + > Resource 'UnsupportedAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L28 in `bad_cross_resource_task10_yaml` + > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_cross_resource_task10_yaml` + > Resource 'BadASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.Tags` L41 in `bad_cross_resource_task10_yaml` + > Resource 'BadEnvLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BadFargateService` (AWS::ECS::Service) → `Properties.Tags` L75 in `bad_cross_resource_task10_yaml` + > Resource 'BadFargateService' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BadImageLambda` (AWS::Lambda::Function) → `Properties.Tags` L54 in `bad_cross_resource_task10_yaml` + > Resource 'BadImageLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L19 in `bad_cross_resource_task10_yaml` + > Resource 'BadListener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `BadRestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L64 in `bad_cross_resource_task10_yaml` + > Resource 'BadRestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `bad_cross_resource_task10_yaml` + > Resource 'BadValkey' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L34 in `bad_cross_resource_task10_yaml` + > Resource 'TG' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_cross_resource_task10_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyEipNat` (AWS::EC2::EIP) → `Properties.Tags` L13 in `bad_duplicate_json` + > Resource 'MyEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `MySNSTopic` (AWS::SNS::Topic) → `Properties.Tags` L25 in `bad_duplicate_json` + > Resource 'MySNSTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_duplicate_primary_id_multi_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_duplicate_primary_id_multi_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_duplicate_primary_id_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_duplicate_primary_id_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_duplicate_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_duplicate_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BadTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_attribute_mismatch_yaml` + > Resource 'BadTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Repo` (AWS::ECR::Repository) → `Properties.Tags` L5 in `bad_ecr_policy_no_statement_yaml` + > Resource 'Repo' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L21 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L14 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L16 in `bad_ecs_fargate_mismatch_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_fargate_mismatch_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ExecRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `bad_ecs_role_no_boundary_yaml` + > Resource 'ExecRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `bad_ecs_role_no_boundary_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_ecs_role_no_boundary_yaml` + > Resource 'TaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L5 in `bad_elb_http_443_yaml` + > Resource 'Listener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_equals_wrong_arity_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_fargate_bad_cpu_memory_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L23 in `bad_fargate_daemon_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateDaemon` (AWS::ECS::Service) → `Properties.Tags` L5 in `bad_fargate_daemon_yaml` + > Resource 'FargateDaemon' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `bad_fargate_daemon_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `bad_formatters_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_base64_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_findinmap_default_value_no_transform_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L10 in `bad_functions_findinmap_enhanced_invalid_key_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_json` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_functions_get_stack_output_json` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_json` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_functions_get_stack_output_json` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L20 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic5` (AWS::SQS::Queue) → `Properties.Tags` L35 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic5' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `mySubnet1` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `bad_functions_getaz_yaml` + > Resource 'mySubnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet2` (AWS::EC2::Subnet) → `Properties.Tags` L21 in `bad_functions_getaz_yaml` + > Resource 'mySubnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet3` (AWS::EC2::Subnet) → `Properties.Tags` L30 in `bad_functions_getaz_yaml` + > Resource 'mySubnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `subnet` (AWS::EC2::Subnet) → `Properties.Tags` L8 in `bad_functions_import_value_yaml` + > Resource 'subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_join_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L18 in `bad_functions_join_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L12 in `bad_functions_length_no_transform_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L50 in `bad_functions_ref_yaml` + > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_functions_ref_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `bad_functions_ref_yaml` + > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_functions_ref_yaml` + > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L35 in `bad_functions_relationship_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `bad_functions_relationship_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SubCondGetAttParam` (AWS::SSM::Parameter) → `Properties.Tags` L57 in `bad_functions_relationship_conditions_yaml` + > Resource 'SubCondGetAttParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `SubCondRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L51 in `bad_functions_relationship_conditions_yaml` + > Resource 'SubCondRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_select_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L16 in `bad_functions_select_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_functions_select_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L33 in `bad_functions_select_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `TestBadStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L37 in `bad_functions_sub_needed_yaml` + > Resource 'TestBadStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `TestBadStateMachine2` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L58 in `bad_functions_sub_needed_yaml` + > Resource 'TestBadStateMachine2' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L10 in `bad_functions_sub_needed_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L32 in `bad_functions_sub_needed_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_functions_tojsonstring_no_transform_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L112 in `bad_generic_yaml` + > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L42 in `bad_generic_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L62 in `bad_generic_yaml` + > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.Tags` L218 in `bad_generic_yaml` + > Resource 'MyEc2BlockDevice' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L71 in `bad_generic_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L195 in `bad_generic_yaml` + > Resource 'lambdaMap1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L203 in `bad_generic_yaml` + > Resource 'lambdaMap2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `myEc2Instance4` (AWS::EC2::Instance) → `Properties.Tags` L67 in `bad_generic_yaml` + > Resource 'myEc2Instance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myIamProfile` (AWS::IAM::Role) → `Properties.Tags` L25 in `bad_generic_yaml` + > Resource 'myIamProfile' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myIamProfile2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_generic_yaml` + > Resource 'myIamProfile2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myIamProfile3` (AWS::IAM::Role) → `Properties.Tags` L32 in `bad_generic_yaml` + > Resource 'myIamProfile3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myLambdaTwo` (AWS::Lambda::Function) → `Properties.Tags` L146 in `bad_generic_yaml` + > Resource 'myLambdaTwo' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_getatt_object_attribute_member_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Param` (AWS::SSM::Parameter) → `Properties.Tags` L13 in `bad_getatt_object_attribute_member_yaml` + > Resource 'Param' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hard_coded_arn_properties_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L26 in `bad_hard_coded_arn_properties_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hardcoded_partition_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_hardcoded_partition_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Project` (AWS::CodeBuild::Project) → `Properties.Tags` L16 in `bad_iam_ref_with_path_yaml` + > Resource 'Project' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_iam_ref_with_path_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `NotActionUser` (AWS::IAM::User) → `Properties.Tags` L36 in `bad_iam_wildcard_all_types_yaml` + > Resource 'NotActionUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `WildcardUser` (AWS::IAM::User) → `Properties.Tags` L5 in `bad_iam_wildcard_all_types_yaml` + > Resource 'WildcardUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_if_wrong_arity_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_deletion_policy_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L6 in `bad_invalid_mapping_structure_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_update_replace_policy_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.Tags` L5 in `bad_issues_yaml` + > Resource 'RDSOptionGroup' of type 'AWS::RDS::OptionGroup' supports Tags but none are configured +- **I9040** `Fn` (AWS::Lambda::Function) → `Properties.Tags` L10 in `bad_lambda_image_handler_intrinsic_yaml` + > Resource 'Fn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_no_snapstart_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_bad_runtime_yaml` + > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_no_version_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L19 in `bad_lambda_sqs_timeout_yaml` + > Resource 'ESM' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L9 in `bad_lambda_sqs_timeout_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_lambda_sqs_timeout_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zip_no_handler_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zipfile_java_yaml` + > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BothBranchesInvalid` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'BothBranchesInvalid' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalInvalidDeletion` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalInvalidDeletion' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalInvalidUpdate` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalInvalidUpdate' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DirectNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'DirectNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DynamicObjectPolicy` (AWS::S3::Bucket) → `Properties.Tags` L38 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'DynamicObjectPolicy' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'CreationNoValueOnUnsupportedType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ListPolicies` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'ListPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `Properties.Tags` L36 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'NoValuePoliciesWithoutTransform' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `ObjectPolicies` (AWS::S3::Bucket) → `Properties.Tags` L13 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'ObjectPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Resource1` (AWS::SNS::Topic) → `Properties.Tags` L405 in `bad_limit_numbers_yaml` + > Resource 'Resource1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource10` (AWS::SNS::Topic) → `Properties.Tags` L423 in `bad_limit_numbers_yaml` + > Resource 'Resource10' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource100` (AWS::SNS::Topic) → `Properties.Tags` L603 in `bad_limit_numbers_yaml` + > Resource 'Resource100' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource101` (AWS::SNS::Topic) → `Properties.Tags` L605 in `bad_limit_numbers_yaml` + > Resource 'Resource101' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource102` (AWS::SNS::Topic) → `Properties.Tags` L607 in `bad_limit_numbers_yaml` + > Resource 'Resource102' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource103` (AWS::SNS::Topic) → `Properties.Tags` L609 in `bad_limit_numbers_yaml` + > Resource 'Resource103' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource104` (AWS::SNS::Topic) → `Properties.Tags` L611 in `bad_limit_numbers_yaml` + > Resource 'Resource104' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource105` (AWS::SNS::Topic) → `Properties.Tags` L613 in `bad_limit_numbers_yaml` + > Resource 'Resource105' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource106` (AWS::SNS::Topic) → `Properties.Tags` L615 in `bad_limit_numbers_yaml` + > Resource 'Resource106' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource107` (AWS::SNS::Topic) → `Properties.Tags` L617 in `bad_limit_numbers_yaml` + > Resource 'Resource107' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource108` (AWS::SNS::Topic) → `Properties.Tags` L619 in `bad_limit_numbers_yaml` + > Resource 'Resource108' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource109` (AWS::SNS::Topic) → `Properties.Tags` L621 in `bad_limit_numbers_yaml` + > Resource 'Resource109' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource11` (AWS::SNS::Topic) → `Properties.Tags` L425 in `bad_limit_numbers_yaml` + > Resource 'Resource11' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource110` (AWS::SNS::Topic) → `Properties.Tags` L623 in `bad_limit_numbers_yaml` + > Resource 'Resource110' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource111` (AWS::SNS::Topic) → `Properties.Tags` L625 in `bad_limit_numbers_yaml` + > Resource 'Resource111' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource112` (AWS::SNS::Topic) → `Properties.Tags` L627 in `bad_limit_numbers_yaml` + > Resource 'Resource112' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource113` (AWS::SNS::Topic) → `Properties.Tags` L629 in `bad_limit_numbers_yaml` + > Resource 'Resource113' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource114` (AWS::SNS::Topic) → `Properties.Tags` L631 in `bad_limit_numbers_yaml` + > Resource 'Resource114' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource115` (AWS::SNS::Topic) → `Properties.Tags` L633 in `bad_limit_numbers_yaml` + > Resource 'Resource115' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource116` (AWS::SNS::Topic) → `Properties.Tags` L635 in `bad_limit_numbers_yaml` + > Resource 'Resource116' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource117` (AWS::SNS::Topic) → `Properties.Tags` L637 in `bad_limit_numbers_yaml` + > Resource 'Resource117' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource118` (AWS::SNS::Topic) → `Properties.Tags` L639 in `bad_limit_numbers_yaml` + > Resource 'Resource118' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource119` (AWS::SNS::Topic) → `Properties.Tags` L641 in `bad_limit_numbers_yaml` + > Resource 'Resource119' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource12` (AWS::SNS::Topic) → `Properties.Tags` L427 in `bad_limit_numbers_yaml` + > Resource 'Resource12' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource120` (AWS::SNS::Topic) → `Properties.Tags` L643 in `bad_limit_numbers_yaml` + > Resource 'Resource120' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource121` (AWS::SNS::Topic) → `Properties.Tags` L645 in `bad_limit_numbers_yaml` + > Resource 'Resource121' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource122` (AWS::SNS::Topic) → `Properties.Tags` L647 in `bad_limit_numbers_yaml` + > Resource 'Resource122' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource123` (AWS::SNS::Topic) → `Properties.Tags` L649 in `bad_limit_numbers_yaml` + > Resource 'Resource123' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource124` (AWS::SNS::Topic) → `Properties.Tags` L651 in `bad_limit_numbers_yaml` + > Resource 'Resource124' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource125` (AWS::SNS::Topic) → `Properties.Tags` L653 in `bad_limit_numbers_yaml` + > Resource 'Resource125' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource126` (AWS::SNS::Topic) → `Properties.Tags` L655 in `bad_limit_numbers_yaml` + > Resource 'Resource126' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource127` (AWS::SNS::Topic) → `Properties.Tags` L657 in `bad_limit_numbers_yaml` + > Resource 'Resource127' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource128` (AWS::SNS::Topic) → `Properties.Tags` L659 in `bad_limit_numbers_yaml` + > Resource 'Resource128' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource129` (AWS::SNS::Topic) → `Properties.Tags` L661 in `bad_limit_numbers_yaml` + > Resource 'Resource129' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource13` (AWS::SNS::Topic) → `Properties.Tags` L429 in `bad_limit_numbers_yaml` + > Resource 'Resource13' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource130` (AWS::SNS::Topic) → `Properties.Tags` L663 in `bad_limit_numbers_yaml` + > Resource 'Resource130' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource131` (AWS::SNS::Topic) → `Properties.Tags` L665 in `bad_limit_numbers_yaml` + > Resource 'Resource131' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource132` (AWS::SNS::Topic) → `Properties.Tags` L667 in `bad_limit_numbers_yaml` + > Resource 'Resource132' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource133` (AWS::SNS::Topic) → `Properties.Tags` L669 in `bad_limit_numbers_yaml` + > Resource 'Resource133' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource134` (AWS::SNS::Topic) → `Properties.Tags` L671 in `bad_limit_numbers_yaml` + > Resource 'Resource134' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource135` (AWS::SNS::Topic) → `Properties.Tags` L673 in `bad_limit_numbers_yaml` + > Resource 'Resource135' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource136` (AWS::SNS::Topic) → `Properties.Tags` L675 in `bad_limit_numbers_yaml` + > Resource 'Resource136' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource137` (AWS::SNS::Topic) → `Properties.Tags` L677 in `bad_limit_numbers_yaml` + > Resource 'Resource137' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource138` (AWS::SNS::Topic) → `Properties.Tags` L679 in `bad_limit_numbers_yaml` + > Resource 'Resource138' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource139` (AWS::SNS::Topic) → `Properties.Tags` L681 in `bad_limit_numbers_yaml` + > Resource 'Resource139' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource14` (AWS::SNS::Topic) → `Properties.Tags` L431 in `bad_limit_numbers_yaml` + > Resource 'Resource14' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource140` (AWS::SNS::Topic) → `Properties.Tags` L683 in `bad_limit_numbers_yaml` + > Resource 'Resource140' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource141` (AWS::SNS::Topic) → `Properties.Tags` L685 in `bad_limit_numbers_yaml` + > Resource 'Resource141' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource142` (AWS::SNS::Topic) → `Properties.Tags` L687 in `bad_limit_numbers_yaml` + > Resource 'Resource142' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource143` (AWS::SNS::Topic) → `Properties.Tags` L689 in `bad_limit_numbers_yaml` + > Resource 'Resource143' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource144` (AWS::SNS::Topic) → `Properties.Tags` L691 in `bad_limit_numbers_yaml` + > Resource 'Resource144' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource145` (AWS::SNS::Topic) → `Properties.Tags` L693 in `bad_limit_numbers_yaml` + > Resource 'Resource145' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource146` (AWS::SNS::Topic) → `Properties.Tags` L695 in `bad_limit_numbers_yaml` + > Resource 'Resource146' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource147` (AWS::SNS::Topic) → `Properties.Tags` L697 in `bad_limit_numbers_yaml` + > Resource 'Resource147' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource148` (AWS::SNS::Topic) → `Properties.Tags` L699 in `bad_limit_numbers_yaml` + > Resource 'Resource148' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource149` (AWS::SNS::Topic) → `Properties.Tags` L701 in `bad_limit_numbers_yaml` + > Resource 'Resource149' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource15` (AWS::SNS::Topic) → `Properties.Tags` L433 in `bad_limit_numbers_yaml` + > Resource 'Resource15' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource150` (AWS::SNS::Topic) → `Properties.Tags` L703 in `bad_limit_numbers_yaml` + > Resource 'Resource150' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource151` (AWS::SNS::Topic) → `Properties.Tags` L705 in `bad_limit_numbers_yaml` + > Resource 'Resource151' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource152` (AWS::SNS::Topic) → `Properties.Tags` L707 in `bad_limit_numbers_yaml` + > Resource 'Resource152' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource153` (AWS::SNS::Topic) → `Properties.Tags` L709 in `bad_limit_numbers_yaml` + > Resource 'Resource153' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource154` (AWS::SNS::Topic) → `Properties.Tags` L711 in `bad_limit_numbers_yaml` + > Resource 'Resource154' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource155` (AWS::SNS::Topic) → `Properties.Tags` L713 in `bad_limit_numbers_yaml` + > Resource 'Resource155' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource156` (AWS::SNS::Topic) → `Properties.Tags` L715 in `bad_limit_numbers_yaml` + > Resource 'Resource156' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource157` (AWS::SNS::Topic) → `Properties.Tags` L717 in `bad_limit_numbers_yaml` + > Resource 'Resource157' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource158` (AWS::SNS::Topic) → `Properties.Tags` L719 in `bad_limit_numbers_yaml` + > Resource 'Resource158' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource159` (AWS::SNS::Topic) → `Properties.Tags` L721 in `bad_limit_numbers_yaml` + > Resource 'Resource159' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource16` (AWS::SNS::Topic) → `Properties.Tags` L435 in `bad_limit_numbers_yaml` + > Resource 'Resource16' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource160` (AWS::SNS::Topic) → `Properties.Tags` L723 in `bad_limit_numbers_yaml` + > Resource 'Resource160' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource161` (AWS::SNS::Topic) → `Properties.Tags` L725 in `bad_limit_numbers_yaml` + > Resource 'Resource161' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource162` (AWS::SNS::Topic) → `Properties.Tags` L727 in `bad_limit_numbers_yaml` + > Resource 'Resource162' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource163` (AWS::SNS::Topic) → `Properties.Tags` L729 in `bad_limit_numbers_yaml` + > Resource 'Resource163' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource164` (AWS::SNS::Topic) → `Properties.Tags` L731 in `bad_limit_numbers_yaml` + > Resource 'Resource164' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource165` (AWS::SNS::Topic) → `Properties.Tags` L733 in `bad_limit_numbers_yaml` + > Resource 'Resource165' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource166` (AWS::SNS::Topic) → `Properties.Tags` L735 in `bad_limit_numbers_yaml` + > Resource 'Resource166' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource167` (AWS::SNS::Topic) → `Properties.Tags` L737 in `bad_limit_numbers_yaml` + > Resource 'Resource167' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource168` (AWS::SNS::Topic) → `Properties.Tags` L739 in `bad_limit_numbers_yaml` + > Resource 'Resource168' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource169` (AWS::SNS::Topic) → `Properties.Tags` L741 in `bad_limit_numbers_yaml` + > Resource 'Resource169' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource17` (AWS::SNS::Topic) → `Properties.Tags` L437 in `bad_limit_numbers_yaml` + > Resource 'Resource17' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource170` (AWS::SNS::Topic) → `Properties.Tags` L743 in `bad_limit_numbers_yaml` + > Resource 'Resource170' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource171` (AWS::SNS::Topic) → `Properties.Tags` L745 in `bad_limit_numbers_yaml` + > Resource 'Resource171' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource172` (AWS::SNS::Topic) → `Properties.Tags` L747 in `bad_limit_numbers_yaml` + > Resource 'Resource172' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource173` (AWS::SNS::Topic) → `Properties.Tags` L749 in `bad_limit_numbers_yaml` + > Resource 'Resource173' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource174` (AWS::SNS::Topic) → `Properties.Tags` L751 in `bad_limit_numbers_yaml` + > Resource 'Resource174' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource175` (AWS::SNS::Topic) → `Properties.Tags` L753 in `bad_limit_numbers_yaml` + > Resource 'Resource175' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource176` (AWS::SNS::Topic) → `Properties.Tags` L755 in `bad_limit_numbers_yaml` + > Resource 'Resource176' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource177` (AWS::SNS::Topic) → `Properties.Tags` L757 in `bad_limit_numbers_yaml` + > Resource 'Resource177' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource178` (AWS::SNS::Topic) → `Properties.Tags` L759 in `bad_limit_numbers_yaml` + > Resource 'Resource178' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource179` (AWS::SNS::Topic) → `Properties.Tags` L761 in `bad_limit_numbers_yaml` + > Resource 'Resource179' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource18` (AWS::SNS::Topic) → `Properties.Tags` L439 in `bad_limit_numbers_yaml` + > Resource 'Resource18' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource180` (AWS::SNS::Topic) → `Properties.Tags` L763 in `bad_limit_numbers_yaml` + > Resource 'Resource180' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource181` (AWS::SNS::Topic) → `Properties.Tags` L765 in `bad_limit_numbers_yaml` + > Resource 'Resource181' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource182` (AWS::SNS::Topic) → `Properties.Tags` L767 in `bad_limit_numbers_yaml` + > Resource 'Resource182' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource183` (AWS::SNS::Topic) → `Properties.Tags` L769 in `bad_limit_numbers_yaml` + > Resource 'Resource183' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource184` (AWS::SNS::Topic) → `Properties.Tags` L771 in `bad_limit_numbers_yaml` + > Resource 'Resource184' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource185` (AWS::SNS::Topic) → `Properties.Tags` L773 in `bad_limit_numbers_yaml` + > Resource 'Resource185' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource186` (AWS::SNS::Topic) → `Properties.Tags` L775 in `bad_limit_numbers_yaml` + > Resource 'Resource186' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource187` (AWS::SNS::Topic) → `Properties.Tags` L777 in `bad_limit_numbers_yaml` + > Resource 'Resource187' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource188` (AWS::SNS::Topic) → `Properties.Tags` L779 in `bad_limit_numbers_yaml` + > Resource 'Resource188' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource189` (AWS::SNS::Topic) → `Properties.Tags` L781 in `bad_limit_numbers_yaml` + > Resource 'Resource189' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource19` (AWS::SNS::Topic) → `Properties.Tags` L441 in `bad_limit_numbers_yaml` + > Resource 'Resource19' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource190` (AWS::SNS::Topic) → `Properties.Tags` L783 in `bad_limit_numbers_yaml` + > Resource 'Resource190' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource191` (AWS::SNS::Topic) → `Properties.Tags` L785 in `bad_limit_numbers_yaml` + > Resource 'Resource191' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource192` (AWS::SNS::Topic) → `Properties.Tags` L787 in `bad_limit_numbers_yaml` + > Resource 'Resource192' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource193` (AWS::SNS::Topic) → `Properties.Tags` L789 in `bad_limit_numbers_yaml` + > Resource 'Resource193' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource194` (AWS::SNS::Topic) → `Properties.Tags` L791 in `bad_limit_numbers_yaml` + > Resource 'Resource194' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource195` (AWS::SNS::Topic) → `Properties.Tags` L793 in `bad_limit_numbers_yaml` + > Resource 'Resource195' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource196` (AWS::SNS::Topic) → `Properties.Tags` L795 in `bad_limit_numbers_yaml` + > Resource 'Resource196' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource197` (AWS::SNS::Topic) → `Properties.Tags` L797 in `bad_limit_numbers_yaml` + > Resource 'Resource197' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource198` (AWS::SNS::Topic) → `Properties.Tags` L799 in `bad_limit_numbers_yaml` + > Resource 'Resource198' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource199` (AWS::SNS::Topic) → `Properties.Tags` L801 in `bad_limit_numbers_yaml` + > Resource 'Resource199' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L407 in `bad_limit_numbers_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource20` (AWS::SNS::Topic) → `Properties.Tags` L443 in `bad_limit_numbers_yaml` + > Resource 'Resource20' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource200` (AWS::SNS::Topic) → `Properties.Tags` L803 in `bad_limit_numbers_yaml` + > Resource 'Resource200' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource201` (AWS::SNS::Topic) → `Properties.Tags` L805 in `bad_limit_numbers_yaml` + > Resource 'Resource201' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource202` (AWS::SNS::Topic) → `Properties.Tags` L807 in `bad_limit_numbers_yaml` + > Resource 'Resource202' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource203` (AWS::SNS::Topic) → `Properties.Tags` L809 in `bad_limit_numbers_yaml` + > Resource 'Resource203' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource204` (AWS::SNS::Topic) → `Properties.Tags` L811 in `bad_limit_numbers_yaml` + > Resource 'Resource204' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource205` (AWS::SNS::Topic) → `Properties.Tags` L813 in `bad_limit_numbers_yaml` + > Resource 'Resource205' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource206` (AWS::SNS::Topic) → `Properties.Tags` L815 in `bad_limit_numbers_yaml` + > Resource 'Resource206' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource207` (AWS::SNS::Topic) → `Properties.Tags` L817 in `bad_limit_numbers_yaml` + > Resource 'Resource207' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource208` (AWS::SNS::Topic) → `Properties.Tags` L819 in `bad_limit_numbers_yaml` + > Resource 'Resource208' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource209` (AWS::SNS::Topic) → `Properties.Tags` L821 in `bad_limit_numbers_yaml` + > Resource 'Resource209' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource21` (AWS::SNS::Topic) → `Properties.Tags` L445 in `bad_limit_numbers_yaml` + > Resource 'Resource21' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource210` (AWS::SNS::Topic) → `Properties.Tags` L823 in `bad_limit_numbers_yaml` + > Resource 'Resource210' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource211` (AWS::SNS::Topic) → `Properties.Tags` L825 in `bad_limit_numbers_yaml` + > Resource 'Resource211' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource212` (AWS::SNS::Topic) → `Properties.Tags` L827 in `bad_limit_numbers_yaml` + > Resource 'Resource212' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource213` (AWS::SNS::Topic) → `Properties.Tags` L829 in `bad_limit_numbers_yaml` + > Resource 'Resource213' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource214` (AWS::SNS::Topic) → `Properties.Tags` L831 in `bad_limit_numbers_yaml` + > Resource 'Resource214' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource215` (AWS::SNS::Topic) → `Properties.Tags` L833 in `bad_limit_numbers_yaml` + > Resource 'Resource215' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource216` (AWS::SNS::Topic) → `Properties.Tags` L835 in `bad_limit_numbers_yaml` + > Resource 'Resource216' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource217` (AWS::SNS::Topic) → `Properties.Tags` L837 in `bad_limit_numbers_yaml` + > Resource 'Resource217' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource218` (AWS::SNS::Topic) → `Properties.Tags` L839 in `bad_limit_numbers_yaml` + > Resource 'Resource218' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource219` (AWS::SNS::Topic) → `Properties.Tags` L841 in `bad_limit_numbers_yaml` + > Resource 'Resource219' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource22` (AWS::SNS::Topic) → `Properties.Tags` L447 in `bad_limit_numbers_yaml` + > Resource 'Resource22' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource220` (AWS::SNS::Topic) → `Properties.Tags` L843 in `bad_limit_numbers_yaml` + > Resource 'Resource220' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource221` (AWS::SNS::Topic) → `Properties.Tags` L845 in `bad_limit_numbers_yaml` + > Resource 'Resource221' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource222` (AWS::SNS::Topic) → `Properties.Tags` L847 in `bad_limit_numbers_yaml` + > Resource 'Resource222' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource223` (AWS::SNS::Topic) → `Properties.Tags` L849 in `bad_limit_numbers_yaml` + > Resource 'Resource223' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource224` (AWS::SNS::Topic) → `Properties.Tags` L851 in `bad_limit_numbers_yaml` + > Resource 'Resource224' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource225` (AWS::SNS::Topic) → `Properties.Tags` L853 in `bad_limit_numbers_yaml` + > Resource 'Resource225' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource226` (AWS::SNS::Topic) → `Properties.Tags` L855 in `bad_limit_numbers_yaml` + > Resource 'Resource226' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource227` (AWS::SNS::Topic) → `Properties.Tags` L857 in `bad_limit_numbers_yaml` + > Resource 'Resource227' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource228` (AWS::SNS::Topic) → `Properties.Tags` L859 in `bad_limit_numbers_yaml` + > Resource 'Resource228' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource229` (AWS::SNS::Topic) → `Properties.Tags` L861 in `bad_limit_numbers_yaml` + > Resource 'Resource229' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource23` (AWS::SNS::Topic) → `Properties.Tags` L449 in `bad_limit_numbers_yaml` + > Resource 'Resource23' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource230` (AWS::SNS::Topic) → `Properties.Tags` L863 in `bad_limit_numbers_yaml` + > Resource 'Resource230' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource231` (AWS::SNS::Topic) → `Properties.Tags` L865 in `bad_limit_numbers_yaml` + > Resource 'Resource231' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource232` (AWS::SNS::Topic) → `Properties.Tags` L867 in `bad_limit_numbers_yaml` + > Resource 'Resource232' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource233` (AWS::SNS::Topic) → `Properties.Tags` L869 in `bad_limit_numbers_yaml` + > Resource 'Resource233' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource234` (AWS::SNS::Topic) → `Properties.Tags` L871 in `bad_limit_numbers_yaml` + > Resource 'Resource234' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource235` (AWS::SNS::Topic) → `Properties.Tags` L873 in `bad_limit_numbers_yaml` + > Resource 'Resource235' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource236` (AWS::SNS::Topic) → `Properties.Tags` L875 in `bad_limit_numbers_yaml` + > Resource 'Resource236' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource237` (AWS::SNS::Topic) → `Properties.Tags` L877 in `bad_limit_numbers_yaml` + > Resource 'Resource237' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource238` (AWS::SNS::Topic) → `Properties.Tags` L879 in `bad_limit_numbers_yaml` + > Resource 'Resource238' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource239` (AWS::SNS::Topic) → `Properties.Tags` L881 in `bad_limit_numbers_yaml` + > Resource 'Resource239' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource24` (AWS::SNS::Topic) → `Properties.Tags` L451 in `bad_limit_numbers_yaml` + > Resource 'Resource24' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource240` (AWS::SNS::Topic) → `Properties.Tags` L883 in `bad_limit_numbers_yaml` + > Resource 'Resource240' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource241` (AWS::SNS::Topic) → `Properties.Tags` L885 in `bad_limit_numbers_yaml` + > Resource 'Resource241' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource242` (AWS::SNS::Topic) → `Properties.Tags` L887 in `bad_limit_numbers_yaml` + > Resource 'Resource242' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource243` (AWS::SNS::Topic) → `Properties.Tags` L889 in `bad_limit_numbers_yaml` + > Resource 'Resource243' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource244` (AWS::SNS::Topic) → `Properties.Tags` L891 in `bad_limit_numbers_yaml` + > Resource 'Resource244' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource245` (AWS::SNS::Topic) → `Properties.Tags` L893 in `bad_limit_numbers_yaml` + > Resource 'Resource245' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource246` (AWS::SNS::Topic) → `Properties.Tags` L895 in `bad_limit_numbers_yaml` + > Resource 'Resource246' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource247` (AWS::SNS::Topic) → `Properties.Tags` L897 in `bad_limit_numbers_yaml` + > Resource 'Resource247' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource248` (AWS::SNS::Topic) → `Properties.Tags` L899 in `bad_limit_numbers_yaml` + > Resource 'Resource248' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource249` (AWS::SNS::Topic) → `Properties.Tags` L901 in `bad_limit_numbers_yaml` + > Resource 'Resource249' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource25` (AWS::SNS::Topic) → `Properties.Tags` L453 in `bad_limit_numbers_yaml` + > Resource 'Resource25' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource250` (AWS::SNS::Topic) → `Properties.Tags` L903 in `bad_limit_numbers_yaml` + > Resource 'Resource250' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource251` (AWS::SNS::Topic) → `Properties.Tags` L905 in `bad_limit_numbers_yaml` + > Resource 'Resource251' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource252` (AWS::SNS::Topic) → `Properties.Tags` L907 in `bad_limit_numbers_yaml` + > Resource 'Resource252' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource253` (AWS::SNS::Topic) → `Properties.Tags` L909 in `bad_limit_numbers_yaml` + > Resource 'Resource253' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource254` (AWS::SNS::Topic) → `Properties.Tags` L911 in `bad_limit_numbers_yaml` + > Resource 'Resource254' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource255` (AWS::SNS::Topic) → `Properties.Tags` L913 in `bad_limit_numbers_yaml` + > Resource 'Resource255' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource256` (AWS::SNS::Topic) → `Properties.Tags` L915 in `bad_limit_numbers_yaml` + > Resource 'Resource256' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource257` (AWS::SNS::Topic) → `Properties.Tags` L917 in `bad_limit_numbers_yaml` + > Resource 'Resource257' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource258` (AWS::SNS::Topic) → `Properties.Tags` L919 in `bad_limit_numbers_yaml` + > Resource 'Resource258' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource259` (AWS::SNS::Topic) → `Properties.Tags` L921 in `bad_limit_numbers_yaml` + > Resource 'Resource259' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource26` (AWS::SNS::Topic) → `Properties.Tags` L455 in `bad_limit_numbers_yaml` + > Resource 'Resource26' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource260` (AWS::SNS::Topic) → `Properties.Tags` L923 in `bad_limit_numbers_yaml` + > Resource 'Resource260' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource261` (AWS::SNS::Topic) → `Properties.Tags` L925 in `bad_limit_numbers_yaml` + > Resource 'Resource261' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource262` (AWS::SNS::Topic) → `Properties.Tags` L927 in `bad_limit_numbers_yaml` + > Resource 'Resource262' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource263` (AWS::SNS::Topic) → `Properties.Tags` L929 in `bad_limit_numbers_yaml` + > Resource 'Resource263' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource264` (AWS::SNS::Topic) → `Properties.Tags` L931 in `bad_limit_numbers_yaml` + > Resource 'Resource264' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource265` (AWS::SNS::Topic) → `Properties.Tags` L933 in `bad_limit_numbers_yaml` + > Resource 'Resource265' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource266` (AWS::SNS::Topic) → `Properties.Tags` L935 in `bad_limit_numbers_yaml` + > Resource 'Resource266' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource267` (AWS::SNS::Topic) → `Properties.Tags` L937 in `bad_limit_numbers_yaml` + > Resource 'Resource267' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource268` (AWS::SNS::Topic) → `Properties.Tags` L939 in `bad_limit_numbers_yaml` + > Resource 'Resource268' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource269` (AWS::SNS::Topic) → `Properties.Tags` L941 in `bad_limit_numbers_yaml` + > Resource 'Resource269' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource27` (AWS::SNS::Topic) → `Properties.Tags` L457 in `bad_limit_numbers_yaml` + > Resource 'Resource27' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource270` (AWS::SNS::Topic) → `Properties.Tags` L943 in `bad_limit_numbers_yaml` + > Resource 'Resource270' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource271` (AWS::SNS::Topic) → `Properties.Tags` L945 in `bad_limit_numbers_yaml` + > Resource 'Resource271' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource272` (AWS::SNS::Topic) → `Properties.Tags` L947 in `bad_limit_numbers_yaml` + > Resource 'Resource272' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource273` (AWS::SNS::Topic) → `Properties.Tags` L949 in `bad_limit_numbers_yaml` + > Resource 'Resource273' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource274` (AWS::SNS::Topic) → `Properties.Tags` L951 in `bad_limit_numbers_yaml` + > Resource 'Resource274' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource275` (AWS::SNS::Topic) → `Properties.Tags` L953 in `bad_limit_numbers_yaml` + > Resource 'Resource275' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource276` (AWS::SNS::Topic) → `Properties.Tags` L955 in `bad_limit_numbers_yaml` + > Resource 'Resource276' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource277` (AWS::SNS::Topic) → `Properties.Tags` L957 in `bad_limit_numbers_yaml` + > Resource 'Resource277' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource278` (AWS::SNS::Topic) → `Properties.Tags` L959 in `bad_limit_numbers_yaml` + > Resource 'Resource278' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource279` (AWS::SNS::Topic) → `Properties.Tags` L961 in `bad_limit_numbers_yaml` + > Resource 'Resource279' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource28` (AWS::SNS::Topic) → `Properties.Tags` L459 in `bad_limit_numbers_yaml` + > Resource 'Resource28' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource280` (AWS::SNS::Topic) → `Properties.Tags` L963 in `bad_limit_numbers_yaml` + > Resource 'Resource280' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource281` (AWS::SNS::Topic) → `Properties.Tags` L965 in `bad_limit_numbers_yaml` + > Resource 'Resource281' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource282` (AWS::SNS::Topic) → `Properties.Tags` L967 in `bad_limit_numbers_yaml` + > Resource 'Resource282' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource283` (AWS::SNS::Topic) → `Properties.Tags` L969 in `bad_limit_numbers_yaml` + > Resource 'Resource283' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource284` (AWS::SNS::Topic) → `Properties.Tags` L971 in `bad_limit_numbers_yaml` + > Resource 'Resource284' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource285` (AWS::SNS::Topic) → `Properties.Tags` L973 in `bad_limit_numbers_yaml` + > Resource 'Resource285' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource286` (AWS::SNS::Topic) → `Properties.Tags` L975 in `bad_limit_numbers_yaml` + > Resource 'Resource286' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource287` (AWS::SNS::Topic) → `Properties.Tags` L977 in `bad_limit_numbers_yaml` + > Resource 'Resource287' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource288` (AWS::SNS::Topic) → `Properties.Tags` L979 in `bad_limit_numbers_yaml` + > Resource 'Resource288' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource289` (AWS::SNS::Topic) → `Properties.Tags` L981 in `bad_limit_numbers_yaml` + > Resource 'Resource289' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource29` (AWS::SNS::Topic) → `Properties.Tags` L461 in `bad_limit_numbers_yaml` + > Resource 'Resource29' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource290` (AWS::SNS::Topic) → `Properties.Tags` L983 in `bad_limit_numbers_yaml` + > Resource 'Resource290' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource291` (AWS::SNS::Topic) → `Properties.Tags` L985 in `bad_limit_numbers_yaml` + > Resource 'Resource291' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource292` (AWS::SNS::Topic) → `Properties.Tags` L987 in `bad_limit_numbers_yaml` + > Resource 'Resource292' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource293` (AWS::SNS::Topic) → `Properties.Tags` L989 in `bad_limit_numbers_yaml` + > Resource 'Resource293' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource294` (AWS::SNS::Topic) → `Properties.Tags` L991 in `bad_limit_numbers_yaml` + > Resource 'Resource294' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource295` (AWS::SNS::Topic) → `Properties.Tags` L993 in `bad_limit_numbers_yaml` + > Resource 'Resource295' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource296` (AWS::SNS::Topic) → `Properties.Tags` L995 in `bad_limit_numbers_yaml` + > Resource 'Resource296' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource297` (AWS::SNS::Topic) → `Properties.Tags` L997 in `bad_limit_numbers_yaml` + > Resource 'Resource297' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource298` (AWS::SNS::Topic) → `Properties.Tags` L999 in `bad_limit_numbers_yaml` + > Resource 'Resource298' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource299` (AWS::SNS::Topic) → `Properties.Tags` L1001 in `bad_limit_numbers_yaml` + > Resource 'Resource299' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L409 in `bad_limit_numbers_yaml` + > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource30` (AWS::SNS::Topic) → `Properties.Tags` L463 in `bad_limit_numbers_yaml` + > Resource 'Resource30' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource300` (AWS::SNS::Topic) → `Properties.Tags` L1003 in `bad_limit_numbers_yaml` + > Resource 'Resource300' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource301` (AWS::SNS::Topic) → `Properties.Tags` L1005 in `bad_limit_numbers_yaml` + > Resource 'Resource301' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource302` (AWS::SNS::Topic) → `Properties.Tags` L1007 in `bad_limit_numbers_yaml` + > Resource 'Resource302' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource303` (AWS::SNS::Topic) → `Properties.Tags` L1009 in `bad_limit_numbers_yaml` + > Resource 'Resource303' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource304` (AWS::SNS::Topic) → `Properties.Tags` L1011 in `bad_limit_numbers_yaml` + > Resource 'Resource304' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource305` (AWS::SNS::Topic) → `Properties.Tags` L1013 in `bad_limit_numbers_yaml` + > Resource 'Resource305' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource306` (AWS::SNS::Topic) → `Properties.Tags` L1015 in `bad_limit_numbers_yaml` + > Resource 'Resource306' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource307` (AWS::SNS::Topic) → `Properties.Tags` L1017 in `bad_limit_numbers_yaml` + > Resource 'Resource307' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource308` (AWS::SNS::Topic) → `Properties.Tags` L1019 in `bad_limit_numbers_yaml` + > Resource 'Resource308' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource309` (AWS::SNS::Topic) → `Properties.Tags` L1021 in `bad_limit_numbers_yaml` + > Resource 'Resource309' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource31` (AWS::SNS::Topic) → `Properties.Tags` L465 in `bad_limit_numbers_yaml` + > Resource 'Resource31' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource310` (AWS::SNS::Topic) → `Properties.Tags` L1023 in `bad_limit_numbers_yaml` + > Resource 'Resource310' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource311` (AWS::SNS::Topic) → `Properties.Tags` L1025 in `bad_limit_numbers_yaml` + > Resource 'Resource311' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource312` (AWS::SNS::Topic) → `Properties.Tags` L1027 in `bad_limit_numbers_yaml` + > Resource 'Resource312' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource313` (AWS::SNS::Topic) → `Properties.Tags` L1029 in `bad_limit_numbers_yaml` + > Resource 'Resource313' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource314` (AWS::SNS::Topic) → `Properties.Tags` L1031 in `bad_limit_numbers_yaml` + > Resource 'Resource314' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource315` (AWS::SNS::Topic) → `Properties.Tags` L1033 in `bad_limit_numbers_yaml` + > Resource 'Resource315' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource316` (AWS::SNS::Topic) → `Properties.Tags` L1035 in `bad_limit_numbers_yaml` + > Resource 'Resource316' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource317` (AWS::SNS::Topic) → `Properties.Tags` L1037 in `bad_limit_numbers_yaml` + > Resource 'Resource317' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource318` (AWS::SNS::Topic) → `Properties.Tags` L1039 in `bad_limit_numbers_yaml` + > Resource 'Resource318' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource319` (AWS::SNS::Topic) → `Properties.Tags` L1041 in `bad_limit_numbers_yaml` + > Resource 'Resource319' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource32` (AWS::SNS::Topic) → `Properties.Tags` L467 in `bad_limit_numbers_yaml` + > Resource 'Resource32' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource320` (AWS::SNS::Topic) → `Properties.Tags` L1043 in `bad_limit_numbers_yaml` + > Resource 'Resource320' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource321` (AWS::SNS::Topic) → `Properties.Tags` L1045 in `bad_limit_numbers_yaml` + > Resource 'Resource321' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource322` (AWS::SNS::Topic) → `Properties.Tags` L1047 in `bad_limit_numbers_yaml` + > Resource 'Resource322' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource323` (AWS::SNS::Topic) → `Properties.Tags` L1049 in `bad_limit_numbers_yaml` + > Resource 'Resource323' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource324` (AWS::SNS::Topic) → `Properties.Tags` L1051 in `bad_limit_numbers_yaml` + > Resource 'Resource324' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource325` (AWS::SNS::Topic) → `Properties.Tags` L1053 in `bad_limit_numbers_yaml` + > Resource 'Resource325' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource326` (AWS::SNS::Topic) → `Properties.Tags` L1055 in `bad_limit_numbers_yaml` + > Resource 'Resource326' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource327` (AWS::SNS::Topic) → `Properties.Tags` L1057 in `bad_limit_numbers_yaml` + > Resource 'Resource327' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource328` (AWS::SNS::Topic) → `Properties.Tags` L1059 in `bad_limit_numbers_yaml` + > Resource 'Resource328' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource329` (AWS::SNS::Topic) → `Properties.Tags` L1061 in `bad_limit_numbers_yaml` + > Resource 'Resource329' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource33` (AWS::SNS::Topic) → `Properties.Tags` L469 in `bad_limit_numbers_yaml` + > Resource 'Resource33' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource330` (AWS::SNS::Topic) → `Properties.Tags` L1063 in `bad_limit_numbers_yaml` + > Resource 'Resource330' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource331` (AWS::SNS::Topic) → `Properties.Tags` L1065 in `bad_limit_numbers_yaml` + > Resource 'Resource331' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource332` (AWS::SNS::Topic) → `Properties.Tags` L1067 in `bad_limit_numbers_yaml` + > Resource 'Resource332' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource333` (AWS::SNS::Topic) → `Properties.Tags` L1069 in `bad_limit_numbers_yaml` + > Resource 'Resource333' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource334` (AWS::SNS::Topic) → `Properties.Tags` L1071 in `bad_limit_numbers_yaml` + > Resource 'Resource334' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource335` (AWS::SNS::Topic) → `Properties.Tags` L1073 in `bad_limit_numbers_yaml` + > Resource 'Resource335' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource336` (AWS::SNS::Topic) → `Properties.Tags` L1075 in `bad_limit_numbers_yaml` + > Resource 'Resource336' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource337` (AWS::SNS::Topic) → `Properties.Tags` L1077 in `bad_limit_numbers_yaml` + > Resource 'Resource337' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource338` (AWS::SNS::Topic) → `Properties.Tags` L1079 in `bad_limit_numbers_yaml` + > Resource 'Resource338' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource339` (AWS::SNS::Topic) → `Properties.Tags` L1081 in `bad_limit_numbers_yaml` + > Resource 'Resource339' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource34` (AWS::SNS::Topic) → `Properties.Tags` L471 in `bad_limit_numbers_yaml` + > Resource 'Resource34' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource340` (AWS::SNS::Topic) → `Properties.Tags` L1083 in `bad_limit_numbers_yaml` + > Resource 'Resource340' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource341` (AWS::SNS::Topic) → `Properties.Tags` L1085 in `bad_limit_numbers_yaml` + > Resource 'Resource341' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource342` (AWS::SNS::Topic) → `Properties.Tags` L1087 in `bad_limit_numbers_yaml` + > Resource 'Resource342' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource343` (AWS::SNS::Topic) → `Properties.Tags` L1089 in `bad_limit_numbers_yaml` + > Resource 'Resource343' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource344` (AWS::SNS::Topic) → `Properties.Tags` L1091 in `bad_limit_numbers_yaml` + > Resource 'Resource344' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource345` (AWS::SNS::Topic) → `Properties.Tags` L1093 in `bad_limit_numbers_yaml` + > Resource 'Resource345' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource346` (AWS::SNS::Topic) → `Properties.Tags` L1095 in `bad_limit_numbers_yaml` + > Resource 'Resource346' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource347` (AWS::SNS::Topic) → `Properties.Tags` L1097 in `bad_limit_numbers_yaml` + > Resource 'Resource347' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource348` (AWS::SNS::Topic) → `Properties.Tags` L1099 in `bad_limit_numbers_yaml` + > Resource 'Resource348' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource349` (AWS::SNS::Topic) → `Properties.Tags` L1101 in `bad_limit_numbers_yaml` + > Resource 'Resource349' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource35` (AWS::SNS::Topic) → `Properties.Tags` L473 in `bad_limit_numbers_yaml` + > Resource 'Resource35' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource350` (AWS::SNS::Topic) → `Properties.Tags` L1103 in `bad_limit_numbers_yaml` + > Resource 'Resource350' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource351` (AWS::SNS::Topic) → `Properties.Tags` L1105 in `bad_limit_numbers_yaml` + > Resource 'Resource351' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource352` (AWS::SNS::Topic) → `Properties.Tags` L1107 in `bad_limit_numbers_yaml` + > Resource 'Resource352' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource353` (AWS::SNS::Topic) → `Properties.Tags` L1109 in `bad_limit_numbers_yaml` + > Resource 'Resource353' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource354` (AWS::SNS::Topic) → `Properties.Tags` L1111 in `bad_limit_numbers_yaml` + > Resource 'Resource354' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource355` (AWS::SNS::Topic) → `Properties.Tags` L1113 in `bad_limit_numbers_yaml` + > Resource 'Resource355' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource356` (AWS::SNS::Topic) → `Properties.Tags` L1115 in `bad_limit_numbers_yaml` + > Resource 'Resource356' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource357` (AWS::SNS::Topic) → `Properties.Tags` L1117 in `bad_limit_numbers_yaml` + > Resource 'Resource357' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource358` (AWS::SNS::Topic) → `Properties.Tags` L1119 in `bad_limit_numbers_yaml` + > Resource 'Resource358' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource359` (AWS::SNS::Topic) → `Properties.Tags` L1121 in `bad_limit_numbers_yaml` + > Resource 'Resource359' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource36` (AWS::SNS::Topic) → `Properties.Tags` L475 in `bad_limit_numbers_yaml` + > Resource 'Resource36' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource360` (AWS::SNS::Topic) → `Properties.Tags` L1123 in `bad_limit_numbers_yaml` + > Resource 'Resource360' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource361` (AWS::SNS::Topic) → `Properties.Tags` L1125 in `bad_limit_numbers_yaml` + > Resource 'Resource361' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource362` (AWS::SNS::Topic) → `Properties.Tags` L1127 in `bad_limit_numbers_yaml` + > Resource 'Resource362' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource363` (AWS::SNS::Topic) → `Properties.Tags` L1129 in `bad_limit_numbers_yaml` + > Resource 'Resource363' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource364` (AWS::SNS::Topic) → `Properties.Tags` L1131 in `bad_limit_numbers_yaml` + > Resource 'Resource364' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource365` (AWS::SNS::Topic) → `Properties.Tags` L1133 in `bad_limit_numbers_yaml` + > Resource 'Resource365' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource366` (AWS::SNS::Topic) → `Properties.Tags` L1135 in `bad_limit_numbers_yaml` + > Resource 'Resource366' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource367` (AWS::SNS::Topic) → `Properties.Tags` L1137 in `bad_limit_numbers_yaml` + > Resource 'Resource367' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource368` (AWS::SNS::Topic) → `Properties.Tags` L1139 in `bad_limit_numbers_yaml` + > Resource 'Resource368' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource369` (AWS::SNS::Topic) → `Properties.Tags` L1141 in `bad_limit_numbers_yaml` + > Resource 'Resource369' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource37` (AWS::SNS::Topic) → `Properties.Tags` L477 in `bad_limit_numbers_yaml` + > Resource 'Resource37' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource370` (AWS::SNS::Topic) → `Properties.Tags` L1143 in `bad_limit_numbers_yaml` + > Resource 'Resource370' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource371` (AWS::SNS::Topic) → `Properties.Tags` L1145 in `bad_limit_numbers_yaml` + > Resource 'Resource371' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource372` (AWS::SNS::Topic) → `Properties.Tags` L1147 in `bad_limit_numbers_yaml` + > Resource 'Resource372' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource373` (AWS::SNS::Topic) → `Properties.Tags` L1149 in `bad_limit_numbers_yaml` + > Resource 'Resource373' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource374` (AWS::SNS::Topic) → `Properties.Tags` L1151 in `bad_limit_numbers_yaml` + > Resource 'Resource374' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource375` (AWS::SNS::Topic) → `Properties.Tags` L1153 in `bad_limit_numbers_yaml` + > Resource 'Resource375' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource376` (AWS::SNS::Topic) → `Properties.Tags` L1155 in `bad_limit_numbers_yaml` + > Resource 'Resource376' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource377` (AWS::SNS::Topic) → `Properties.Tags` L1157 in `bad_limit_numbers_yaml` + > Resource 'Resource377' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource378` (AWS::SNS::Topic) → `Properties.Tags` L1159 in `bad_limit_numbers_yaml` + > Resource 'Resource378' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource379` (AWS::SNS::Topic) → `Properties.Tags` L1161 in `bad_limit_numbers_yaml` + > Resource 'Resource379' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource38` (AWS::SNS::Topic) → `Properties.Tags` L479 in `bad_limit_numbers_yaml` + > Resource 'Resource38' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource380` (AWS::SNS::Topic) → `Properties.Tags` L1163 in `bad_limit_numbers_yaml` + > Resource 'Resource380' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource381` (AWS::SNS::Topic) → `Properties.Tags` L1165 in `bad_limit_numbers_yaml` + > Resource 'Resource381' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource382` (AWS::SNS::Topic) → `Properties.Tags` L1167 in `bad_limit_numbers_yaml` + > Resource 'Resource382' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource383` (AWS::SNS::Topic) → `Properties.Tags` L1169 in `bad_limit_numbers_yaml` + > Resource 'Resource383' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource384` (AWS::SNS::Topic) → `Properties.Tags` L1171 in `bad_limit_numbers_yaml` + > Resource 'Resource384' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource385` (AWS::SNS::Topic) → `Properties.Tags` L1173 in `bad_limit_numbers_yaml` + > Resource 'Resource385' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource386` (AWS::SNS::Topic) → `Properties.Tags` L1175 in `bad_limit_numbers_yaml` + > Resource 'Resource386' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource387` (AWS::SNS::Topic) → `Properties.Tags` L1177 in `bad_limit_numbers_yaml` + > Resource 'Resource387' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource388` (AWS::SNS::Topic) → `Properties.Tags` L1179 in `bad_limit_numbers_yaml` + > Resource 'Resource388' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource389` (AWS::SNS::Topic) → `Properties.Tags` L1181 in `bad_limit_numbers_yaml` + > Resource 'Resource389' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource39` (AWS::SNS::Topic) → `Properties.Tags` L481 in `bad_limit_numbers_yaml` + > Resource 'Resource39' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource390` (AWS::SNS::Topic) → `Properties.Tags` L1183 in `bad_limit_numbers_yaml` + > Resource 'Resource390' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource391` (AWS::SNS::Topic) → `Properties.Tags` L1185 in `bad_limit_numbers_yaml` + > Resource 'Resource391' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource392` (AWS::SNS::Topic) → `Properties.Tags` L1187 in `bad_limit_numbers_yaml` + > Resource 'Resource392' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource393` (AWS::SNS::Topic) → `Properties.Tags` L1189 in `bad_limit_numbers_yaml` + > Resource 'Resource393' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource394` (AWS::SNS::Topic) → `Properties.Tags` L1191 in `bad_limit_numbers_yaml` + > Resource 'Resource394' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource395` (AWS::SNS::Topic) → `Properties.Tags` L1193 in `bad_limit_numbers_yaml` + > Resource 'Resource395' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource396` (AWS::SNS::Topic) → `Properties.Tags` L1195 in `bad_limit_numbers_yaml` + > Resource 'Resource396' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource397` (AWS::SNS::Topic) → `Properties.Tags` L1197 in `bad_limit_numbers_yaml` + > Resource 'Resource397' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource398` (AWS::SNS::Topic) → `Properties.Tags` L1199 in `bad_limit_numbers_yaml` + > Resource 'Resource398' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource399` (AWS::SNS::Topic) → `Properties.Tags` L1201 in `bad_limit_numbers_yaml` + > Resource 'Resource399' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L411 in `bad_limit_numbers_yaml` + > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource40` (AWS::SNS::Topic) → `Properties.Tags` L483 in `bad_limit_numbers_yaml` + > Resource 'Resource40' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource400` (AWS::SNS::Topic) → `Properties.Tags` L1203 in `bad_limit_numbers_yaml` + > Resource 'Resource400' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource401` (AWS::SNS::Topic) → `Properties.Tags` L1205 in `bad_limit_numbers_yaml` + > Resource 'Resource401' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource402` (AWS::SNS::Topic) → `Properties.Tags` L1207 in `bad_limit_numbers_yaml` + > Resource 'Resource402' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource403` (AWS::SNS::Topic) → `Properties.Tags` L1209 in `bad_limit_numbers_yaml` + > Resource 'Resource403' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource404` (AWS::SNS::Topic) → `Properties.Tags` L1211 in `bad_limit_numbers_yaml` + > Resource 'Resource404' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource405` (AWS::SNS::Topic) → `Properties.Tags` L1213 in `bad_limit_numbers_yaml` + > Resource 'Resource405' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource406` (AWS::SNS::Topic) → `Properties.Tags` L1215 in `bad_limit_numbers_yaml` + > Resource 'Resource406' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource407` (AWS::SNS::Topic) → `Properties.Tags` L1217 in `bad_limit_numbers_yaml` + > Resource 'Resource407' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource408` (AWS::SNS::Topic) → `Properties.Tags` L1219 in `bad_limit_numbers_yaml` + > Resource 'Resource408' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource409` (AWS::SNS::Topic) → `Properties.Tags` L1221 in `bad_limit_numbers_yaml` + > Resource 'Resource409' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource41` (AWS::SNS::Topic) → `Properties.Tags` L485 in `bad_limit_numbers_yaml` + > Resource 'Resource41' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource410` (AWS::SNS::Topic) → `Properties.Tags` L1223 in `bad_limit_numbers_yaml` + > Resource 'Resource410' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource411` (AWS::SNS::Topic) → `Properties.Tags` L1225 in `bad_limit_numbers_yaml` + > Resource 'Resource411' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource412` (AWS::SNS::Topic) → `Properties.Tags` L1227 in `bad_limit_numbers_yaml` + > Resource 'Resource412' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource413` (AWS::SNS::Topic) → `Properties.Tags` L1229 in `bad_limit_numbers_yaml` + > Resource 'Resource413' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource414` (AWS::SNS::Topic) → `Properties.Tags` L1231 in `bad_limit_numbers_yaml` + > Resource 'Resource414' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource415` (AWS::SNS::Topic) → `Properties.Tags` L1233 in `bad_limit_numbers_yaml` + > Resource 'Resource415' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource416` (AWS::SNS::Topic) → `Properties.Tags` L1235 in `bad_limit_numbers_yaml` + > Resource 'Resource416' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource417` (AWS::SNS::Topic) → `Properties.Tags` L1237 in `bad_limit_numbers_yaml` + > Resource 'Resource417' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource418` (AWS::SNS::Topic) → `Properties.Tags` L1239 in `bad_limit_numbers_yaml` + > Resource 'Resource418' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource419` (AWS::SNS::Topic) → `Properties.Tags` L1241 in `bad_limit_numbers_yaml` + > Resource 'Resource419' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource42` (AWS::SNS::Topic) → `Properties.Tags` L487 in `bad_limit_numbers_yaml` + > Resource 'Resource42' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource420` (AWS::SNS::Topic) → `Properties.Tags` L1243 in `bad_limit_numbers_yaml` + > Resource 'Resource420' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource421` (AWS::SNS::Topic) → `Properties.Tags` L1245 in `bad_limit_numbers_yaml` + > Resource 'Resource421' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource422` (AWS::SNS::Topic) → `Properties.Tags` L1247 in `bad_limit_numbers_yaml` + > Resource 'Resource422' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource423` (AWS::SNS::Topic) → `Properties.Tags` L1249 in `bad_limit_numbers_yaml` + > Resource 'Resource423' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource424` (AWS::SNS::Topic) → `Properties.Tags` L1251 in `bad_limit_numbers_yaml` + > Resource 'Resource424' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource425` (AWS::SNS::Topic) → `Properties.Tags` L1253 in `bad_limit_numbers_yaml` + > Resource 'Resource425' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource426` (AWS::SNS::Topic) → `Properties.Tags` L1255 in `bad_limit_numbers_yaml` + > Resource 'Resource426' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource427` (AWS::SNS::Topic) → `Properties.Tags` L1257 in `bad_limit_numbers_yaml` + > Resource 'Resource427' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource428` (AWS::SNS::Topic) → `Properties.Tags` L1259 in `bad_limit_numbers_yaml` + > Resource 'Resource428' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource429` (AWS::SNS::Topic) → `Properties.Tags` L1261 in `bad_limit_numbers_yaml` + > Resource 'Resource429' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource43` (AWS::SNS::Topic) → `Properties.Tags` L489 in `bad_limit_numbers_yaml` + > Resource 'Resource43' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource430` (AWS::SNS::Topic) → `Properties.Tags` L1263 in `bad_limit_numbers_yaml` + > Resource 'Resource430' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource431` (AWS::SNS::Topic) → `Properties.Tags` L1265 in `bad_limit_numbers_yaml` + > Resource 'Resource431' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource432` (AWS::SNS::Topic) → `Properties.Tags` L1267 in `bad_limit_numbers_yaml` + > Resource 'Resource432' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource433` (AWS::SNS::Topic) → `Properties.Tags` L1269 in `bad_limit_numbers_yaml` + > Resource 'Resource433' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource434` (AWS::SNS::Topic) → `Properties.Tags` L1271 in `bad_limit_numbers_yaml` + > Resource 'Resource434' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource435` (AWS::SNS::Topic) → `Properties.Tags` L1273 in `bad_limit_numbers_yaml` + > Resource 'Resource435' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource436` (AWS::SNS::Topic) → `Properties.Tags` L1275 in `bad_limit_numbers_yaml` + > Resource 'Resource436' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource437` (AWS::SNS::Topic) → `Properties.Tags` L1277 in `bad_limit_numbers_yaml` + > Resource 'Resource437' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource438` (AWS::SNS::Topic) → `Properties.Tags` L1279 in `bad_limit_numbers_yaml` + > Resource 'Resource438' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource439` (AWS::SNS::Topic) → `Properties.Tags` L1281 in `bad_limit_numbers_yaml` + > Resource 'Resource439' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource44` (AWS::SNS::Topic) → `Properties.Tags` L491 in `bad_limit_numbers_yaml` + > Resource 'Resource44' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource440` (AWS::SNS::Topic) → `Properties.Tags` L1283 in `bad_limit_numbers_yaml` + > Resource 'Resource440' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource441` (AWS::SNS::Topic) → `Properties.Tags` L1285 in `bad_limit_numbers_yaml` + > Resource 'Resource441' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource442` (AWS::SNS::Topic) → `Properties.Tags` L1287 in `bad_limit_numbers_yaml` + > Resource 'Resource442' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource443` (AWS::SNS::Topic) → `Properties.Tags` L1289 in `bad_limit_numbers_yaml` + > Resource 'Resource443' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource444` (AWS::SNS::Topic) → `Properties.Tags` L1291 in `bad_limit_numbers_yaml` + > Resource 'Resource444' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource445` (AWS::SNS::Topic) → `Properties.Tags` L1293 in `bad_limit_numbers_yaml` + > Resource 'Resource445' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource446` (AWS::SNS::Topic) → `Properties.Tags` L1295 in `bad_limit_numbers_yaml` + > Resource 'Resource446' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource447` (AWS::SNS::Topic) → `Properties.Tags` L1297 in `bad_limit_numbers_yaml` + > Resource 'Resource447' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource448` (AWS::SNS::Topic) → `Properties.Tags` L1299 in `bad_limit_numbers_yaml` + > Resource 'Resource448' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource449` (AWS::SNS::Topic) → `Properties.Tags` L1301 in `bad_limit_numbers_yaml` + > Resource 'Resource449' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource45` (AWS::SNS::Topic) → `Properties.Tags` L493 in `bad_limit_numbers_yaml` + > Resource 'Resource45' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource450` (AWS::SNS::Topic) → `Properties.Tags` L1303 in `bad_limit_numbers_yaml` + > Resource 'Resource450' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource451` (AWS::SNS::Topic) → `Properties.Tags` L1305 in `bad_limit_numbers_yaml` + > Resource 'Resource451' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource452` (AWS::SNS::Topic) → `Properties.Tags` L1307 in `bad_limit_numbers_yaml` + > Resource 'Resource452' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource453` (AWS::SNS::Topic) → `Properties.Tags` L1309 in `bad_limit_numbers_yaml` + > Resource 'Resource453' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource454` (AWS::SNS::Topic) → `Properties.Tags` L1311 in `bad_limit_numbers_yaml` + > Resource 'Resource454' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource455` (AWS::SNS::Topic) → `Properties.Tags` L1313 in `bad_limit_numbers_yaml` + > Resource 'Resource455' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource456` (AWS::SNS::Topic) → `Properties.Tags` L1315 in `bad_limit_numbers_yaml` + > Resource 'Resource456' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource457` (AWS::SNS::Topic) → `Properties.Tags` L1317 in `bad_limit_numbers_yaml` + > Resource 'Resource457' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource458` (AWS::SNS::Topic) → `Properties.Tags` L1319 in `bad_limit_numbers_yaml` + > Resource 'Resource458' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource459` (AWS::SNS::Topic) → `Properties.Tags` L1321 in `bad_limit_numbers_yaml` + > Resource 'Resource459' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource46` (AWS::SNS::Topic) → `Properties.Tags` L495 in `bad_limit_numbers_yaml` + > Resource 'Resource46' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource460` (AWS::SNS::Topic) → `Properties.Tags` L1323 in `bad_limit_numbers_yaml` + > Resource 'Resource460' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource461` (AWS::SNS::Topic) → `Properties.Tags` L1325 in `bad_limit_numbers_yaml` + > Resource 'Resource461' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource462` (AWS::SNS::Topic) → `Properties.Tags` L1327 in `bad_limit_numbers_yaml` + > Resource 'Resource462' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource463` (AWS::SNS::Topic) → `Properties.Tags` L1329 in `bad_limit_numbers_yaml` + > Resource 'Resource463' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource464` (AWS::SNS::Topic) → `Properties.Tags` L1331 in `bad_limit_numbers_yaml` + > Resource 'Resource464' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource465` (AWS::SNS::Topic) → `Properties.Tags` L1333 in `bad_limit_numbers_yaml` + > Resource 'Resource465' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource466` (AWS::SNS::Topic) → `Properties.Tags` L1335 in `bad_limit_numbers_yaml` + > Resource 'Resource466' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource467` (AWS::SNS::Topic) → `Properties.Tags` L1337 in `bad_limit_numbers_yaml` + > Resource 'Resource467' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource468` (AWS::SNS::Topic) → `Properties.Tags` L1339 in `bad_limit_numbers_yaml` + > Resource 'Resource468' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource469` (AWS::SNS::Topic) → `Properties.Tags` L1341 in `bad_limit_numbers_yaml` + > Resource 'Resource469' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource47` (AWS::SNS::Topic) → `Properties.Tags` L497 in `bad_limit_numbers_yaml` + > Resource 'Resource47' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource470` (AWS::SNS::Topic) → `Properties.Tags` L1343 in `bad_limit_numbers_yaml` + > Resource 'Resource470' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource471` (AWS::SNS::Topic) → `Properties.Tags` L1345 in `bad_limit_numbers_yaml` + > Resource 'Resource471' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource472` (AWS::SNS::Topic) → `Properties.Tags` L1347 in `bad_limit_numbers_yaml` + > Resource 'Resource472' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource473` (AWS::SNS::Topic) → `Properties.Tags` L1349 in `bad_limit_numbers_yaml` + > Resource 'Resource473' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource474` (AWS::SNS::Topic) → `Properties.Tags` L1351 in `bad_limit_numbers_yaml` + > Resource 'Resource474' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource475` (AWS::SNS::Topic) → `Properties.Tags` L1353 in `bad_limit_numbers_yaml` + > Resource 'Resource475' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource476` (AWS::SNS::Topic) → `Properties.Tags` L1355 in `bad_limit_numbers_yaml` + > Resource 'Resource476' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource477` (AWS::SNS::Topic) → `Properties.Tags` L1357 in `bad_limit_numbers_yaml` + > Resource 'Resource477' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource478` (AWS::SNS::Topic) → `Properties.Tags` L1359 in `bad_limit_numbers_yaml` + > Resource 'Resource478' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource479` (AWS::SNS::Topic) → `Properties.Tags` L1361 in `bad_limit_numbers_yaml` + > Resource 'Resource479' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource48` (AWS::SNS::Topic) → `Properties.Tags` L499 in `bad_limit_numbers_yaml` + > Resource 'Resource48' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource480` (AWS::SNS::Topic) → `Properties.Tags` L1363 in `bad_limit_numbers_yaml` + > Resource 'Resource480' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource481` (AWS::SNS::Topic) → `Properties.Tags` L1365 in `bad_limit_numbers_yaml` + > Resource 'Resource481' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource482` (AWS::SNS::Topic) → `Properties.Tags` L1367 in `bad_limit_numbers_yaml` + > Resource 'Resource482' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource483` (AWS::SNS::Topic) → `Properties.Tags` L1369 in `bad_limit_numbers_yaml` + > Resource 'Resource483' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource484` (AWS::SNS::Topic) → `Properties.Tags` L1371 in `bad_limit_numbers_yaml` + > Resource 'Resource484' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource485` (AWS::SNS::Topic) → `Properties.Tags` L1373 in `bad_limit_numbers_yaml` + > Resource 'Resource485' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource486` (AWS::SNS::Topic) → `Properties.Tags` L1375 in `bad_limit_numbers_yaml` + > Resource 'Resource486' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource487` (AWS::SNS::Topic) → `Properties.Tags` L1377 in `bad_limit_numbers_yaml` + > Resource 'Resource487' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource488` (AWS::SNS::Topic) → `Properties.Tags` L1379 in `bad_limit_numbers_yaml` + > Resource 'Resource488' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource489` (AWS::SNS::Topic) → `Properties.Tags` L1381 in `bad_limit_numbers_yaml` + > Resource 'Resource489' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource49` (AWS::SNS::Topic) → `Properties.Tags` L501 in `bad_limit_numbers_yaml` + > Resource 'Resource49' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource490` (AWS::SNS::Topic) → `Properties.Tags` L1383 in `bad_limit_numbers_yaml` + > Resource 'Resource490' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource491` (AWS::SNS::Topic) → `Properties.Tags` L1385 in `bad_limit_numbers_yaml` + > Resource 'Resource491' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource492` (AWS::SNS::Topic) → `Properties.Tags` L1387 in `bad_limit_numbers_yaml` + > Resource 'Resource492' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource493` (AWS::SNS::Topic) → `Properties.Tags` L1389 in `bad_limit_numbers_yaml` + > Resource 'Resource493' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource494` (AWS::SNS::Topic) → `Properties.Tags` L1391 in `bad_limit_numbers_yaml` + > Resource 'Resource494' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource495` (AWS::SNS::Topic) → `Properties.Tags` L1393 in `bad_limit_numbers_yaml` + > Resource 'Resource495' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource496` (AWS::SNS::Topic) → `Properties.Tags` L1395 in `bad_limit_numbers_yaml` + > Resource 'Resource496' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource497` (AWS::SNS::Topic) → `Properties.Tags` L1397 in `bad_limit_numbers_yaml` + > Resource 'Resource497' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource498` (AWS::SNS::Topic) → `Properties.Tags` L1399 in `bad_limit_numbers_yaml` + > Resource 'Resource498' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource499` (AWS::SNS::Topic) → `Properties.Tags` L1401 in `bad_limit_numbers_yaml` + > Resource 'Resource499' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L413 in `bad_limit_numbers_yaml` + > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource50` (AWS::SNS::Topic) → `Properties.Tags` L503 in `bad_limit_numbers_yaml` + > Resource 'Resource50' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource500` (AWS::SNS::Topic) → `Properties.Tags` L1403 in `bad_limit_numbers_yaml` + > Resource 'Resource500' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource501` (AWS::SNS::Topic) → `Properties.Tags` L1405 in `bad_limit_numbers_yaml` + > Resource 'Resource501' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource51` (AWS::SNS::Topic) → `Properties.Tags` L505 in `bad_limit_numbers_yaml` + > Resource 'Resource51' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource52` (AWS::SNS::Topic) → `Properties.Tags` L507 in `bad_limit_numbers_yaml` + > Resource 'Resource52' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource53` (AWS::SNS::Topic) → `Properties.Tags` L509 in `bad_limit_numbers_yaml` + > Resource 'Resource53' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource54` (AWS::SNS::Topic) → `Properties.Tags` L511 in `bad_limit_numbers_yaml` + > Resource 'Resource54' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource55` (AWS::SNS::Topic) → `Properties.Tags` L513 in `bad_limit_numbers_yaml` + > Resource 'Resource55' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource56` (AWS::SNS::Topic) → `Properties.Tags` L515 in `bad_limit_numbers_yaml` + > Resource 'Resource56' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource57` (AWS::SNS::Topic) → `Properties.Tags` L517 in `bad_limit_numbers_yaml` + > Resource 'Resource57' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource58` (AWS::SNS::Topic) → `Properties.Tags` L519 in `bad_limit_numbers_yaml` + > Resource 'Resource58' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource59` (AWS::SNS::Topic) → `Properties.Tags` L521 in `bad_limit_numbers_yaml` + > Resource 'Resource59' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L415 in `bad_limit_numbers_yaml` + > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource60` (AWS::SNS::Topic) → `Properties.Tags` L523 in `bad_limit_numbers_yaml` + > Resource 'Resource60' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource61` (AWS::SNS::Topic) → `Properties.Tags` L525 in `bad_limit_numbers_yaml` + > Resource 'Resource61' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource62` (AWS::SNS::Topic) → `Properties.Tags` L527 in `bad_limit_numbers_yaml` + > Resource 'Resource62' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource63` (AWS::SNS::Topic) → `Properties.Tags` L529 in `bad_limit_numbers_yaml` + > Resource 'Resource63' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource64` (AWS::SNS::Topic) → `Properties.Tags` L531 in `bad_limit_numbers_yaml` + > Resource 'Resource64' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource65` (AWS::SNS::Topic) → `Properties.Tags` L533 in `bad_limit_numbers_yaml` + > Resource 'Resource65' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource66` (AWS::SNS::Topic) → `Properties.Tags` L535 in `bad_limit_numbers_yaml` + > Resource 'Resource66' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource67` (AWS::SNS::Topic) → `Properties.Tags` L537 in `bad_limit_numbers_yaml` + > Resource 'Resource67' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource68` (AWS::SNS::Topic) → `Properties.Tags` L539 in `bad_limit_numbers_yaml` + > Resource 'Resource68' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource69` (AWS::SNS::Topic) → `Properties.Tags` L541 in `bad_limit_numbers_yaml` + > Resource 'Resource69' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L417 in `bad_limit_numbers_yaml` + > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource70` (AWS::SNS::Topic) → `Properties.Tags` L543 in `bad_limit_numbers_yaml` + > Resource 'Resource70' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource71` (AWS::SNS::Topic) → `Properties.Tags` L545 in `bad_limit_numbers_yaml` + > Resource 'Resource71' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource72` (AWS::SNS::Topic) → `Properties.Tags` L547 in `bad_limit_numbers_yaml` + > Resource 'Resource72' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource73` (AWS::SNS::Topic) → `Properties.Tags` L549 in `bad_limit_numbers_yaml` + > Resource 'Resource73' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource74` (AWS::SNS::Topic) → `Properties.Tags` L551 in `bad_limit_numbers_yaml` + > Resource 'Resource74' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource75` (AWS::SNS::Topic) → `Properties.Tags` L553 in `bad_limit_numbers_yaml` + > Resource 'Resource75' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource76` (AWS::SNS::Topic) → `Properties.Tags` L555 in `bad_limit_numbers_yaml` + > Resource 'Resource76' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource77` (AWS::SNS::Topic) → `Properties.Tags` L557 in `bad_limit_numbers_yaml` + > Resource 'Resource77' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource78` (AWS::SNS::Topic) → `Properties.Tags` L559 in `bad_limit_numbers_yaml` + > Resource 'Resource78' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource79` (AWS::SNS::Topic) → `Properties.Tags` L561 in `bad_limit_numbers_yaml` + > Resource 'Resource79' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L419 in `bad_limit_numbers_yaml` + > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource80` (AWS::SNS::Topic) → `Properties.Tags` L563 in `bad_limit_numbers_yaml` + > Resource 'Resource80' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource81` (AWS::SNS::Topic) → `Properties.Tags` L565 in `bad_limit_numbers_yaml` + > Resource 'Resource81' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource82` (AWS::SNS::Topic) → `Properties.Tags` L567 in `bad_limit_numbers_yaml` + > Resource 'Resource82' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource83` (AWS::SNS::Topic) → `Properties.Tags` L569 in `bad_limit_numbers_yaml` + > Resource 'Resource83' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource84` (AWS::SNS::Topic) → `Properties.Tags` L571 in `bad_limit_numbers_yaml` + > Resource 'Resource84' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource85` (AWS::SNS::Topic) → `Properties.Tags` L573 in `bad_limit_numbers_yaml` + > Resource 'Resource85' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource86` (AWS::SNS::Topic) → `Properties.Tags` L575 in `bad_limit_numbers_yaml` + > Resource 'Resource86' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource87` (AWS::SNS::Topic) → `Properties.Tags` L577 in `bad_limit_numbers_yaml` + > Resource 'Resource87' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource88` (AWS::SNS::Topic) → `Properties.Tags` L579 in `bad_limit_numbers_yaml` + > Resource 'Resource88' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource89` (AWS::SNS::Topic) → `Properties.Tags` L581 in `bad_limit_numbers_yaml` + > Resource 'Resource89' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L421 in `bad_limit_numbers_yaml` + > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource90` (AWS::SNS::Topic) → `Properties.Tags` L583 in `bad_limit_numbers_yaml` + > Resource 'Resource90' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource91` (AWS::SNS::Topic) → `Properties.Tags` L585 in `bad_limit_numbers_yaml` + > Resource 'Resource91' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource92` (AWS::SNS::Topic) → `Properties.Tags` L587 in `bad_limit_numbers_yaml` + > Resource 'Resource92' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource93` (AWS::SNS::Topic) → `Properties.Tags` L589 in `bad_limit_numbers_yaml` + > Resource 'Resource93' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource94` (AWS::SNS::Topic) → `Properties.Tags` L591 in `bad_limit_numbers_yaml` + > Resource 'Resource94' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource95` (AWS::SNS::Topic) → `Properties.Tags` L593 in `bad_limit_numbers_yaml` + > Resource 'Resource95' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource96` (AWS::SNS::Topic) → `Properties.Tags` L595 in `bad_limit_numbers_yaml` + > Resource 'Resource96' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource97` (AWS::SNS::Topic) → `Properties.Tags` L597 in `bad_limit_numbers_yaml` + > Resource 'Resource97' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource98` (AWS::SNS::Topic) → `Properties.Tags` L599 in `bad_limit_numbers_yaml` + > Resource 'Resource98' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource99` (AWS::SNS::Topic) → `Properties.Tags` L601 in `bad_limit_numbers_yaml` + > Resource 'Resource99' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `bad_mappings_used_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SNSTopicWithSecretNameInRef` (AWS::SNS::Topic) → `Properties.Tags` L10 in `bad_noecho_yaml` + > Resource 'SNSTopicWithSecretNameInRef' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SNSTopicWithSecretNameInSub` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_noecho_yaml` + > Resource 'SNSTopicWithSecretNameInSub' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BadDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L6 in `bad_opensearch_instance_type_yaml` + > Resource 'BadDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured +- **I9040** `ValidDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L11 in `bad_opensearch_instance_type_yaml` + > Resource 'ValidDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_references_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_targets_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L13 in `bad_output_value_not_string_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L17 in `bad_override_complete_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_complete_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L23 in `bad_override_complete_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `mySpotFleet` (AWS::EC2::SpotFleet) → `Properties.Tags` L20 in `bad_override_complete_yaml` + > Resource 'mySpotFleet' of type 'AWS::EC2::SpotFleet' supports Tags but none are configured +- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L13 in `bad_override_complete_yaml` + > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myGameLift` (AWS::GameLift::Alias) → `Properties.Tags` L8 in `bad_override_exclude_yaml` + > Resource 'myGameLift' of type 'AWS::GameLift::Alias' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_override_exclude_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_override_exclude_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_override_include_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L27 in `bad_override_include_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L8 in `bad_override_include_yaml` + > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_required_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_param_constraints_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L62 in `bad_parameters_configuration_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_pipeline_no_source_first_stage_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_previous_gen_instance_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Tags` L15 in `bad_previous_generation_instances_yaml` + > Resource 'CacheCluster' of type 'AWS::ElastiCache::CacheCluster' supports Tags but none are configured +- **I9040** `DBInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L11 in `bad_previous_generation_instances_yaml` + > Resource 'DBInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Domain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L2 in `bad_previous_generation_instances_yaml` + > Resource 'Domain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `Domain2` (AWS::Elasticsearch::Domain) → `Properties.Tags` L21 in `bad_previous_generation_instances_yaml` + > Resource 'Domain2' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L26 in `bad_previous_generation_instances_yaml` + > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_previous_generation_instances_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_properties_ebs_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_properties_ebs_yaml` + > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_properties_password_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Tags` L27 in `bad_properties_password_yaml` + > Resource 'MyNewDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L36 in `bad_properties_password_yaml` + > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L78 in `bad_properties_sg_ingress_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_properties_sg_ingress_yaml` + > Resource 'mySecurityGroupNonVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L30 in `bad_properties_sg_ingress_yaml` + > Resource 'mySecurityGroupVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `Db` (AWS::RDS::DBInstance) → `Properties.Tags` L7 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` + > Resource 'Db' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_rds_public_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `IGW` (AWS::EC2::InternetGateway) → `Properties.Tags` L29 in `bad_redshift_internet_accessible_yaml` + > Resource 'IGW' of type 'AWS::EC2::InternetGateway' supports Tags but none are configured +- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `bad_redshift_internet_accessible_yaml` + > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured +- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `bad_redshift_internet_accessible_yaml` + > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `bad_redshift_internet_accessible_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_redshift_internet_accessible_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_refs_yaml` + > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_refs_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Policy` (AWS::KMS::Key) → `Properties.Tags` L5 in `bad_resource_policy_no_statement_yaml` + > Resource 'Policy' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L14 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L19 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L24 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L29 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L39 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L42 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_dependson_yaml` + > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L7 in `bad_resources_circular_dependency_dependson_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L65 in `bad_resources_circular_dependency_yaml` + > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L52 in `bad_resources_circular_dependency_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstanceSub` (AWS::EC2::Instance) → `Properties.Tags` L215 in `bad_resources_circular_dependency_yaml` + > Resource 'myInstanceSub' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myKms` (AWS::KMS::Key) → `Properties.Tags` L155 in `bad_resources_circular_dependency_yaml` + > Resource 'myKms' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Tags` L99 in `bad_resources_circular_dependency_yaml` + > Resource 'myRoleToWriteToS3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L25 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L35 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L43 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Tags` L222 in `bad_resources_circular_dependency_yaml` + > Resource 'taskdefinition' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L16 in `bad_resources_cloudformation_stacks_yaml` + > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `bad_resources_cloudformation_stacks_yaml` + > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_resources_cloudfront_invalid_aliases_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `bad_resources_codepipeline_stages_second_stage_yaml` + > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_resources_creation_policy_unsupported_e3055_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_deletionpolicy_yaml` + > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_deletionpolicy_yaml` + > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_deletionpolicy_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_deletionpolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.Tags` L22 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'ConditionalGSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.Tags` L37 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'ConditionalLSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `MissingDefaultThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L12 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'MissingDefaultThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L23 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L82 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L61 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L50 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L35 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'NullThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `InvalidDriverInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L36 in `bad_resources_ecs_fargate_conditional_properties_yaml` + > Resource 'InvalidDriverInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `PlacementInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L15 in `bad_resources_ecs_fargate_conditional_properties_yaml` + > Resource 'PlacementInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L202 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'ConditionalEc2ThenFargateMissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L191 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'ConditionalFargateThenEc2MissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L133 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L161 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Tags` L147 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalMemory' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L175 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalPlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L37 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateMissingAll' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateNullCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L102 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L52 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargatePlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Tags` L70 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateUnsupportedLogDriver' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L22 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateWrongNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L98 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'CpuInvalidThenValid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L111 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'CpuValidThenInvalid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L7 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'EightVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L59 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'MalformedCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L72 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'NonCanonicalCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L85 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'OverflowingMemoryUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L20 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'SixteenVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L33 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'ThirtyTwoVcpuUnsupportedSixtyFourGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L46 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'ThirtyTwoVcpuUnsupportedTwoFortyGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L36 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L91 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FourtReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L20 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L28 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L12 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L55 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L74 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `RoleConditionalPolicies` (AWS::IAM::Role) → `Properties.Tags` L18 in `bad_resources_iam_iam_policy_conditional_policies_yaml` + > Resource 'RoleConditionalPolicies' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RoleNotActionConditional` (AWS::IAM::Role) → `Properties.Tags` L53 in `bad_resources_iam_iam_policy_conditional_policies_yaml` + > Resource 'RoleNotActionConditional' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIamRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `bad_resources_iam_iam_policy_yaml` + > Resource 'rIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Tags` L88 in `bad_resources_iam_identity_policy_e3510_yaml` + > Resource 'PermissionSetBadPolicy' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured +- **I9040** `UserInlinePolicy` (AWS::IAM::User) → `Properties.Tags` L101 in `bad_resources_iam_identity_policy_e3510_yaml` + > Resource 'UserInlinePolicy' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `ecr1` (AWS::ECR::Repository) → `Properties.Tags` L6 in `bad_resources_iam_resource_policy_yaml` + > Resource 'ecr1' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `ecr2` (AWS::ECR::Repository) → `Properties.Tags` L19 in `bad_resources_iam_resource_policy_yaml` + > Resource 'ecr2' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L8 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.Tags` L18 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.Tags` L28 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `my.Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_resources_name_yaml` + > Resource 'my.Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `my_Instance` (AWS::EC2::Instance) → `Properties.Tags` L9 in `bad_resources_name_yaml` + > Resource 'my_Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L142 in `bad_resources_primary_identifiers_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L149 in `bad_resources_primary_identifiers_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Project1` (AWS::CodeBuild::Project) → `Properties.Tags` L167 in `bad_resources_primary_identifiers_yaml` + > Resource 'Project1' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `Project2` (AWS::CodeBuild::Project) → `Properties.Tags` L187 in `bad_resources_primary_identifiers_yaml` + > Resource 'Project2' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L52 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole5` (AWS::IAM::Role) → `Properties.Tags` L98 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole6` (AWS::IAM::Role) → `Properties.Tags` L120 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ExampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_primitive_types_map_yaml` + > Resource 'ExampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ExampleLambda1` (AWS::Lambda::Function) → `Properties.Tags` L23 in `bad_resources_properties_primitive_types_map_yaml` + > Resource 'ExampleLambda1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L14 in `bad_resources_properties_string_size_yaml` + > Resource 'CloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `bad_resources_properties_string_size_yaml` + > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `myRepository2` (AWS::CodeCommit::Repository) → `Properties.Tags` L10 in `bad_resources_properties_string_size_yaml` + > Resource 'myRepository2' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `SampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_templated_code_yaml` + > Resource 'SampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L25 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance7' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Tags` L51 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance8' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Tags` L58 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance9' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBCluster) → `Properties.Tags` L5 in `bad_resources_rds_not_enum_master_username_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_resources_sns_topic_name_yaml` + > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Name` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_resources_uniqueNames_yaml` + > Resource 'Name' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_resources_update_policy_unsupported_e3016_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_s3_tiering_bad_days_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Cluster` (AWS::SageMaker::Cluster) → `Properties.Tags` L44 in `bad_sagemaker_instance_types_yaml` + > Resource 'Cluster' of type 'AWS::SageMaker::Cluster' supports Tags but none are configured +- **I9040** `InferenceExperiment` (AWS::SageMaker::InferenceExperiment) → `Properties.Tags` L22 in `bad_sagemaker_instance_types_yaml` + > Resource 'InferenceExperiment' of type 'AWS::SageMaker::InferenceExperiment' supports Tags but none are configured +- **I9040** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.Tags` L34 in `bad_sagemaker_instance_types_yaml` + > Resource 'ModelPackage' of type 'AWS::SageMaker::ModelPackage' supports Tags but none are configured +- **I9040** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.Tags` L14 in `bad_sagemaker_instance_types_yaml` + > Resource 'ModelQualityJobDefinition' of type 'AWS::SageMaker::ModelQualityJobDefinition' supports Tags but none are configured +- **I9040** `MonitoringSchedule` (AWS::SageMaker::MonitoringSchedule) → `Properties.Tags` L6 in `bad_sagemaker_instance_types_yaml` + > Resource 'MonitoringSchedule' of type 'AWS::SageMaker::MonitoringSchedule' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_bogus_name_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_wrong_date_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_additional_props_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NoAZ` (AWS::EC2::Volume) → `Properties.Tags` L13 in `bad_schema_composition_yaml` + > Resource 'NoAZ' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Tags` L6 in `bad_schema_composition_yaml` + > Resource 'NoImage' of type 'AWS::AppStream::ImageBuilder' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_schema_conditional_type_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_enum_violation_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_schema_format_violation_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.Tags` L36 in `bad_schema_lifecycle_yaml` + > Resource 'DeprecatedLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EolLambda` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_schema_lifecycle_yaml` + > Resource 'EolLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.Tags` L12 in `bad_schema_lifecycle_yaml` + > Resource 'SunsetResource' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_schema_numeric_bounds_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Tags` L21 in `bad_schema_property_constraints_yaml` + > Resource 'DeprecatedProp' of type 'AWS::Athena::WorkGroup' supports Tags but none are configured +- **I9040** `PatternBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_property_constraints_yaml` + > Resource 'PatternBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Lambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_schema_string_length_yaml` + > Resource 'Lambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AlarmBothStats` (AWS::CloudWatch::Alarm) → `Properties.Tags` L6 in `bad_schema_structural_yaml` + > Resource 'AlarmBothStats' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.Tags` L19 in `bad_schema_structural_yaml` + > Resource 'SubnetNoCidr' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_type_mismatch_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_security_issues_yaml` + > Resource 'OpenSSH' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_bad_port_range_yaml` + > Resource 'SG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_open_egress_yaml` + > Resource 'OpenSG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_simple_sub_param_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_sns_cross_account_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `bad_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L80 in `bad_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_no_suffix_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DLQ` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_standard_dlq_yaml` + > Resource 'DLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `MainQueue` (AWS::SQS::Queue) → `Properties.Tags` L9 in `bad_sqs_fifo_standard_dlq_yaml` + > Resource 'MainQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `bad_ssm_document_invalid_yaml` + > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_bad_start_at_yaml` + > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachine` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_invalid_state_yaml` + > Resource 'StateMachine' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_sub_needed_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_sub_nested_intrinsic_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `OtherBucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_sub_nested_intrinsic_yaml` + > Resource 'OtherBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_outside_vpc_yaml` + > Resource 'SubnetOutside' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_outside_vpc_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L14 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetC` (AWS::EC2::Subnet) → `Properties.Tags` L26 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetC' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetD` (AWS::EC2::Subnet) → `Properties.Tags` L32 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetD' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_subnet_overlap_multi_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_overlap_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `bad_subnet_overlap_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_overlap_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_undefined_condition_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_unknown_properties_yaml` + > Resource 'BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AppFunction` (AWS::Lambda::Function) → `Properties.Tags` L52 in `cdk_DemoStack.template_json` + > Resource 'AppFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AppRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_DemoStack.template_json` + > Resource 'AppRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L94 in `cdk_DemoStack.template_json` + > Resource 'AppSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DataBucket` (AWS::S3::Bucket) → `Properties.Tags` L40 in `cdk_DemoStack.template_json` + > Resource 'DataBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DataTable` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `cdk_DemoStack.template_json` + > Resource 'DataTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L126 in `cdk_DemoStack.template_json` + > Resource 'QueueMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `TaskQueue` (AWS::SQS::Queue) → `Properties.Tags` L117 in `cdk_DemoStack.template_json` + > Resource 'TaskQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Tags` L5 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'AdminSecretB9452750' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured +- **I9040** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.Tags` L68 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'ConsumerLambdaLogGroupD33C6265' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.Tags` L22 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'RabbitMqBrokerE7F26F68' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionBD0C2D50` (AWS::Lambda::Function) → `Properties.Tags` L165 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionBD0C2D50' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L201 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` (AWS::IAM::Role) → `Properties.Tags` L615 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` (AWS::Lambda::Function) → `Properties.Tags` L732 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` (AWS::Lambda::Function) → `Properties.Tags` L561 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` (AWS::IAM::Role) → `Properties.Tags` L437 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` (AWS::Lambda::Function) → `Properties.Tags` L900 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` (AWS::IAM::Role) → `Properties.Tags` L783 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1036 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` (AWS::IAM::Role) → `Properties.Tags` L951 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` (AWS::Lambda::Function) → `Properties.Tags` L402 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A` (AWS::IAM::Role) → `Properties.Tags` L344 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` (AWS::Lambda::Function) → `Properties.Tags` L309 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54` (AWS::IAM::Role) → `Properties.Tags` L229 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionServiceRole095C1C28` (AWS::IAM::Role) → `Properties.Tags` L80 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionServiceRole095C1C28' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MasterBranch` (AWS::Amplify::Branch) → `Properties.Tags` L16 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Resource 'MasterBranch' of type 'AWS::Amplify::Branch' supports Tags but none are configured +- **I9040** `testapp` (AWS::Amplify::App) → `Properties.Tags` L5 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Resource 'testapp' of type 'AWS::Amplify::App' supports Tags but none are configured +- **I9040** `createItemFunction8D47E48A` (AWS::Lambda::Function) → `Properties.Tags` L379 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'createItemFunction8D47E48A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `createItemFunctionServiceRole1BBF2178` (AWS::IAM::Role) → `Properties.Tags` L288 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'createItemFunctionServiceRole1BBF2178' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `deleteItemFunction2918B1B0` (AWS::Lambda::Function) → `Properties.Tags` L635 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'deleteItemFunction2918B1B0' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `deleteItemFunctionServiceRole5C201FCC` (AWS::IAM::Role) → `Properties.Tags` L544 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'deleteItemFunctionServiceRole5C201FCC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `getAllItemsFunction0B7A913E` (AWS::Lambda::Function) → `Properties.Tags` L251 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getAllItemsFunction0B7A913E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `getAllItemsFunctionServiceRoleCC084440` (AWS::IAM::Role) → `Properties.Tags` L160 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getAllItemsFunctionServiceRoleCC084440' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `getOneItemFunctionE3257B22` (AWS::Lambda::Function) → `Properties.Tags` L123 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getOneItemFunctionE3257B22' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `getOneItemFunctionServiceRoleCFD54796` (AWS::IAM::Role) → `Properties.Tags` L32 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getOneItemFunctionServiceRoleCFD54796' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'items07D08F4B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemsApi28111E1C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L672 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApi28111E1C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `itemsApiCloudWatchRoleB5C7B431` (AWS::IAM::Role) → `Properties.Tags` L681 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApiCloudWatchRoleB5C7B431' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.Tags` L760 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApiDeploymentStageprodE77B897D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `updateItemFunction59415205` (AWS::Lambda::Function) → `Properties.Tags` L507 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'updateItemFunction59415205' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `updateItemFunctionServiceRole40035396` (AWS::IAM::Role) → `Properties.Tags` L416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'updateItemFunctionServiceRole40035396' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayDynamoRole447127F0` (AWS::IAM::Role) → `Properties.Tags` L511 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'ApiGatewayDynamoRole447127F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigw3449931B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L164 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigw3449931B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwCloudWatchRoleC01BF930` (AWS::IAM::Role) → `Properties.Tags` L173 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwCloudWatchRoleC01BF930' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.Tags` L247 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwDeploymentStageprodAE3424CD' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwloggroup1E36CCD4` (AWS::Logs::LogGroup) → `Properties.Tags` L153 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwloggroup1E36CCD4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `apigwasynclambdafnAD6250E4` (AWS::Lambda::Function) → `Properties.Tags` L112 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnAD6250E4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `apigwasynclambdafnServiceRole607675A2` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnServiceRole607675A2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdafnloggroup3D262524` (AWS::Logs::LogGroup) → `Properties.Tags` L32 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnloggroup3D262524' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdatable1075CD30' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L178 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L101 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `authenticationlambdaDD3A2252` (AWS::Lambda::Function) → `Properties.Tags` L242 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'authenticationlambdaDD3A2252' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `authenticationlambdaServiceRole9798A92B` (AWS::IAM::Role) → `Properties.Tags` L208 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'authenticationlambdaServiceRole9798A92B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `operationallambdaFE43E13E` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'operationallambdaFE43E13E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `operationallambdaServiceRole14B56EA5` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'operationallambdaServiceRole14B56EA5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.Tags` L447 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'restapigatewayDeploymentStagedevB80C9CD7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `restapigatewayE22E31C5` (AWS::ApiGateway::RestApi) → `Properties.Tags` L420 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'restapigatewayE22E31C5' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L272 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L211 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction1A09FC241` (AWS::Lambda::Function) → `Properties.Tags` L111 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1A09FC241' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L86 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1SecurityGroupF7DF9E6F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdafunction1ServiceRoleA9EAFFE5` (AWS::IAM::Role) → `Properties.Tags` L37 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1ServiceRoleA9EAFFE5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction2F899168D` (AWS::Lambda::Function) → `Properties.Tags` L376 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2F899168D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.Tags` L351 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2SecurityGroup7268045A' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdafunction2ServiceRole380A1BE9` (AWS::IAM::Role) → `Properties.Tags` L302 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2ServiceRole380A1BE9' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapi4C7BF186` (AWS::ApiGateway::RestApi) → `Properties.Tags` L658 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapi4C7BF186' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `myapiANYStartSyncExecutionRole7935C5BB` (AWS::IAM::Role) → `Properties.Tags` L759 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiANYStartSyncExecutionRole7935C5BB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapiCloudWatchRole095452E5` (AWS::IAM::Role) → `Properties.Tags` L668 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiCloudWatchRole095452E5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.Tags` L741 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiDeploymentStagedevB1704B15' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L592 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'mystatemachine15ECA539' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `mystatemachineRole70AA91FD` (AWS::IAM::Role) → `Properties.Tags` L487 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'mystatemachineRole70AA91FD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `stepfunctionsloggroup6EBF6C71` (AWS::Logs::LogGroup) → `Properties.Tags` L476 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'stepfunctionsloggroup6EBF6C71' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L5 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapi' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `chatappapiiamrole2977C2A3` (AWS::IAM::Role) → `Properties.Tags` L440 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapiiamrole2977C2A3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L690 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapistage' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapitable5244EF8B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `connectlambdaFFAE59F3` (AWS::Lambda::Function) → `Properties.Tags` L134 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'connectlambdaFFAE59F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `connectlambdaServiceRole04DCF570` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'connectlambdaServiceRole04DCF570' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `disconnectlambdaAC22A441` (AWS::Lambda::Function) → `Properties.Tags` L261 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'disconnectlambdaAC22A441' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `disconnectlambdaServiceRole2779F08C` (AWS::IAM::Role) → `Properties.Tags` L170 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'disconnectlambdaServiceRole2779F08C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `messagelambda16C1C2A3` (AWS::Lambda::Function) → `Properties.Tags` L404 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'messagelambda16C1C2A3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `messagelambdaServiceRole544EC18A` (AWS::IAM::Role) → `Properties.Tags` L297 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'messagelambdaServiceRole544EC18A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L697 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L780 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBListener49E825B4' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L801 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBListenerTargetGroupF04FCF6D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L735 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CarApiCarsDataSourceServiceRole82F3FC8A` (AWS::IAM::Role) → `Properties.Tags` L107 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiCarsDataSourceServiceRole82F3FC8A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CarApiDefectsDataSourceServiceRole7EDF6907` (AWS::IAM::Role) → `Properties.Tags` L197 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiDefectsDataSourceServiceRole7EDF6907' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CarApiE5E7ACF5` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L81 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiE5E7ACF5' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarTableA597893A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.Tags` L32 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'DefectsTable2A57950B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `AppSync2EventBridgeApi` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSync2EventBridgeApi' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `AppSyncEventBridgeRle2A25B9B1` (AWS::Events::Rule) → `Properties.Tags` L211 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSyncEventBridgeRle2A25B9B1' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `AppSyncEventBridgeRoleE2F34FE0` (AWS::IAM::Role) → `Properties.Tags` L44 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSyncEventBridgeRoleE2F34FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `echoFunction5207BE9B` (AWS::Lambda::Function) → `Properties.Tags` L189 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'echoFunction5207BE9B' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `echoFunctionServiceRole1EBD6DF0` (AWS::IAM::Role) → `Properties.Tags` L155 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'echoFunctionServiceRole1EBD6DF0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PostsApiCdk` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Resource 'PostsApiCdk' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `Construct1FunctionWithReservedCEs6458B719` (AWS::Lambda::Function) → `Properties.Tags` L95 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1FunctionWithReservedCEs6458B719' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct1FunctionWithReservedCEsServiceRole21C8F977` (AWS::IAM::Role) → `Properties.Tags` L61 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1FunctionWithReservedCEsServiceRole21C8F977' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct1StandardFunctionD5361E84` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1StandardFunctionD5361E84' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct1StandardFunctionServiceRole716388BA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1StandardFunctionServiceRole716388BA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct2FunctionWithReservedCEs89864BB2` (AWS::Lambda::Function) → `Properties.Tags` L209 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2FunctionWithReservedCEs89864BB2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct2FunctionWithReservedCEsServiceRoleB80261C4` (AWS::IAM::Role) → `Properties.Tags` L175 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2FunctionWithReservedCEsServiceRoleB80261C4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct2StandardFunction1EBDBFFA` (AWS::Lambda::Function) → `Properties.Tags` L152 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2StandardFunction1EBDBFFA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct2StandardFunctionServiceRole450FEF35` (AWS::IAM::Role) → `Properties.Tags` L118 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2StandardFunctionServiceRole450FEF35' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Resource 'IncomingDataBucket3554D835' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured +- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured +- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured +- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured +- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Role1ABCC5F0` (AWS::IAM::Role) → `Properties.Tags` L89 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Resource 'Role1ABCC5F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchInstanceRole8DB66C4C` (AWS::IAM::Role) → `Properties.Tags` L620 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchInstanceRole8DB66C4C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchJobRole37A83758` (AWS::IAM::Role) → `Properties.Tags` L815 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchJobRole37A83758' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L567 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchSecurityGroup77EC865F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `BatchServiceRole57930367` (AWS::IAM::Role) → `Properties.Tags` L586 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchServiceRole57930367' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L537 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L465 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionFAE645C8` (AWS::Lambda::Function) → `Properties.Tags` L1034 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionFAE645C8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.Tags` L1083 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionLogGroupF7938D09' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionServiceRole55AD6E92` (AWS::IAM::Role) → `Properties.Tags` L972 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionServiceRole55AD6E92' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L747 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPComputeEnvironment' of type 'AWS::Batch::ComputeEnvironment' supports Tags but none are configured +- **I9040** `OpenMPJobDefinition` (AWS::Batch::JobDefinition) → `Properties.Tags` L861 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPJobDefinition' of type 'AWS::Batch::JobDefinition' supports Tags but none are configured +- **I9040** `OpenMPJobQueue` (AWS::Batch::JobQueue) → `Properties.Tags` L797 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPJobQueue' of type 'AWS::Batch::JobQueue' supports Tags but none are configured +- **I9040** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.Tags` L849 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPLogGroup95FEB040' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPRepositoryAB8BB3BC' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L665 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L620 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L336 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Tags` L387 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'RequestFunction0B9B463A' of type 'AWS::CloudFront::Function' supports Tags but none are configured +- **I9040** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Tags` L402 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'ResponseFunctionB78A69CA' of type 'AWS::CloudFront::Function' supports Tags but none are configured +- **I9040** `SiteDistribution3FF9535D` (AWS::CloudFront::Distribution) → `Properties.Tags` L428 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'SiteDistribution3FF9535D' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L1066 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2` (AWS::IAM::Role) → `Properties.Tags` L1032 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1640 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BlueTargetGroupF108EB01' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L2293 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipeline5EEC284B' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `BuildDeployPipelineArtifactsBucket5D4A76C1` (AWS::S3::Bucket) → `Properties.Tags` L2090 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineArtifactsBucket5D4A76C1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8` (AWS::KMS::Key) → `Properties.Tags` L2035 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965` (AWS::IAM::Role) → `Properties.Tags` L2708 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB` (AWS::IAM::Role) → `Properties.Tags` L2766 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineEventsRoleDE5B0F8F` (AWS::IAM::Role) → `Properties.Tags` L2584 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineEventsRoleDE5B0F8F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineRole3223E55F` (AWS::IAM::Role) → `Properties.Tags` L2171 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineRole3223E55F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0` (AWS::IAM::Role) → `Properties.Tags` L2471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1` (AWS::IAM::Role) → `Properties.Tags` L2650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildImage74257FD8` (AWS::CodeBuild::Project) → `Properties.Tags` L481 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildImage74257FD8' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `BuildImageRoleA9C72406` (AWS::IAM::Role) → `Properties.Tags` L265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildImageRoleA9C72406' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildLambda72E2A667` (AWS::Lambda::Function) → `Properties.Tags` L919 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildLambda72E2A667' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BuildLambdaServiceRole8FB6C033` (AWS::IAM::Role) → `Properties.Tags` L856 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildLambdaServiceRole8FB6C033' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildTestC9659529` (AWS::CodeBuild::Project) → `Properties.Tags` L813 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildTestC9659529' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `BuildTestRoleC332A422` (AWS::IAM::Role) → `Properties.Tags` L627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildTestRoleC332A422' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.Tags` L1950 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroup58220FC8' of type 'AWS::CodeDeploy::DeploymentGroup' supports Tags but none are configured +- **I9040** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.Tags` L1941 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroupApplication13EFBDA6' of type 'AWS::CodeDeploy::Application' supports Tags but none are configured +- **I9040** `CodeDeployGroupServiceRole50553EBF` (AWS::IAM::Role) → `Properties.Tags` L1907 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroupServiceRole50553EBF' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L1767 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L1791 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1852 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefC6FB60B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateTaskDefExecutionRole272677A9` (AWS::IAM::Role) → `Properties.Tags` L207 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefExecutionRole272677A9' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskDefTaskRole0B257552` (AWS::IAM::Role) → `Properties.Tags` L99 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefTaskRole0B257552' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1661 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'GreenTargetGroupEEB2DF3E' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L1710 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'PublicAlb84330974' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L1748 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'PublicAlbAlbListener804C1B2779' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1682 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `imageRepo1D8A68AF` (AWS::ECR::Repository) → `Properties.Tags` L89 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'imageRepo1D8A68AF' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `repoBEC318EA` (AWS::CodeCommit::Repository) → `Properties.Tags` L5 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'repoBEC318EA' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0` (AWS::Events::Rule) → `Properties.Tags` L23 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `helloWorldFunction00C940B5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldFunction00C940B5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `helloWorldFunctionServiceRole8475DBF0` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldFunctionServiceRole8475DBF0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApi6825FB98` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApi6825FB98' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApiCloudWatchRole22367FBD` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApiCloudWatchRole22367FBD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.Tags` L148 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApiDeploymentStageprod67DD79AF' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `MyBucketF68F3FF0` (AWS::S3::Bucket) → `Properties.Tags` L9 in `cdk_custom-logical-names--MyStack.template_json` + > Resource 'MyBucketF68F3FF0' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyTopic86869434` (AWS::SNS::Topic) → `Properties.Tags` L3 in `cdk_custom-logical-names--MyStack.template_json` + > Resource 'MyTopic86869434' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DemoResourceProviderframeworkonEventF8E49AD2` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceProviderframeworkonEventF8E49AD2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DemoResourceProviderframeworkonEventServiceRoleDB88154F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceProviderframeworkonEventServiceRoleDB88154F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L190 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L156 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DemoResourceMyProviderframeworkonEvent65F24A35` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceMyProviderframeworkonEvent65F24A35' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DemoResourceMyProviderframeworkonEventServiceRole1437DF1C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceMyProviderframeworkonEventServiceRole1437DF1C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L300 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L239 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L216 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L182 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.Tags` L67 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'ddbstreaml2dlq5966ED66' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'ddbstreamtopic7821AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.Tags` L80 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableBAC64D83' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunction1987B4C5` (AWS::Lambda::Function) → `Properties.Tags` L206 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunction1987B4C5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L246 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunctionServiceRole41583A05` (AWS::IAM::Role) → `Properties.Tags` L109 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunctionServiceRole41583A05' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.Tags` L499 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableDynamoTable6BC36F24' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunction7B818C58` (AWS::Lambda::Function) → `Properties.Tags` L412 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunction7B818C58' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L467 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunctionServiceRoleBA21B37D` (AWS::IAM::Role) → `Properties.Tags` L278 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunctionServiceRoleBA21B37D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemL3TableSqsDlqQueueD3C251B9` (AWS::SQS::Queue) → `Properties.Tags` L536 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableSqsDlqQueueD3C251B9' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` (AWS::Lambda::Function) → `Properties.Tags` L911 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1` (AWS::IAM::Role) → `Properties.Tags` L788 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L747 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L722 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'EC2ec2InstanceSecurityGroupD268D496' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `EC2serverEc2Role6775A3D4` (AWS::IAM::Role) → `Properties.Tags` L405 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'EC2serverEc2Role6775A3D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'VPCSSHSecurityGroup0495A24F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkisCompleteB1442B18` (AWS::Lambda::Function) → `Properties.Tags` L748 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkisCompleteB1442B18' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51` (AWS::IAM::Role) → `Properties.Tags` L631 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonEventB48896C9` (AWS::Lambda::Function) → `Properties.Tags` L577 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonEventB48896C9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonEventServiceRoleC0D29A73` (AWS::IAM::Role) → `Properties.Tags` L453 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonEventServiceRoleC0D29A73' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonTimeout83318112` (AWS::Lambda::Function) → `Properties.Tags` L916 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonTimeout83318112' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonTimeoutServiceRole904320AB` (AWS::IAM::Role) → `Properties.Tags` L799 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonTimeoutServiceRole904320AB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderwaiterstatemachine1A139B58` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1052 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderwaiterstatemachine1A139B58' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `EICEndpointProviderwaiterstatemachineRole5E284D23` (AWS::IAM::Role) → `Properties.Tags` L967 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderwaiterstatemachineRole5E284D23' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointRole7DC4D43E` (AWS::IAM::Role) → `Properties.Tags` L291 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointRole7DC4D43E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointisCompleteHandler0273707A` (AWS::Lambda::Function) → `Properties.Tags` L425 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointisCompleteHandler0273707A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointonEventHandlerC2E1F5F2` (AWS::Lambda::Function) → `Properties.Tags` L397 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointonEventHandlerC2E1F5F2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.Tags` L689 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Resource 'AsgCapacityProvider760D11D9' of type 'AWS::ECS::CapacityProvider' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L664 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L191 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'Listener828B0E81' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L212 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ListenerECSGroup2EA4A011' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L121 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L58 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerListenerE1A099B9' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L79 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L119 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Tags` L1111 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'Ec2Service04A33183' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L1049 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L1059 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `awsvpcecsdemoclusterA7FD8C86` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'awsvpcecsdemoclusterA7FD8C86' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Tags` L1078 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'awsvpcecsdemoserviceServiceFC4BE5C7' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1048 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginx76230F353007' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginxawspvcB396AC00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `nginxawspvcTaskRole3F43A26E` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginxawspvcTaskRole3F43A26E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L1040 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Tags` L727 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceECC8084D' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBB353E155' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L554 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBPublicListener4B4929CA' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L575 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBPublicListenerECSGroupBE57E081' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.Tags` L509 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBSecurityGroup5F444C78' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.Tags` L788 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceSecurityGroup262B61DD' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Tags` L615 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDef940E3A80' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefExecutionRole9194820E` (AWS::IAM::Role) → `Properties.Tags` L675 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefExecutionRole9194820E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefTaskRole8CDCF85E` (AWS::IAM::Role) → `Properties.Tags` L595 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefTaskRole8CDCF85E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefwebLogGroup71FAF541` (AWS::Logs::LogGroup) → `Properties.Tags` L665 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefwebLogGroup71FAF541' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `fargateserviceautoscalingD107CF93` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'fargateserviceautoscalingD107CF93' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBBDE1D276' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L501 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBPublicListenerC4DF6480' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L522 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBPublicListenerECSGroup525A567D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Tags` L668 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappServiceE7504FDB' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.Tags` L729 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappServiceSecurityGroup0ABF0D21' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Tags` L556 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDef6BF75736' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `sampleappTaskDefExecutionRoleAD6F4C40` (AWS::IAM::Role) → `Properties.Tags` L616 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefExecutionRoleAD6F4C40' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sampleappTaskDefTaskRoleB530CAC0` (AWS::IAM::Role) → `Properties.Tags` L536 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefTaskRoleB530CAC0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sampleappTaskDefwebLogGroup34BE8C79` (AWS::Logs::LogGroup) → `Properties.Tags` L606 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefwebLogGroup34BE8C79' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L597 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L646 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L535 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L545 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L491 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L118 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L87 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L29 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TopicBFC7AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'TopicBFC7AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ProxyAPI32755B5A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L5 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPI32755B5A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ProxyAPICloudWatchRoleB8A087D1` (AWS::IAM::Role) → `Properties.Tags` L19 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPICloudWatchRoleB8A087D1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.Tags` L92 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPIDeploymentStageprodBE6BE99F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Tags` L220 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'AmazonLinux2023WithGitPipeline' of type 'AWS::ImageBuilder::ImagePipeline' supports Tags but none are configured +- **I9040** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Tags` L49 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'AmazonLinux2023withGitAndNodeRecipe' of type 'AWS::ImageBuilder::ContainerRecipe' supports Tags but none are configured +- **I9040** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L29 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'DockerComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `EC2InstanceProfileForImageBuilderA043DE9F` (AWS::IAM::Role) → `Properties.Tags` L105 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'EC2InstanceProfileForImageBuilderA043DE9F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcrRepoForImageBuilderCodeCatalystBF634BA6` (AWS::ECR::Repository) → `Properties.Tags` L39 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'EcrRepoForImageBuilderCodeCatalystBF634BA6' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L5 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'GitComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Tags` L196 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'ImageBuilderDistConfig' of type 'AWS::ImageBuilder::DistributionConfiguration' supports Tags but none are configured +- **I9040** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Tags` L184 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'ImageBuilderInfraConfig' of type 'AWS::ImageBuilder::InfrastructureConfiguration' supports Tags but none are configured +- **I9040** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L17 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'NodejsComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L212 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606` (AWS::IAM::Role) → `Properties.Tags` L52 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L329 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L71 in `cdk_inspector2--Inspector2EnableStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EnableInspector2ResourceInspectorRole75753456` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableStack.template_json` + > Resource 'EnableInspector2ResourceInspectorRole75753456' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2FindingHandler1F85FFBC` (AWS::Lambda::Function) → `Properties.Tags` L330 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2FindingHandler1F85FFBC' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2FindingHandlerServiceRoleCEDAFBC1` (AWS::IAM::Role) → `Properties.Tags` L296 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2FindingHandlerServiceRoleCEDAFBC1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2InitialScanHandler460C9991` (AWS::Lambda::Function) → `Properties.Tags` L150 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2InitialScanHandler460C9991' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2InitialScanHandlerServiceRoleA1739B7A` (AWS::IAM::Role) → `Properties.Tags` L116 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2InitialScanHandlerServiceRoleA1739B7A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2MonitoringfindingScanRuleC84833CE` (AWS::Events::Rule) → `Properties.Tags` L61 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2MonitoringfindingScanRuleC84833CE' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Inspector2MonitoringinitialScanRule902E013C` (AWS::Events::Rule) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2MonitoringinitialScanRule902E013C' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L266 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L219 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L158 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleLambdaB2FF4FA1` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaB2FF4FA1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L94 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaDashboard39118496' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured +- **I9040** `SampleLambdaServiceRoleB1A8618F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaServiceRoleB1A8618F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionBF21E41F` (AWS::Lambda::Function) → `Properties.Tags` L62 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Resource 'LambdaFunctionBF21E41F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionServiceRoleC555A460` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Resource 'LambdaFunctionServiceRoleC555A460' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleQueue49AAAEFF` (AWS::SQS::Queue) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` + > Resource 'SampleQueue49AAAEFF' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SampleTopic5FE9B5DC` (AWS::SNS::Topic) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` + > Resource 'SampleTopic5FE9B5DC' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.Tags` L80 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'S3EventNotificationsLambda20F17D80' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `S3EventNotificationsLambdaServiceRoleD45D5063` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'S3EventNotificationsLambdaServiceRoleD45D5063' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleBucket7F6F8160` (AWS::S3::Bucket) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'SampleBucket7F6F8160' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `WidgetsWidgetHandler1BC9DB34` (AWS::Lambda::Function) → `Properties.Tags` L103 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetHandler1BC9DB34' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `WidgetsWidgetHandlerServiceRole8C2B589C` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetHandlerServiceRole8C2B589C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WidgetsWidgetStore0ED7FDB7` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetStore0ED7FDB7' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Widgetswidgetsapi72353315` (AWS::ApiGateway::RestApi) → `Properties.Tags` L139 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'Widgetswidgetsapi72353315' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `WidgetswidgetsapiCloudWatchRole8C2A5801` (AWS::IAM::Role) → `Properties.Tags` L149 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetswidgetsapiCloudWatchRole8C2A5801' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.Tags` L224 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetswidgetsapiDeploymentStageprod0D8CD1B7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.Tags` L86 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.Tags` L14 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'BigFanTopicStatusCreatedSubscriberQueue589E974E' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L716 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandler4037E293' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB` (AWS::IAM::Role) → `Properties.Tags` L308 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L437 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none +- **I9040** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` (AWS::Lambda::Function) → `Properties.Tags` L231 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandler0467DB95' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A` (AWS::IAM::Role) → `Properties.Tags` L162 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L291 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none ar +- **I9040** `theBigFanAPI6E21715A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L454 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPI6E21715A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `theBigFanAPICloudWatchRoleD603B41E` (AWS::IAM::Role) → `Properties.Tags` L463 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPICloudWatchRoleD603B41E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.Tags` L532 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPIDeploymentStageprod1F15C9DC' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `theBigFanTopicF96567DE` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanTopicF96567DE' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `APIGateway4XXErrors1647FE3DB` (AWS::CloudWatch::Alarm) → `Properties.Tags` L285 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIGateway4XXErrors1647FE3DB' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `APIGateway5XXErrors0A91D7B4E` (AWS::CloudWatch::Alarm) → `Properties.Tags` L354 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIGateway5XXErrors0A91D7B4E' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `APIp99latencyalarm1s67095ACE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L385 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIp99latencyalarm1s67095ACE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchDashBoard043C60B6` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L900 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'CloudWatchDashBoard043C60B6' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured +- **I9040** `DynamoDBErrors0FA6C66C9` (AWS::CloudWatch::Alarm) → `Properties.Tags` L641 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoDBErrors0FA6C66C9' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoDBTableReadsWritesThrottled13F6F2AE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L576 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoDBTableReadsWritesThrottled13F6F2AE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambda2ErrorDE3BEB2F` (AWS::CloudWatch::Alarm) → `Properties.Tags` L416 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambda2ErrorDE3BEB2F' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambda2Throttled090CFA4C` (AWS::CloudWatch::Alarm) → `Properties.Tags` L511 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambda2Throttled090CFA4C' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoLambdap99LongDuration1s739ED568` (AWS::CloudWatch::Alarm) → `Properties.Tags` L481 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdap99LongDuration1s739ED568' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L174 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HttpAPI8D545486' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L266 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HttpAPIDefaultStage1BC7D78F' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `errorTopicE59AB483` (AWS::SNS::Topic) → `Properties.Tags` L277 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'errorTopicE59AB483' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ApiGatewaySnsRole904B65D6` (AWS::IAM::Role) → `Properties.Tags` L777 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'ApiGatewaySnsRole904B65D6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Tags` L5 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'DestinedEventBus14820B65' of type 'AWS::Events::EventBus' supports Tags but none are configured +- **I9040** `FailureLambdaHandlerBB58C051` (AWS::Lambda::Function) → `Properties.Tags` L400 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'FailureLambdaHandlerBB58C051' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FailureLambdaHandlerServiceRole7E0414CB` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'FailureLambdaHandlerServiceRole7E0414CB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SuccessLambdaHandler0E2CD797` (AWS::Lambda::Function) → `Properties.Tags` L243 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'SuccessLambdaHandler0E2CD797' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SuccessLambdaHandlerServiceRole77BD70C4` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'SuccessLambdaHandlerServiceRole77BD70C4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `destinedLambda8DF776BB` (AWS::Lambda::Function) → `Properties.Tags` L81 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'destinedLambda8DF776BB' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `destinedLambdaServiceRole87608B6F` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'destinedLambdaServiceRole87608B6F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.Tags` L460 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'failureRule10D0B2E4' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.Tags` L303 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'successRuleE9E88056' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPIBAB2789B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L515 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPIBAB2789B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPICloudWatchRoleCDF408DA` (AWS::IAM::Role) → `Properties.Tags` L524 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPICloudWatchRoleCDF408DA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.Tags` L593 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPIDeploymentStageprodD67BDFB2' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `theDestinedLambdaTopic8F2C8FB6` (AWS::SNS::Topic) → `Properties.Tags` L14 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaTopic8F2C8FB6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L444 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoStreamerAPICA573C81` (AWS::ApiGateway::RestApi) → `Properties.Tags` L185 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPICA573C81' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `DynamoStreamerAPICloudWatchRoleEF2543E3` (AWS::IAM::Role) → `Properties.Tags` L194 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPICloudWatchRoleEF2543E3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.Tags` L263 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPIDeploymentStageprod0700648B' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'TheDynamoStreamer641C5E5B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerD2AAE139` (AWS::Lambda::Function) → `Properties.Tags` L106 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerD2AAE139' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L166 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47` (AWS::IAM::Role) → `Properties.Tags` L34 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L581 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L649 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L572 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaC3C4DA46` (AWS::Lambda::Function) → `Properties.Tags` L157 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaC3C4DA46' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaRuleC1D6BC2F` (AWS::Events::Rule) → `Properties.Tags` L216 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaRuleC1D6BC2F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaServiceRole70132707` (AWS::IAM::Role) → `Properties.Tags` L123 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaServiceRole70132707' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaB7E263A7` (AWS::Lambda::Function) → `Properties.Tags` L306 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaB7E263A7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaRule5894DC8E` (AWS::Events::Rule) → `Properties.Tags` L365 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaRule5894DC8E' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaServiceRole130B888D` (AWS::IAM::Role) → `Properties.Tags` L272 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaServiceRole130B888D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmConsumer3Lambda880BEEDF` (AWS::Lambda::Function) → `Properties.Tags` L456 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3Lambda880BEEDF' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer3LambdaRule41A00643` (AWS::Events::Rule) → `Properties.Tags` L515 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3LambdaRule41A00643' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer3LambdaServiceRoleCF9BAEA7` (AWS::IAM::Role) → `Properties.Tags` L422 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3LambdaServiceRoleCF9BAEA7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmProducerLambda71029F8F` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmProducerLambda71029F8F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmProducerLambdaServiceRoleEF3D6079` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmProducerLambdaServiceRoleEF3D6079' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreaker4FAEA3DB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L436 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayCloudWatchRole934DF897` (AWS::IAM::Role) → `Properties.Tags` L445 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayCloudWatchRole934DF897' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.Tags` L513 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayDeploymentStageprod84F6B9E5' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `ErrorLambdaHandler4224322A` (AWS::Lambda::Function) → `Properties.Tags` L312 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'ErrorLambdaHandler4224322A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ErrorLambdaHandlerServiceRole5D9F8D61` (AWS::IAM::Role) → `Properties.Tags` L228 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'ErrorLambdaHandlerServiceRole5D9F8D61' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WebserviceIntegrationLambdaHandler5E349AB7` (AWS::Lambda::Function) → `Properties.Tags` L160 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'WebserviceIntegrationLambdaHandler5E349AB7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `WebserviceIntegrationLambdaHandlerServiceRole851361F8` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'WebserviceIntegrationLambdaHandlerServiceRole851361F8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `webserviceErrorRuleCE293636` (AWS::Events::Rule) → `Properties.Tags` L380 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'webserviceErrorRuleCE293636' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L662 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Tags` L744 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinition8E3B365E' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionAppContainerLogGroup20407D7C` (AWS::Logs::LogGroup) → `Properties.Tags` L820 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionAppContainerLogGroup20407D7C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionExecutionRoleE69A8E33` (AWS::IAM::Role) → `Properties.Tags` L831 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionExecutionRoleE69A8E33' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionTaskRoleE3C2BCAA` (AWS::IAM::Role) → `Properties.Tags` L670 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionTaskRoleE3C2BCAA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LandingBucket23FE90FB` (AWS::S3::Bucket) → `Properties.Tags` L29 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LandingBucket23FE90FB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LoadLambdaHandlerFDA03D53` (AWS::Lambda::Function) → `Properties.Tags` L1380 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LoadLambdaHandlerFDA03D53' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LoadLambdaHandlerServiceRole83E61748` (AWS::IAM::Role) → `Properties.Tags` L1296 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LoadLambdaHandlerServiceRole83E61748' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ObserveLambdaHandler685FFDBB` (AWS::Lambda::Function) → `Properties.Tags` L1539 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'ObserveLambdaHandler685FFDBB' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ObserveLambdaHandlerServiceRole040C69BA` (AWS::IAM::Role) → `Properties.Tags` L1505 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'ObserveLambdaHandlerServiceRole040C69BA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TransformLambdaHandler60ABE8EE` (AWS::Lambda::Function) → `Properties.Tags` L1178 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformLambdaHandler60ABE8EE' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TransformLambdaHandlerServiceRole710C039E` (AWS::IAM::Role) → `Properties.Tags` L1120 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformLambdaHandlerServiceRole710C039E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformedDataB0572681' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `extractLambdaHandlerD06B8F09` (AWS::Lambda::Function) → `Properties.Tags` L1015 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerD06B8F09' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `extractLambdaHandlerServiceRole8A50F829` (AWS::IAM::Role) → `Properties.Tags` L916 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerServiceRole8A50F829' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L1103 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `loadRuleF0FAF418` (AWS::Events::Rule) → `Properties.Tags` L1449 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'loadRuleF0FAF418' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `newObjectInLandingBucketEventQueue67CBE2F2` (AWS::SQS::Queue) → `Properties.Tags` L75 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'newObjectInLandingBucketEventQueue67CBE2F2' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `observeRule9CF2E16C` (AWS::Events::Rule) → `Properties.Tags` L1599 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'observeRule9CF2E16C' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `transformRuleFEA34632` (AWS::Events::Rule) → `Properties.Tags` L1240 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'transformRuleFEA34632' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayDefaultStageC51956FB' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerTable02DAD2B8' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `UnreliableLambdaHandlerD4A4DED9` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'UnreliableLambdaHandlerD4A4DED9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `UnreliableLambdaHandlerServiceRole955A5CFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'UnreliableLambdaHandlerServiceRole955A5CFD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BookingSagaFA991213` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1337 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingSagaFA991213' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `BookingSagaRole82982544` (AWS::IAM::Role) → `Properties.Tags` L1207 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingSagaRole82982544' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingsB1C24132' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `SagaPatternSingleTable288D85B3` (AWS::ApiGateway::RestApi) → `Properties.Tags` L1554 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTable288D85B3' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `SagaPatternSingleTableCloudWatchRole130684F0` (AWS::IAM::Role) → `Properties.Tags` L1563 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTableCloudWatchRole130684F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.Tags` L1631 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTableDeploymentStageprod92F0690D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `cancelFlightLambdaHandler437EEC76` (AWS::Lambda::Function) → `Properties.Tags` L410 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelFlightLambdaHandler437EEC76' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `cancelFlightLambdaHandlerServiceRole7F2439CB` (AWS::IAM::Role) → `Properties.Tags` L331 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelFlightLambdaHandlerServiceRole7F2439CB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `cancelHotelLambdaHandler09F13EF6` (AWS::Lambda::Function) → `Properties.Tags` L848 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelHotelLambdaHandler09F13EF6' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `cancelHotelLambdaHandlerServiceRole4815D152` (AWS::IAM::Role) → `Properties.Tags` L769 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelHotelLambdaHandlerServiceRole4815D152' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `confirmFlightLambdaHandler96C3663F` (AWS::Lambda::Function) → `Properties.Tags` L264 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmFlightLambdaHandler96C3663F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `confirmFlightLambdaHandlerServiceRole45F91B6E` (AWS::IAM::Role) → `Properties.Tags` L185 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmFlightLambdaHandlerServiceRole45F91B6E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `confirmHotelLambdaHandler882ACF2D` (AWS::Lambda::Function) → `Properties.Tags` L702 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmHotelLambdaHandler882ACF2D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `confirmHotelLambdaHandlerServiceRoleD5F8F90E` (AWS::IAM::Role) → `Properties.Tags` L623 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmHotelLambdaHandlerServiceRoleD5F8F90E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `refundPaymentLambdaHandler932D11D5` (AWS::Lambda::Function) → `Properties.Tags` L1140 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'refundPaymentLambdaHandler932D11D5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `refundPaymentLambdaHandlerServiceRole62F72F0D` (AWS::IAM::Role) → `Properties.Tags` L1061 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'refundPaymentLambdaHandlerServiceRole62F72F0D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `reserveFlightLambdaHandler3C75473D` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveFlightLambdaHandler3C75473D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `reserveFlightLambdaHandlerServiceRole985C586D` (AWS::IAM::Role) → `Properties.Tags` L39 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveFlightLambdaHandlerServiceRole985C586D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `reserveHotelLambdaHandler020AE24A` (AWS::Lambda::Function) → `Properties.Tags` L556 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveHotelLambdaHandler020AE24A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `reserveHotelLambdaHandlerServiceRole452F23B7` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveHotelLambdaHandlerServiceRole452F23B7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sagaLambdaHandlerFC24742F` (AWS::Lambda::Function) → `Properties.Tags` L1487 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'sagaLambdaHandlerFC24742F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sagaLambdaHandlerServiceRole7EB685BD` (AWS::IAM::Role) → `Properties.Tags` L1427 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'sagaLambdaHandlerServiceRole7EB685BD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `takePaymentLambdaHandlerB96529D4` (AWS::Lambda::Function) → `Properties.Tags` L994 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'takePaymentLambdaHandlerB96529D4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `takePaymentLambdaHandlerServiceRole56CA2808` (AWS::IAM::Role) → `Properties.Tags` L915 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'takePaymentLambdaHandlerServiceRole56CA2808' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L434 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L357 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'Messages804FA4EB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `RDSPublishQueue2BEA1A7F` (AWS::SQS::Queue) → `Properties.Tags` L31 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'RDSPublishQueue2BEA1A7F' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SQSPublishLambdaHandler51EE31BE` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSPublishLambdaHandler51EE31BE' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSPublishLambdaHandlerServiceRole4F9A1044` (AWS::IAM::Role) → `Properties.Tags` L40 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSPublishLambdaHandlerServiceRole4F9A1044' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerBBB58615` (AWS::Lambda::Function) → `Properties.Tags` L269 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerBBB58615' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerServiceRoleB6261F09` (AWS::IAM::Role) → `Properties.Tags` L174 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerServiceRoleB6261F09' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L340 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'RequestTableC81DB378' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `scheduledLambda8A84450D` (AWS::Lambda::Function) → `Properties.Tags` L104 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambda8A84450D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `scheduledLambdaServiceRoleB98DFEFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambdaServiceRoleB98DFEFD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `scheduledLambdaschedule99960653` (AWS::Events::Rule) → `Properties.Tags` L171 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambdaschedule99960653' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `ApiApiLogsRole90293F72` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiApiLogsRole90293F72' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiCustomerServiceRole28709567` (AWS::IAM::Role) → `Properties.Tags` L90 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiCustomerServiceRole28709567' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiF70053CD` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L39 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiF70053CD' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `ApiLoyaltyServiceRole2B487CD2` (AWS::IAM::Role) → `Properties.Tags` L329 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiLoyaltyServiceRole2B487CD2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.Tags` L446 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'CustomerTable260DCC08' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LoyaltyLambdaHandler5918F0DA` (AWS::Lambda::Function) → `Properties.Tags` L503 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'LoyaltyLambdaHandler5918F0DA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LoyaltyLambdaHandlerServiceRole62E814E8` (AWS::IAM::Role) → `Properties.Tags` L469 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'LoyaltyLambdaHandlerServiceRole62E814E8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'EndpointDefaultStage0AD21F27' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `HttpApiRole79B5C31A` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'HttpApiRole79B5C31A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L168 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L98 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `pineappleCheckLambdaHandlerFDB742D5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'pineappleCheckLambdaHandlerFDB742D5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `pineappleCheckLambdaHandlerServiceRoleFC4E3211` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'pineappleCheckLambdaHandlerServiceRoleFC4E3211' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L242 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'thestatemachineapi69C81CC4' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L252 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'thestatemachineapiDefaultStageE23A2C15' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `HelloWorldHandler30C22324` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'HelloWorldHandler30C22324' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `HelloWorldHandlerServiceRole56E6BFBA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'HelloWorldHandlerServiceRole56E6BFBA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WafGatewayAPI5BA7C2CE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L98 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPI5BA7C2CE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `WafGatewayAPICloudWatchRoleEE79D232` (AWS::IAM::Role) → `Properties.Tags` L112 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPICloudWatchRoleEE79D232' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.Tags` L179 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPIDeploymentStageprodEF5FA49F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Resource 'WebACL' of type 'AWS::WAFv2::WebACL' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `httpLambdaHandler66D9C9A8` (AWS::Lambda::Function) → `Properties.Tags` L66 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Resource 'httpLambdaHandler66D9C9A8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `httpLambdaHandlerServiceRole01D49A7D` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Resource 'httpLambdaHandlerServiceRole01D49A7D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Queue4A7E3555` (AWS::SQS::Queue) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'Queue4A7E3555' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `sqsLambdaHandler0DD5DF9B` (AWS::Lambda::Function) → `Properties.Tags` L89 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsLambdaHandler0DD5DF9B' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sqsLambdaHandlerServiceRole2F57B7B5` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsLambdaHandlerServiceRole2F57B7B5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerD66392B8` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerD66392B8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerServiceRole8F070FD3` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerServiceRole8F070FD3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L349 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `TheXRayTracerSnsTopicCCE2005E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'TheXRayTracerSnsTopicCCE2005E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `snsLambdaHandlerE7B0ABE3` (AWS::Lambda::Function) → `Properties.Tags` L82 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsLambdaHandlerE7B0ABE3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `snsLambdaHandlerServiceRole7F428B88` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsLambdaHandlerServiceRole7F428B88' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `snsSubscriptionLambdaHandler68619CD8` (AWS::Lambda::Function) → `Properties.Tags` L263 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsSubscriptionLambdaHandler68619CD8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `snsSubscriptionLambdaHandlerServiceRole215E543C` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsSubscriptionLambdaHandlerServiceRole215E543C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewaySNSRole1BAAAE75` (AWS::IAM::Role) → `Properties.Tags` L374 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'ApiGatewaySNSRole1BAAAE75' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TheXRayTracerSnsFanOutTopicDE7E70F8` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'TheXRayTracerSnsFanOutTopicDE7E70F8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `xrayTracerAPIA84CAE80` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPIA84CAE80' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `xrayTracerAPICloudWatchRoleCCB113F4` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPICloudWatchRoleCCB113F4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.Tags` L93 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPIDeploymentStageprod85442A48' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `ApiCorsLambda5083F55F` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiCorsLambda5083F55F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ApiCorsLambdaServiceRole0DB39061` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiCorsLambdaServiceRole0DB39061' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayWithCors6DE4076F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCors6DE4076F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ApiGatewayWithCorsCloudWatchRole9C3700F0` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCorsCloudWatchRole9C3700F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.Tags` L149 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCorsDeploymentStageprod7F1DD875' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumer52DC1403` (AWS::ApiGateway::RestApi) → `Properties.Tags` L485 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumer52DC1403' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E` (AWS::IAM::Role) → `Properties.Tags` L494 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.Tags` L566 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `consumer3firehose` (AWS::KinesisFirehose::DeliveryStream) → `Properties.Tags` L375 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'consumer3firehose' of type 'AWS::KinesisFirehose::DeliveryStream' supports Tags but none are configured +- **I9040** `consumer3firehoseEventsRoleECB13871` (AWS::IAM::Role) → `Properties.Tags` L401 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'consumer3firehoseEventsRoleECB13871' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer1Lambda4AF2292E` (AWS::Lambda::Function) → `Properties.Tags` L126 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1Lambda4AF2292E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventConsumer1LambdaRule288E5FF9` (AWS::Events::Rule) → `Properties.Tags` L154 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1LambdaRule288E5FF9' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventConsumer1LambdaServiceRoleC8CCBFC5` (AWS::IAM::Role) → `Properties.Tags` L92 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1LambdaServiceRoleC8CCBFC5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer2Lambda1631C47A` (AWS::Lambda::Function) → `Properties.Tags` L236 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2Lambda1631C47A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventConsumer2LambdaRule54312CB1` (AWS::Events::Rule) → `Properties.Tags` L264 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2LambdaRule54312CB1' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventConsumer2LambdaServiceRole6B878884` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2LambdaServiceRole6B878884' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer3KinesisRuleB8D02F6F` (AWS::Events::Rule) → `Properties.Tags` L453 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer3KinesisRuleB8D02F6F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventProducerLambda100D549C` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventProducerLambda100D549C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventProducerLambdaServiceRoleD019EB99` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventProducerLambdaServiceRoleD019EB99' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myRoleE60D68E8` (AWS::IAM::Role) → `Properties.Tags` L320 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'myRoleE60D68E8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `testngestbucketD7155299` (AWS::S3::Bucket) → `Properties.Tags` L310 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'testngestbucketD7155299' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ApiGW45519054` (AWS::ApiGateway::RestApi) → `Properties.Tags` L47 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGW45519054' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ApiGWCloudWatchRole51A9A431` (AWS::IAM::Role) → `Properties.Tags` L56 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGWCloudWatchRole51A9A431' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.Tags` L129 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGWDeploymentStageprodDFD8EC11' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `RestAPIRoleA3B4EFA3` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'RestAPIRoleA3B4EFA3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSQueue7674CD17` (AWS::SQS::Queue) → `Properties.Tags` L3 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSQueue7674CD17' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SQSTriggerLambda99F71FB3` (AWS::Lambda::Function) → `Properties.Tags` L328 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambda99F71FB3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSTriggerLambdaServiceRole0C427DE8` (AWS::IAM::Role) → `Properties.Tags` L259 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambdaServiceRole0C427DE8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L357 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L142 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L117 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Resource 'CDKDataSyncS3AccessRole0C49AEBFA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Resource 'CDKDataSyncS3AccessRole18E349368' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3Location0' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured +- **I9040** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.Tags` L20 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3Location1' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured +- **I9040** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.Tags` L36 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3toS3Task' of type 'AWS::DataSync::Task' supports Tags but none are configured +- **I9040** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L249 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBAEE750D2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L281 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBListener3B99FF85' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L302 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBListenerTargetGroupD5D64FBA' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'sgalbE4BDB11E' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.Tags` L167 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'sgnextcloud40AB2A88' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSE0E96D00' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `RDSSecret3683CA93` (AWS::SecretsManager::Secret) → `Properties.Tags` L51 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSSecret3683CA93' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured +- **I9040** `RDSSubnetGroup3527AC04` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSSubnetGroup3527AC04' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'sgrds6871B7A8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L14 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Resource 'sgefs8B17F90D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `consumerlambdafunction40710347` (AWS::Lambda::Function) → `Properties.Tags` L225 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'consumerlambdafunction40710347' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdafunctionServiceRole116B0746` (AWS::IAM::Role) → `Properties.Tags` L138 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'consumerlambdafunctionServiceRole116B0746' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'demotable002BE91A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `oneminuteruleE9168CE5` (AWS::Events::Rule) → `Properties.Tags` L261 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'oneminuteruleE9168CE5' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `producerlambdafunctionCE724CE7` (AWS::Lambda::Function) → `Properties.Tags` L102 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'producerlambdafunctionCE724CE7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `producerlambdafunctionServiceRole5400FE21` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'producerlambdafunctionServiceRole5400FE21' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWSBackupPlanSelectionRole2A44F724` (AWS::IAM::Role) → `Properties.Tags` L976 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSBackupPlanSelectionRole2A44F724' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` (AWS::Lambda::Function) → `Properties.Tags` L907 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50` (AWS::IAM::Role) → `Properties.Tags` L849 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ScheduleRuleDA5BD877` (AWS::Events::Rule) → `Properties.Tags` L790 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'ScheduleRuleDA5BD877' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L651 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L562 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L490 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcrStackNestedStackEcrStackNestedStackResource706AA777` (AWS::CloudFormation::Stack) → `Properties.Tags` L600 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'EcrStackNestedStackEcrStackNestedStackResource706AA777' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `EcsStackNestedStackEcsStackNestedStackResource48283A58` (AWS::CloudFormation::Stack) → `Properties.Tags` L632 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'EcsStackNestedStackEcsStackNestedStackResource48283A58' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.Tags` L16 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'BackendDataRepositoryD361813E' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` (AWS::Lambda::Function) → `Properties.Tags` L144 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491` (AWS::IAM::Role) → `Properties.Tags` L70 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'FrontendRepository7D714FA2' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Tags` L472 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendService7A4224EE' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BackendTaskDefinitionBackendContainerLogGroup5E30F6E8` (AWS::Logs::LogGroup) → `Properties.Tags` L390 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendTaskDefinitionBackendContainerLogGroup5E30F6E8' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Tags` L336 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendTaskDefinitionEC224DE6' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSCluster7D463CD4' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Tags` L28 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE' of type 'AWS::ServiceDiscovery::PrivateDnsNamespace' supports Tags but none are configured +- **I9040** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L218 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSSecurityGroupA14DBE7D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.Tags` L40 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSServiceLogGroupD961AA4E' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `ECSTaskIamRole84EB0A02` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSTaskIamRole84EB0A02' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L591 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendLB2FA80AC2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L627 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendLBListener230479D8' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Tags` L400 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendServiceBC94BA93' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L272 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendTaskDefinition6CBC2B00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FrontendTaskDefinitionFrontendContainerLogGroup994ED50C` (AWS::Logs::LogGroup) → `Properties.Tags` L326 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendTaskDefinitionFrontendContainerLogGroup994ED50C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.Tags` L648 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ListenerRule73F9AC5E' of type 'AWS::ElasticLoadBalancingV2::ListenerRule' supports Tags but none are configured +- **I9040** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'PublicLBSG963B1ACE' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L560 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskexecutionRole978012CD` (AWS::IAM::Role) → `Properties.Tags` L172 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'TaskexecutionRole978012CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `emrcluster` (AWS::EMR::Cluster) → `Properties.Tags` L316 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrcluster' of type 'AWS::EMR::Cluster' supports Tags but none are configured +- **I9040** `emrjobflowrole15D4DAE5` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrjobflowrole15D4DAE5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `emrservicerole3BE5EDAF` (AWS::IAM::Role) → `Properties.Tags` L219 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrservicerole3BE5EDAF' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CdkIoTCoreRule` (AWS::IoT::TopicRule) → `Properties.Tags` L528 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CdkIoTCoreRule' of type 'AWS::IoT::TopicRule' supports Tags but none are configured +- **I9040** `CdkThing001LambdaRoleD7EE5CD3` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CdkThing001LambdaRoleD7EE5CD3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.Tags` L69 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CertHandler220363A9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L518 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `CfnPolicy` (AWS::IoT::Policy) → `Properties.Tags` L353 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnPolicy' of type 'AWS::IoT::Policy' supports Tags but none are configured +- **I9040** `CfnRole` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IoTCertProviderframeworkonEvent8FF1476F` (AWS::Lambda::Function) → `Properties.Tags` L296 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'IoTCertProviderframeworkonEvent8FF1476F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `IoTCertProviderframeworkonEventServiceRole80DDBEA7` (AWS::IAM::Role) → `Properties.Tags` L217 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'IoTCertProviderframeworkonEventServiceRole80DDBEA7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L126 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Resource 'lambdaContainerFunction5815FD88' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdaContainerFunctionServiceRole5E36DB3C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Resource 'lambdaContainerFunctionServiceRole5E36DB3C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction45C982D3` (AWS::Lambda::Function) → `Properties.Tags` L64 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Resource 'lambdafunction45C982D3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunctionServiceRole85538ADB` (AWS::IAM::Role) → `Properties.Tags` L30 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Resource 'lambdafunctionServiceRole85538ADB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L220 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `statusLambdaCF47B86D` (AWS::Lambda::Function) → `Properties.Tags` L101 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'statusLambdaCF47B86D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `statusLambdaServiceRoleD1132168` (AWS::IAM::Role) → `Properties.Tags` L67 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'statusLambdaServiceRoleD1132168' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `submitLambda3C32AFD4` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'submitLambda3C32AFD4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `submitLambdaServiceRole576DCA8F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'submitLambdaServiceRole576DCA8F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'TableCD117FA1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `UrlShortenerApi1FE619BE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L157 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApi1FE619BE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `UrlShortenerApiCloudWatchRole28577D98` (AWS::IAM::Role) → `Properties.Tags` L166 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiCloudWatchRole28577D98' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.Tags` L239 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiDeploymentStageprod9A3CCA44' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.Tags` L492 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiDomain85D0CE65' of type 'AWS::ApiGateway::DomainName' supports Tags but none are configured +- **I9040** `UrlShortenerFunctionB5E87AC1` (AWS::Lambda::Function) → `Properties.Tags` L122 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerFunctionB5E87AC1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `UrlShortenerFunctionServiceRole2FBF9CDA` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerFunctionServiceRole2FBF9CDA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTask1D3C2E79' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `generatorPingTaskExecutionRoleA7BE7F8B` (AWS::IAM::Role) → `Properties.Tags` L73 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTaskExecutionRoleA7BE7F8B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorPingTaskTaskRoleA4886BE8` (AWS::IAM::Role) → `Properties.Tags` L11 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTaskTaskRoleA4886BE8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorcluster9804CB70` (AWS::ECS::Cluster) → `Properties.Tags` L3 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorcluster9804CB70' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L184 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorserviceSecurityGroup3D8BECF8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Tags` L137 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorserviceServiceA6AC5079' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BlockListC03D0423` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L282 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListC03D0423' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `BlockListRuleGroup55F6B55D` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L294 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListRuleGroup55F6B55D' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured +- **I9040** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L315 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L252 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L470 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'InboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured +- **I9040** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L406 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'OutboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured +- **I9040** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.Tags` L435 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'sginboundendpoint32081788' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L333 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'sgoutboundendpointEC0509A3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Bucket83908E77` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'Bucket83908E77' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L413 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L350 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.Tags` L127 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'Classifications0C921F6C' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L499 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L438 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RekFunction9837D13D` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'RekFunction9837D13D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `RekFunctionServiceRole3947AEF4` (AWS::IAM::Role) → `Properties.Tags` L153 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'RekFunctionServiceRole3947AEF4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Other34654A52` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_resource-overrides--resource-overrides.template_json` + > Resource 'Other34654A52' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L506 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'AllowedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L518 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'BlockedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.Tags` L465 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSFirewallLogGroupF0EEB7D4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Tags` L477 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSLogsConfig' of type 'AWS::Route53Resolver::ResolverQueryLoggingConfig' supports Tags but none are configured +- **I9040** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L531 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSRuleGroup' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured +- **I9040** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L557 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'FirewallRuleGroupAssociation' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured +- **I9040** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Tags` L191 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'exampleBucketAP' of type 'AWS::S3::AccessPoint' supports Tags but none are configured +- **I9040** `examplebucketC9DFA43E` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'examplebucketC9DFA43E' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `retrieveTransformedObjectLambdaD5D6532C` (AWS::Lambda::Function) → `Properties.Tags` L141 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'retrieveTransformedObjectLambdaD5D6532C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `retrieveTransformedObjectLambdaServiceRole27FF342E` (AWS::IAM::Role) → `Properties.Tags` L83 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'retrieveTransformedObjectLambdaServiceRole27FF342E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L297 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L225 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DocumentAssociation` (AWS::SSM::Association) → `Properties.Tags` L45 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'DocumentAssociation' of type 'AWS::SSM::Association' supports Tags but none are configured +- **I9040** `EC2SSMRole1C0EBD7B` (AWS::IAM::Role) → `Properties.Tags` L327 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'EC2SSMRole1C0EBD7B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Tags` L5 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'TimeWriterDocument' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L246 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L205 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L83 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachine6C968CA5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.Tags` L5 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachineLogGroup9955D1FE' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyStateMachineRoleD59FFEBC` (AWS::IAM::Role) → `Properties.Tags` L17 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachineRoleD59FFEBC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.Tags` L153 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiDeploymentStageprod5FF8FD8E' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `StepFuncApiE896FCA7` (AWS::ApiGateway::RestApi) → `Properties.Tags` L121 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiE896FCA7' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `StepFuncApiordersGETStartSyncExecutionRole90998151` (AWS::IAM::Role) → `Properties.Tags` L186 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiordersGETStartSyncExecutionRole90998151' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CheckLambda9CBBF9BA` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CheckLambda9CBBF9BA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CheckLambdaServiceRole74B86E23` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CheckLambdaServiceRole74B86E23' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CronStateMachine7E50955B` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L210 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachine7E50955B' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `CronStateMachineEventsRoleA3F136B0` (AWS::IAM::Role) → `Properties.Tags` L271 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachineEventsRoleA3F136B0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CronStateMachineRoleFE85923B` (AWS::IAM::Role) → `Properties.Tags` L119 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachineRoleFE85923B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L317 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SubmitLambda8054545E` (AWS::Lambda::Function) → `Properties.Tags` L96 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'SubmitLambda8054545E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SubmitLambdaServiceRole98C85C39` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'SubmitLambdaServiceRole98C85C39' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Flow` (AWS::MediaConnect::Flow) → `Properties.Tags` L10 in `gh-issues_issue-144_yaml` + > Resource 'Flow' of type 'AWS::MediaConnect::Flow' supports Tags but none are configured +- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L12 in `gh-issues_issue-183_yaml` + > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L23 in `gh-issues_issue-226_yaml` + > Resource 'InvertedRangeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `gh-issues_issue-226_yaml` + > Resource 'PingSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L67 in `gh-issues_issue-235_yaml` + > Resource 'AllowedValuesEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Tags` L142 in `gh-issues_issue-235_yaml` + > Resource 'AuroraAllowedValues' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Tags` L137 in `gh-issues_issue-235_yaml` + > Resource 'AuroraEngine' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L189 in `gh-issues_issue-235_yaml` + > Resource 'AutomatedBackupRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L26 in `gh-issues_issue-235_yaml` + > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Tags` L147 in `gh-issues_issue-235_yaml` + > Resource 'ClusterMember' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L165 in `gh-issues_issue-235_yaml` + > Resource 'ClusterSnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L78 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalClusterOrStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L61 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalNoValueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L225 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalSnapshotOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L108 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L218 in `gh-issues_issue-235_yaml` + > Resource 'CorrelatedClusterOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L84 in `gh-issues_issue-235_yaml` + > Resource 'CustomFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L201 in `gh-issues_issue-235_yaml` + > Resource 'CustomImplicitEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L90 in `gh-issues_issue-235_yaml` + > Resource 'CustomStringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L206 in `gh-issues_issue-235_yaml` + > Resource 'CustomTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L114 in `gh-issues_issue-235_yaml` + > Resource 'DynamicEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Tags` L132 in `gh-issues_issue-235_yaml` + > Resource 'DynamicEngineValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicProperties` (AWS::RDS::DBInstance) → `Properties.Tags` L250 in `gh-issues_issue-235_yaml` + > Resource 'DynamicProperties' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L120 in `gh-issues_issue-235_yaml` + > Resource 'DynamicReferenceEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Tags` L159 in `gh-issues_issue-235_yaml` + > Resource 'EmptySnapshotIdentifier' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Tags` L171 in `gh-issues_issue-235_yaml` + > Resource 'EncryptedSource' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L73 in `gh-issues_issue-235_yaml` + > Resource 'EngineAllowedValuesMissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L43 in `gh-issues_issue-235_yaml` + > Resource 'FalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L126 in `gh-issues_issue-235_yaml` + > Resource 'InvalidEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L37 in `gh-issues_issue-235_yaml` + > Resource 'KmsKeyWithoutEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Tags` L212 in `gh-issues_issue-235_yaml` + > Resource 'LegacySecurityGroups' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `gh-issues_issue-235_yaml` + > Resource 'MissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L153 in `gh-issues_issue-235_yaml` + > Resource 'SnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L195 in `gh-issues_issue-235_yaml` + > Resource 'SourceClusterReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L177 in `gh-issues_issue-235_yaml` + > Resource 'SourceInstanceReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L183 in `gh-issues_issue-235_yaml` + > Resource 'SourceResourceRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L49 in `gh-issues_issue-235_yaml` + > Resource 'StringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L102 in `gh-issues_issue-235_yaml` + > Resource 'StringTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L96 in `gh-issues_issue-235_yaml` + > Resource 'TrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `WholePropertiesCorrelated` (AWS::RDS::DBInstance) → `Properties.Tags` L232 in `gh-issues_issue-235_yaml` + > Resource 'WholePropertiesCorrelated' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `WholePropertiesFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L241 in `gh-issues_issue-235_yaml` + > Resource 'WholePropertiesFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-246_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `gh-issues_issue-247_json` + > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `EIP` (AWS::EC2::EIP) → `Properties.Tags` L8 in `gh-issues_issue-264_yaml` + > Resource 'EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-34_json` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Instance2` (AWS::EC2::Instance) → `Properties.Tags` L22 in `gh-issues_issue-34_json` + > Resource 'Instance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L4 in `gh-issues_issue-35_yaml` + > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `gh-issues_issue-36_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L10 in `gh-issues_issue-37_yaml` + > Resource 'MyAsg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Tags` L5 in `gh-issues_issue-38_json` + > Resource 'Memory' of type 'AWS::BedrockAgentCore::Memory' supports Tags but none are configured +- **I9040** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.Tags` L5 in `gh-issues_issue-39_json` + > Resource 'VPCB9E5F0B4' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.Tags` L11 in `gh-issues_issue-39_json` + > Resource 'VPCEcrEndpointSecurityGroup50ED8BA4' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.Tags` L15 in `gh-issues_issue-40_yaml` + > Resource 'DaxConcrete' of type 'AWS::DAX::Cluster' supports Tags but none are configured +- **I9040** `DaxRef` (AWS::DAX::Cluster) → `Properties.Tags` L27 in `gh-issues_issue-40_yaml` + > Resource 'DaxRef' of type 'AWS::DAX::Cluster' supports Tags but none are configured +- **I9040** `EksCluster` (AWS::EKS::Cluster) → `Properties.Tags` L4 in `gh-issues_issue-40_yaml` + > Resource 'EksCluster' of type 'AWS::EKS::Cluster' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-41_json` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L34 in `gh-issues_issue-42-if_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L27 in `gh-issues_issue-42-if_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L17 in `gh-issues_issue-42-if_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L29 in `gh-issues_issue-42-ref_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L22 in `gh-issues_issue-42-ref_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `gh-issues_issue-42-ref_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L22 in `gh-issues_issue-42_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L15 in `gh-issues_issue-42_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `gh-issues_issue-42_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `gh-issues_issue-44_json` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `PipelineRole` (AWS::IAM::Role) → `Properties.Tags` L49 in `gh-issues_issue-44_json` + > Resource 'PipelineRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L5 in `gh-issues_issue-45_json` + > Resource 'interfaceVpcEndpoint89C99945' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.Tags` L6 in `gh-issues_issue-46_json` + > Resource 'ClusterEB0386A7' of type 'AWS::EKS::Cluster' supports Tags but none are configured +- **I9040** `ClusterKubectlProviderHandler2E05C68A` (AWS::Lambda::Function) → `Properties.Tags` L15 in `gh-issues_issue-46_json` + > Resource 'ClusterKubectlProviderHandler2E05C68A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-47_json` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.Tags` L10 in `gh-issues_issue-49_yaml` + > Resource 'DocDbInstance' of type 'AWS::DocDB::DBInstance' supports Tags but none are configured +- **I9040** `Ec2Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-49_yaml` + > Resource 'Ec2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `EsDomain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L4 in `gh-issues_issue-49_yaml` + > Resource 'EsDomain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `MyFunctionServiceRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `gh-issues_issue-50_json` + > Resource 'MyFunctionServiceRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Tags` L5 in `gh-issues_issue-52_json` + > Resource 'Nodegroup' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured +- **I9040** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.Tags` L595 in `gh-issues_issue-53_json` + > Resource 'ClusterControlPlaneSecurityGroupD274242C' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `ClusterCreationRole360249B6` (AWS::IAM::Role) → `Properties.Tags` L616 in `gh-issues_issue-53_json` + > Resource 'ClusterCreationRole360249B6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterKubectlHandlerRole94549F93` (AWS::IAM::Role) → `Properties.Tags` L474 in `gh-issues_issue-53_json` + > Resource 'ClusterKubectlHandlerRole94549F93' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterKubectlReadyBarrier200052AF` (AWS::SSM::Parameter) → `Properties.Tags` L882 in `gh-issues_issue-53_json` + > Resource 'ClusterKubectlReadyBarrier200052AF' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Tags` L956 in `gh-issues_issue-53_json` + > Resource 'ClusterNodegroupDefaultCapacityDA0920A3' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured +- **I9040** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` (AWS::IAM::Role) → `Properties.Tags` L896 in `gh-issues_issue-53_json` + > Resource 'ClusterNodegroupDefaultCapacityNodeGroupRole55953B04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `UserRoleB7C3739B` (AWS::IAM::Role) → `Properties.Tags` L444 in `gh-issues_issue-53_json` + > Resource 'UserRoleB7C3739B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` (AWS::CloudFormation::Stack) → `Properties.Tags` L1035 in `gh-issues_issue-53_json` + > Resource 'awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` (AWS::CloudFormation::Stack) → `Properties.Tags` L1058 in `gh-issues_issue-53_json` + > Resource 'awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `gh-issues_issue-54-bare_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54-with-ownership_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L12 in `gh-issues_issue-55_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `WeakConsumer` (AWS::SNS::Topic) → `Properties.Tags` L5 in `gh-issues_issue-56_json` + > Resource 'WeakConsumer' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-57_json` + > Resource 'AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Resource` (AWS::EC2::Volume) → `Properties.Tags` L3 in `gh-issues_issue-61_json` + > Resource 'Resource' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `Canary` (AWS::Synthetics::Canary) → `Properties.Tags` L5 in `gh-issues_issue-62_json` + > Resource 'Canary' of type 'AWS::Synthetics::Canary' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L29 in `gh-issues_issue-63_json` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-65_json` + > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L5 in `gh-issues_issue-67_json` + > Resource 'PromAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.Tags` L18 in `gh-issues_issue-68_json` + > Resource 'FutureNodeFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyFunc` (AWS::Lambda::Function) → `Properties.Tags` L6 in `gh-issues_issue-68_json` + > Resource 'MyFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L16 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CompoundSub` (AWS::S3::Bucket) → `Properties.Tags` L20 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'CompoundSub' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'ConditionalLeft' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalRight` (AWS::S3::Bucket) → `Properties.Tags` L29 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'ConditionalRight' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `good_E9001_aws_cdk_metadata_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `KubectlHandlerRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `good_W1028_pseudo_param_branches_reachable_yaml` + > Resource 'KubectlHandlerRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_W3010_getazs_not_flagged_yaml` + > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_W3010_getazs_not_flagged_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L12 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `Stage1` (AWS::ApiGateway::Stage) → `Properties.Tags` L39 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Resource 'Stage1' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `good_aurora_dbinstance_yaml` + > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_cdk_bootstrap_version_rule_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_cloudfront_valid_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `good_codepipeline_artifact_counts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_complex_conditions_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L34 in `good_complex_conditions_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevBucket` (AWS::S3::Bucket) → `Properties.Tags` L45 in `good_complex_conditions_yaml` + > Resource 'DevBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L41 in `good_conditions_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L101 in `good_core_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L79 in `good_core_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `good_core_conditions_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `good_core_conditions_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L53 in `good_core_conditions_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L66 in `good_core_conditions_yaml` + > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `good_core_conditions_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `good_core_config_default_e3012_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `MyKey` (AWS::KMS::Key) → `Properties.Tags` L4 in `good_core_directives_yaml` + > Resource 'MyKey' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L60 in `good_core_resource_attributes_yaml` + > Resource 'AutoScalingGroupWithPolicies' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `BucketWithConnectors` (AWS::Serverless::Function) → `Properties.Tags` L94 in `good_core_resource_attributes_yaml` + > Resource 'BucketWithConnectors' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_core_resource_attributes_yaml` + > Resource 'BucketWithTransform' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_core_resource_attributes_yaml` + > Resource 'CommonCfnAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DependsOnList` (AWS::S3::Bucket) → `Properties.Tags` L41 in `good_core_resource_attributes_yaml` + > Resource 'DependsOnList' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.Tags` L32 in `good_core_resource_attributes_yaml` + > Resource 'DependsOnSingleString' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_custom_is-defined_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedArray` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedArray' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedEmpty` (AWS::Lambda::Function) → `Properties.Tags` L35 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedEmpty' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedGetAttr` (AWS::Lambda::Function) → `Properties.Tags` L45 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedGetAttr' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedObject` (AWS::Lambda::Function) → `Properties.Tags` L55 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedObject' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedRef` (AWS::Lambda::Function) → `Properties.Tags` L66 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedRef' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedValue` (AWS::Lambda::Function) → `Properties.Tags` L76 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedValue' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L6 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedFromParent` (AWS::Lambda::Function) → `Properties.Tags` L20 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedFromParent' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedFromProperties` (AWS::Lambda::Function) → `Properties.Tags` L29 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedFromProperties' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedRefAWSNoValue` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedRefAWSNoValue' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedWithSiblings` (AWS::Lambda::Function) → `Properties.Tags` L46 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedWithSiblings' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `good_deletion_policies_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DB` (AWS::RDS::DBInstance) → `Properties.Tags` L9 in `good_deletion_policies_yaml` + > Resource 'DB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_provisioned_yaml` + > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `GoodTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_valid_attributes_yaml` + > Resource 'GoodTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_awsvpc_valid_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L198 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedEc2SizeThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L150 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedEc2ThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L186 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedFargateSizeThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L138 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedFargateThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L174 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedOnDemandThenProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.Tags` L163 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedProvisionedThenOnDemand' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L107 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'DefaultWithThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L122 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'FargateIntCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L62 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Tags` L47 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'NonFargateTask' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.Tags` L78 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'PayPerRequestTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.Tags` L91 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ProvisionedTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ValidFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Tags` L30 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ValidFargateSplunk' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_valid_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L18 in `good_ecs_fargate_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_elb_https_empty_sslcertificateid_yaml` + > Resource 'ELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `good_functions_dynamic_reference_embedded_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L25 in `good_functions_dynamic_reference_embedded_yaml` + > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Cluster0` (AWS::ECS::Cluster) → `Properties.Tags` L13 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster0' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster1` (AWS::ECS::Cluster) → `Properties.Tags` L21 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster1' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L29 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L37 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.Tags` L45 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh0' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.Tags` L61 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh1' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L72 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.Tags` L83 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh3' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.Tags` L95 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh4' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L48 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L80 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L102 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Mesh` (AWS::AppMesh::Mesh) → `Properties.Tags` L22 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Mesh' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L35 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L61 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L13 in `good_functions_findinmap_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L17 in `good_functions_findinmap_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L25 in `good_functions_findinmap_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `S3BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `S3BucketB` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `S3BucketC` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketC' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L15 in `good_functions_get_stack_output_yaml` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic10` (AWS::SNS::Topic) → `Properties.Tags` L106 in `good_functions_get_stack_output_yaml` + > Resource 'Topic10' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L23 in `good_functions_get_stack_output_yaml` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L33 in `good_functions_get_stack_output_yaml` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L44 in `good_functions_get_stack_output_yaml` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic5` (AWS::SNS::Topic) → `Properties.Tags` L55 in `good_functions_get_stack_output_yaml` + > Resource 'Topic5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic6` (AWS::SNS::Topic) → `Properties.Tags` L65 in `good_functions_get_stack_output_yaml` + > Resource 'Topic6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic7` (AWS::SNS::Topic) → `Properties.Tags` L74 in `good_functions_get_stack_output_yaml` + > Resource 'Topic7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic8` (AWS::SNS::Topic) → `Properties.Tags` L83 in `good_functions_get_stack_output_yaml` + > Resource 'Topic8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic9` (AWS::SNS::Topic) → `Properties.Tags` L95 in `good_functions_get_stack_output_yaml` + > Resource 'Topic9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ConfigApplication` (AWS::AppConfig::Application) → `Properties.Tags` L25 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'ConfigApplication' of type 'AWS::AppConfig::Application' supports Tags but none are configured +- **I9040** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.Tags` L30 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'ConfigEnvironment' of type 'AWS::AppConfig::Environment' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L35 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_functions_relationship_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `good_functions_relationship_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_functions_select_string_index_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_functions_select_string_index_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L27 in `good_functions_select_string_index_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `TestRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_functions_sub_needed_custom_excludes_yaml` + > Resource 'TestRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IOTPolicies` (AWS::IoT::Policy) → `Properties.Tags` L120 in `good_functions_sub_needed_yaml` + > Resource 'IOTPolicies' of type 'AWS::IoT::Policy' supports Tags but none are configured +- **I9040** `Key` (AWS::ApiGateway::ApiKey) → `Properties.Tags` L84 in `good_functions_sub_needed_yaml` + > Resource 'Key' of type 'AWS::ApiGateway::ApiKey' supports Tags but none are configured +- **I9040** `TestGoodStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L139 in `good_functions_sub_needed_yaml` + > Resource 'TestGoodStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `MyStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L66 in `good_functions_sub_yaml` + > Resource 'MyStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L51 in `good_functions_sub_yaml` + > Resource 'myAlb' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L32 in `good_functions_sub_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L43 in `good_functions_sub_yaml` + > Resource 'mySubStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `myVPc2` (AWS::EC2::VPC) → `Properties.Tags` L71 in `good_functions_sub_yaml` + > Resource 'myVPc2' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `ElasticIP` (AWS::EC2::EIP) → `Properties.Tags` L119 in `good_generic_yaml` + > Resource 'ElasticIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L123 in `good_generic_yaml` + > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L144 in `good_generic_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `LambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L162 in `good_generic_yaml` + > Resource 'LambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L74 in `good_generic_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.Tags` L94 in `good_generic_yaml` + > Resource 'MyEC2Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_generic_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L90 in `good_generic_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ProvisionedProduct` (AWS::ServiceCatalog::CloudFormationProvisionedProduct) → `Properties.Tags` L8 in `good_getatt_provisioned_product_outputs_yaml` + > Resource 'ProvisionedProduct' of type 'AWS::ServiceCatalog::CloudFormationProvisionedProduct' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `good_getatt_provisioned_product_outputs_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_getazs_resolves_current_regions_yaml` + > Resource 'SubnetApEast2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_getazs_resolves_current_regions_yaml` + > Resource 'SubnetMxCentral1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `ProdBucket` (AWS::S3::Bucket) → `Properties.Tags` L22 in `good_good_conditions_valid_refs_yaml` + > Resource 'ProdBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.Tags` L16 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Resource 'RoleInlinePolicy' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Tags` L75 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Resource 'SSOPermissionSet' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured +- **I9040** `SomeBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_iam_intrinsic_resource_arns_yaml` + > Resource 'SomeBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L18 in `good_iam_valid_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TopicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L18 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicAliasName` (AWS::SNS::Topic) → `Properties.Tags` L14 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicAliasName' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicIntrinsicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L30 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicIntrinsicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicKeyId` (AWS::SNS::Topic) → `Properties.Tags` L6 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicMultiRegionKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L26 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicMultiRegionKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicMultiRegionKeyId` (AWS::SNS::Topic) → `Properties.Tags` L22 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicMultiRegionKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_snapstart_yaml` + > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_zipfile_yaml` + > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `good_mappings_used_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `good_mappings_valid_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_minimal_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `OtherResource` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_modules_minimal_yaml` + > Resource 'OtherResource' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Instance` (AWS::Neptune::DBInstance) → `Properties.Tags` L4 in `good_neptune_valid_instanceclass_yaml` + > Resource 'Instance' of type 'AWS::Neptune::DBInstance' supports Tags but none are configured +- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `good_no_value_yaml` + > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Cluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L8 in `good_no_w3010_on_unlisted_type_yaml` + > Resource 'Cluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L17 in `good_output_value_string_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L16 in `good_override_complete_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_complete_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L12 in `good_override_complete_yaml` + > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_required_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_param_constraints_valid_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_parameters_not_used_parameters_yaml` + > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyAPI` (AWS::Serverless::Api) → `Properties.Tags` L15 in `good_parameters_used_transform_removed_yaml` + > Resource 'MyAPI' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_parameters_used_transforms_yaml` + > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `mySubnet21` (AWS::EC2::Subnet) → `Properties.Tags` L56 in `good_properties_ec2_vpc_yaml` + > Resource 'mySubnet21' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet22` (AWS::EC2::Subnet) → `Properties.Tags` L64 in `good_properties_ec2_vpc_yaml` + > Resource 'mySubnet22' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L31 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc2` (AWS::EC2::VPC) → `Properties.Tags` L36 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc2' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc3` (AWS::EC2::VPC) → `Properties.Tags` L41 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc3' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc4` (AWS::EC2::VPC) → `Properties.Tags` L46 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc4' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc5` (AWS::EC2::VPC) → `Properties.Tags` L51 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc5' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `NatGW` (AWS::EC2::NatGateway) → `Properties.Tags` L29 in `good_redshift_private_yaml` + > Resource 'NatGW' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `good_redshift_private_yaml` + > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured +- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `good_redshift_private_yaml` + > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `good_redshift_private_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `good_redshift_private_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `Cluster` (AWS::Redshift::Cluster) → `Properties.Tags` L4 in `good_redshift_valid_nodetype_yaml` + > Resource 'Cluster' of type 'AWS::Redshift::Cluster' supports Tags but none are configured +- **I9040** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.Tags` L12 in `good_region_conditional_resource_type_yaml` + > Resource 'Pool' of type 'AWS::DeviceFarm::DevicePool' supports Tags but none are configured +- **I9040** `NestedStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `good_resources_cloudformation_nested_stack_dynamic_yaml` + > Resource 'NestedStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L39 in `good_resources_cloudformation_stacks_yaml` + > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackInvalidPath` (AWS::CloudFormation::Stack) → `Properties.Tags` L31 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackInvalidPath' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackIsWebUrl` (AWS::CloudFormation::Stack) → `Properties.Tags` L15 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackIsWebUrl' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L7 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackUrlIsObject` (AWS::CloudFormation::Stack) → `Properties.Tags` L23 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackUrlIsObject' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_resources_cloudfront_aliases_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `good_resources_codepipeline_yaml` + > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_deletionpolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L18 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `good_resources_dynamodb_attributes_yaml` + > Resource 'DDBTable1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.Tags` L36 in `good_resources_dynamodb_attributes_yaml` + > Resource 'DDBTable2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L50 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L125 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FifthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L108 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FourthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L25 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L33 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L42 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyOptionalClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L17 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L142 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SixthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L89 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `IAMInstanceProfile` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `good_resources_iam_instance_profile_yaml` + > Resource 'IAMInstanceProfile' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Instance` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_resources_iam_instance_profile_yaml` + > Resource 'Instance' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Ecr` (AWS::ECR::Repository) → `Properties.Tags` L6 in `good_resources_iam_resource_policy_yaml` + > Resource 'Ecr' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `good_resources_name_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L76 in `good_resources_primary_identifiers_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_resources_primary_identifiers_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L30 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L53 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TESTROLE` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_properties_allowed_pattern_yaml` + > Resource 'TESTROLE' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Subnet) → `Properties.Tags` L6 in `good_resources_properties_az_cdk_yaml` + > Resource 'Instance' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L11 in `good_resources_properties_exclusive_yaml` + > Resource 'Alarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.Tags` L88 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'IngestionPipeline' of type 'AWS::OSIS::Pipeline' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L31 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Stack` (AWS::CloudFormation::Stack) → `Properties.Tags` L13 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Resource 'Stack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `IamRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IamRoleWithConditions` (AWS::IAM::Role) → `Properties.Tags` L24 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRoleWithConditions' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IamRoleWithNestedConditions` (AWS::IAM::Role) → `Properties.Tags` L36 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRoleWithNestedConditions' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L17 in `good_resources_properties_password_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L44 in `good_resources_properties_password_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Tags` L26 in `good_resources_properties_password_yaml` + > Resource 'myNewDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L35 in `good_resources_properties_password_yaml` + > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `good_resources_properties_string_size_yaml` + > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_resources_properties_templated_code_sam_yaml` + > Resource 'Function' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `AppSync` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L4 in `good_resources_properties_templated_code_yaml` + > Resource 'AppSync' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L24 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L31 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance6' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `FunctionRole` (AWS::IAM::Role) → `Properties.Tags` L39 in `good_resources_update_policy_supported_yaml` + > Resource 'FunctionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L8 in `good_resources_update_policy_supported_yaml` + > Resource 'MyASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L28 in `good_resources_update_policy_supported_yaml` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_updatereplacepolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L5 in `good_sam_api_stagename_valid_yaml` + > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_sam_connector_valid_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L3 in `good_sam_connector_valid_yaml` + > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_deploymentpreference_with_alias_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_dlq_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_image_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_provisioned_concurrency_with_alias_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L9 in `good_sam_function_runtime_handler_via_globals_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_url_config_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_zip_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L19 in `good_sam_globals_all_valid_sections_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_globals_empty_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `AliasParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_alias_ref_yaml` + > Resource 'AliasParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_alias_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ApiIdParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'ApiIdParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `ApiSubParam` (AWS::SSM::Parameter) → `Properties.Tags` L22 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'ApiSubParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_restapi_stage_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `StageParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_restapi_stage_ref_yaml` + > Resource 'StageParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `RoleArnParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'RoleArnParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `RoleRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'RoleRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_no_primarykey_yaml` + > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured +- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_valid_yaml` + > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured +- **I9040** `MySM` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_sam_statemachine_definition_only_yaml` + > Resource 'MySM' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_schema_valid_resources_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_schema_valid_resources_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_simple_sub_prefix_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `good_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L75 in `good_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `good_sqs_fifo_valid_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `good_ssm_document_valid_yaml` + > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_ssm_parameter_name_type_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `good_stepfunctions_valid_yaml` + > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L23 in `good_string_length_unknowable_values_json` + > Resource 'JoinedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_string_length_unknowable_values_json` + > Resource 'JoinedFromAReference' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_string_length_unknowable_values_json` + > Resource 'NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.Tags` L43 in `good_string_length_unknowable_values_json` + > Resource 'OnlySomeChoicesTooLong' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L37 in `good_string_length_unknowable_values_json` + > Resource 'SubstitutedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_sub_not_needed_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `App1` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_transform_applications_location_yaml` + > Resource 'App1' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `App2` (AWS::Serverless::Application) → `Properties.Tags` L9 in `good_transform_applications_location_yaml` + > Resource 'App2' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L22 in `good_transform_auto_publish_alias_yaml` + > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SkillFunction2` (AWS::Serverless::Function) → `Properties.Tags` L31 in `good_transform_auto_publish_alias_yaml` + > Resource 'SkillFunction2' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_auto_publish_code_sha256_yaml` + > Resource 'LambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_transform_function_use_s3_uri_yaml` + > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `HelloWorldFunction` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_transform_function_using_image_yaml` + > Resource 'HelloWorldFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L96 in `good_transform_language_extension_yaml` + > Resource 'MySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `good_transform_language_extension_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.Tags` L90 in `good_transform_language_extension_yaml` + > Resource 'SecurityGroups' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TestLambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L80 in `good_transform_language_extension_yaml` + > Resource 'TestLambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `TestStateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L67 in `good_transform_language_extension_yaml` + > Resource 'TestStateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_transform_list_transform_many_yaml` + > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Lambda::Function) → `Properties.Tags` L9 in `good_transform_list_transform_not_sam_yaml` + > Resource 'SkillFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_list_transform_yaml` + > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L23 in `good_transform_serverless_api_yaml` + > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_serverless_api_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LiteralAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_transform_serverless_auto_publish_alias_yaml` + > Resource 'LiteralAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ParameterAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_serverless_auto_publish_alias_yaml` + > Resource 'ParameterAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L7 in `good_transform_serverless_function_yaml` + > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L73 in `good_transform_serverless_function_yaml` + > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L11 in `good_transform_serverless_function_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_globals_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `StateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_transform_step_function_local_definition_yaml` + > Resource 'StateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `AppName` (AWS::Serverless::Application) → `Properties.Tags` L20 in `good_transform_yaml` + > Resource 'AppName' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `MyServerlessFunctionLogicalID` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_yaml` + > Resource 'MyServerlessFunctionLogicalID' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ImportedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `good_unique_items_deploy_time_values_json` + > Resource 'ImportedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `SelectedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L44 in `good_unique_items_deploy_time_values_json` + > Resource 'SelectedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `StackOutputSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L12 in `good_unique_items_deploy_time_values_json` + > Resource 'StackOutputSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L24 in `good_vpc_subnets_yaml` + > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `good_vpc_subnets_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_vpc_subnets_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L4 in `integration_availability-zones_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `KMS` (AWS::KMS::Key) → `Properties.Tags` L3 in `integration_aws-dynamodb-table_yaml` + > Resource 'KMS' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `Table1` (AWS::DynamoDB::Table) → `Properties.Tags` L11 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Table2` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Table3` (AWS::DynamoDB::Table) → `Properties.Tags` L49 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table3' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L4 in `integration_aws-ec2-instance_yaml` + > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured +- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L9 in `integration_aws-ec2-networkinterface_yaml` + > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L7 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L13 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet3` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet4` (AWS::EC2::Subnet) → `Properties.Tags` L22 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet4' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet5` (AWS::EC2::Subnet) → `Properties.Tags` L28 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet5' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Function` (AWS::Lambda::Function) → `Properties.Tags` L4 in `integration_aws-lambda-function_yaml` + > Resource 'Function' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L10 in `integration_aws-lambda-function_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Tags` L111 in `integration_cfn-gather_yaml` + > Resource 'AuroraCluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L26 in `integration_cfn-gather_yaml` + > Resource 'AwsvpcTaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L117 in `integration_cfn-gather_yaml` + > Resource 'BadEngineInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `FargateService` (AWS::ECS::Service) → `Properties.Tags` L16 in `integration_cfn-gather_yaml` + > Resource 'FargateService' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L104 in `integration_cfn-gather_yaml` + > Resource 'FifoMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `FifoProcessor` (AWS::Lambda::Function) → `Properties.Tags` L93 in `integration_cfn-gather_yaml` + > Resource 'FifoProcessor' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L39 in `integration_cfn-gather_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `RestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L52 in `integration_cfn-gather_yaml` + > Resource 'RestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApi2` (AWS::ApiGateway::RestApi) → `Properties.Tags` L73 in `integration_cfn-gather_yaml` + > Resource 'RestApi2' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ServiceNoNetConfig` (AWS::ECS::Service) → `Properties.Tags` L34 in `integration_cfn-gather_yaml` + > Resource 'ServiceNoNetConfig' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L88 in `integration_cfn-gather_yaml` + > Resource 'SqsFifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.Tags` L81 in `integration_cfn-gather_yaml` + > Resource 'StageBadApi' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `StandardDLQ` (AWS::SQS::Queue) → `Properties.Tags` L47 in `integration_cfn-gather_yaml` + > Resource 'StandardDLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L6 in `integration_cfn-gather_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `KmsKey` (AWS::KMS::Key) → `Properties.Tags` L6 in `integration_custom-resources_yaml` + > Resource 'KmsKey' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `integration_deployment-file-template_yaml` + > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L27 in `integration_deployment-file-template_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L23 in `integration_deployment-file-template_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `Broker` (AWS::AmazonMQ::Broker) → `Properties.Tags` L20 in `integration_dynamic-references_yaml` + > Resource 'Broker' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured +- **I9040** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L6 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L13 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMappingBadDynamicReference' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L34 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMappingSpaces' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `Instance1` (AWS::EC2::Instance) → `Properties.Tags` L27 in `integration_formats_yaml` + > Resource 'Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L21 in `integration_formats_yaml` + > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `integration_formats_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L10 in `integration_formats_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `InvalidMissing` (AWS::SNS::Topic) → `Properties.Tags` L45 in `integration_get-stack-output_yaml` + > Resource 'InvalidMissing' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `InvalidType` (AWS::SNS::Topic) → `Properties.Tags` L52 in `integration_get-stack-output_yaml` + > Resource 'InvalidType' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidIf` (AWS::SNS::Topic) → `Properties.Tags` L34 in `integration_get-stack-output_yaml` + > Resource 'ValidIf' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidJoin` (AWS::SNS::Topic) → `Properties.Tags` L23 in `integration_get-stack-output_yaml` + > Resource 'ValidJoin' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidTopic` (AWS::SNS::Topic) → `Properties.Tags` L15 in `integration_get-stack-output_yaml` + > Resource 'ValidTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DocDBCluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L23 in `integration_getatt-types_yaml` + > Resource 'DocDBCluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured +- **I9040** `SsmParameter` (AWS::SSM::Parameter) → `Properties.Tags` L16 in `integration_getatt-types_yaml` + > Resource 'SsmParameter' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `TestCluster` (AWS::ECS::Cluster) → `Properties.Tags` L25 in `integration_getatt-types_yaml` + > Resource 'TestCluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `TestFargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `integration_getatt-types_yaml` + > Resource 'TestFargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TestFargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L42 in `integration_getatt-types_yaml` + > Resource 'TestFargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TestLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L50 in `integration_getatt-types_yaml` + > Resource 'TestLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Tags` L56 in `integration_getatt-types_yaml` + > Resource 'TestTaskDefinitionWithGetAtt' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CloudFront2` (AWS::CloudFront::Distribution) → `Properties.Tags` L42 in `integration_ref-no-value_yaml` + > Resource 'CloudFront2' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `IamRole3` (AWS::IAM::Role) → `Properties.Tags` L31 in `integration_ref-no-value_yaml` + > Resource 'IamRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L7 in `integration_ref-types_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L11 in `integration_ref-types_yaml` + > Resource 'FargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `integration_ref-types_yaml` + > Resource 'FargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L57 in `integration_ref-types_yaml` + > Resource 'LoadBalancer' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L65 in `integration_ref-types_yaml` + > Resource 'LogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L48 in `integration_ref-types_yaml` + > Resource 'SecurityGroup1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L53 in `integration_ref-types_yaml` + > Resource 'SecurityGroup2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L38 in `integration_ref-types_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L43 in `integration_ref-types_yaml` + > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Tags` L92 in `integration_ref-types_yaml` + > Resource 'TaskDefinitionWithRefToParameter' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Tags` L71 in `integration_ref-types_yaml` + > Resource 'TaskDefinitionWithRefToResource' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L34 in `integration_ref-types_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L93 in `integration_resources-cloudformation-init_yaml` + > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `DmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L296 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `DmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L399 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L331 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L171 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `VmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L274 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L206 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L491 in `lsp_comprehensive_json` + > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L846 in `lsp_comprehensive_json` + > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L716 in `lsp_comprehensive_json` + > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L802 in `lsp_comprehensive_json` + > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L204 in `lsp_comprehensive_yaml` + > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L369 in `lsp_comprehensive_yaml` + > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L293 in `lsp_comprehensive_yaml` + > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L343 in `lsp_comprehensive_yaml` + > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `lsp_condition-usage_json` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L86 in `lsp_condition-usage_json` + > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_condition-usage_json` + > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L94 in `lsp_condition-usage_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L142 in `lsp_condition-usage_yaml` + > Resource 'DevSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L88 in `lsp_condition-usage_yaml` + > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.Tags` L170 in `lsp_condition-usage_yaml` + > Resource 'LogicalConditionResource' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L55 in `lsp_condition-usage_yaml` + > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L136 in `lsp_condition-usage_yaml` + > Resource 'ProductionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L42 in `lsp_constants_json` + > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L25 in `lsp_constants_yaml` + > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L32 in `lsp_parameter_usage_json` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L40 in `lsp_parameter_usage_json` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L48 in `lsp_parameter_usage_json` + > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L56 in `lsp_parameter_usage_json` + > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L64 in `lsp_parameter_usage_json` + > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L28 in `lsp_parameter_usage_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L34 in `lsp_parameter_usage_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L41 in `lsp_parameter_usage_yaml` + > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L47 in `lsp_parameter_usage_yaml` + > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L52 in `lsp_parameter_usage_yaml` + > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket6` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_parameter_usage_yaml` + > Resource 'Bucket6' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket7` (AWS::S3::Bucket) → `Properties.Tags` L63 in `lsp_parameter_usage_yaml` + > Resource 'Bucket7' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L4 in `lsp_simple_json` + > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `lsp_simple_yaml` + > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L8 in `lsp_test-template_yaml` + > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Serverless::Function) → `Properties.Tags` L4 in `lsp_test-template_yaml` + > Resource 'MyFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L162 in `public_lambda-poller_json` + > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L116 in `public_lambda-poller_json` + > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `public_lambda-poller_json` + > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L185 in `public_lambda-poller_yaml` + > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L162 in `public_lambda-poller_yaml` + > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L17 in `public_lambda-poller_yaml` + > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L1689 in `public_watchmaker_json` + > Resource 'WatchmakerInstanceLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2045 in `quickstart_cis_benchmark_yaml` + > Resource 'BillingChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L2201 in `quickstart_cis_benchmark_yaml` + > Resource 'BillingChangesCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1984 in `quickstart_cis_benchmark_yaml` + > Resource 'CloudTrailCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1774 in `quickstart_cis_benchmark_yaml` + > Resource 'ConsoleLoginFailureCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1737 in `quickstart_cis_benchmark_yaml` + > Resource 'ConsoleSigninWithoutMFACloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Tags` L1937 in `quickstart_cis_benchmark_yaml` + > Resource 'DetectConfigChanges' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Tags` L1906 in `quickstart_cis_benchmark_yaml` + > Resource 'DetectS3BucketPolicyChanges' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2069 in `quickstart_cis_benchmark_yaml` + > Resource 'Ec2TerminationCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.Tags` L1002 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailBucketRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.Tags` L1119 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailLogIntegrityRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.Tags` L889 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.Tags` L1397 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateConfigInAllRegionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.Tags` L1301 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateKeyRotationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.Tags` L702 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluatePolicyPermissionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.Tags` L230 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateRootAccountRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.Tags` L798 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateUserPolicyAssociationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.Tags` L1216 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForInstanceRoleUseRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.Tags` L609 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForRoleForMfaOnUsersRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.Tags` L500 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcDefaultSecurityGroupsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.Tags` L424 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcFlowLogRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.Tags` L1502 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcPeeringRouteTablesRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.Tags` L2254 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionToDisableUnusedCredentials' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.Tags` L1859 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionToFormatCloudWatchEvent' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.Tags` L123 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctiontForEvaluateCisBenchmarkingPreconditions' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.Tags` L1602 in `quickstart_cis_benchmark_yaml` + > Resource 'GetCloudTrailCloudWatchLog' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1699 in `quickstart_cis_benchmark_yaml` + > Resource 'IAMRootActivityCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2007 in `quickstart_cis_benchmark_yaml` + > Resource 'IamPolicyChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1811 in `quickstart_cis_benchmark_yaml` + > Resource 'KMSCustomerKeyDeletionCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1962 in `quickstart_cis_benchmark_yaml` + > Resource 'KmsKeyUseCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `MasterConfigRole` (AWS::IAM::Role) → `Properties.Tags` L78 in `quickstart_cis_benchmark_yaml` + > Resource 'MasterConfigRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2120 in `quickstart_cis_benchmark_yaml` + > Resource 'NetworkAclChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2150 in `quickstart_cis_benchmark_yaml` + > Resource 'NetworkChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `RoleForCloudWatchEvents` (AWS::IAM::Role) → `Properties.Tags` L1831 in `quickstart_cis_benchmark_yaml` + > Resource 'RoleForCloudWatchEvents' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RoleForDisableUnusedCredentialsFunction` (AWS::IAM::Role) → `Properties.Tags` L2221 in `quickstart_cis_benchmark_yaml` + > Resource 'RoleForDisableUnusedCredentialsFunction' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Tags` L2348 in `quickstart_cis_benchmark_yaml` + > Resource 'ScheduledRuleForDisableUnusedCredentials' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2092 in `quickstart_cis_benchmark_yaml` + > Resource 'SecurityGroupChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.Tags` L1588 in `quickstart_cis_benchmark_yaml` + > Resource 'SnsTopicForCloudWatchEvents' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1661 in `quickstart_cis_benchmark_yaml` + > Resource 'UnauthorizedAttemptCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L240 in `quickstart_config-rules_json` + > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L99 in `quickstart_config-rules_json` + > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L119 in `quickstart_iam_json` + > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L191 in `quickstart_iam_json` + > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L304 in `quickstart_iam_json` + > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `quickstart_iam_json` + > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rEipNat` (AWS::EC2::EIP) → `Properties.Tags` L71 in `quickstart_nat-instance_json` + > Resource 'rEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rCWAlarmHighCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L645 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmHighCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmHighCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L663 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmHighCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmLowCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L681 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmLowCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmLowCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L699 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmLowCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rDBSubnetGroup` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L716 in `quickstart_nist_application_yaml` + > Resource 'rDBSubnetGroup' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Tags` L960 in `quickstart_nist_application_yaml` + > Resource 'rPostProcInstanceRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Tags` L1006 in `quickstart_nist_application_yaml` + > Resource 'rRDSInstanceMySQL' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `rS3ELBAccessLogs` (AWS::S3::Bucket) → `Properties.Tags` L1062 in `quickstart_nist_application_yaml` + > Resource 'rS3ELBAccessLogs' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1139 in `quickstart_nist_application_yaml` + > Resource 'rSecurityGroupWeb' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `rWebContentBucket` (AWS::S3::Bucket) → `Properties.Tags` L1179 in `quickstart_nist_application_yaml` + > Resource 'rWebContentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L99 in `quickstart_nist_config_rules_yaml` + > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L282 in `quickstart_nist_config_rules_yaml` + > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L280 in `quickstart_nist_high_main_yaml` + > Resource 'ApplicationTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ConfigRulesTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L393 in `quickstart_nist_high_main_yaml` + > Resource 'ConfigRulesTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `IamTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L412 in `quickstart_nist_high_main_yaml` + > Resource 'IamTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `LoggingTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L425 in `quickstart_nist_high_main_yaml` + > Resource 'LoggingTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L446 in `quickstart_nist_high_main_yaml` + > Resource 'ManagementVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L527 in `quickstart_nist_high_main_yaml` + > Resource 'ProductionVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L64 in `quickstart_nist_iam_yaml` + > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L144 in `quickstart_nist_iam_yaml` + > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L243 in `quickstart_nist_iam_yaml` + > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L319 in `quickstart_nist_iam_yaml` + > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rArchiveLogsBucket` (AWS::S3::Bucket) → `Properties.Tags` L43 in `quickstart_nist_logging_yaml` + > Resource 'rArchiveLogsBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailBucket` (AWS::S3::Bucket) → `Properties.Tags` L121 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L144 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailChangeAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCloudTrailLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L159 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `rCloudTrailLoggingLocal` (AWS::CloudTrail::Trail) → `Properties.Tags` L164 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailLoggingLocal' of type 'AWS::CloudTrail::Trail' supports Tags but none are configured +- **I9040** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Tags` L187 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Tags` L325 in `quickstart_nist_logging_yaml` + > Resource 'rCloudWatchLogsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L392 in `quickstart_nist_logging_yaml` + > Resource 'rIAMCreateAccessKeyAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L408 in `quickstart_nist_logging_yaml` + > Resource 'rIAMPolicyChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L443 in `quickstart_nist_logging_yaml` + > Resource 'rNetworkAclChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L472 in `quickstart_nist_logging_yaml` + > Resource 'rRootActivityAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rSecurityAlarmTopic` (AWS::SNS::Topic) → `Properties.Tags` L486 in `quickstart_nist_logging_yaml` + > Resource 'rSecurityAlarmTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L494 in `quickstart_nist_logging_yaml` + > Resource 'rSecurityGroupChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L523 in `quickstart_nist_logging_yaml` + > Resource 'rUnauthorizedAttemptAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L336 in `quickstart_nist_vpc_management_yaml` + > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L395 in `quickstart_nist_vpc_management_yaml` + > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L401 in `quickstart_nist_vpc_management_yaml` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L548 in `quickstart_nist_vpc_management_yaml` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L558 in `quickstart_nist_vpc_management_yaml` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L304 in `quickstart_nist_vpc_production_yaml` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.Tags` L367 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNACLPrivate' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured +- **I9040** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.Tags` L372 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNACLPublic' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L518 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L528 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `OpenShiftStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L185 in `quickstart_openshift_master_yaml` + > Resource 'OpenShiftStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `VPCStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L243 in `quickstart_openshift_master_yaml` + > Resource 'VPCStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L747 in `quickstart_openshift_yaml` + > Resource 'ContainerAccessELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `KeyGen` (AWS::Lambda::Function) → `Properties.Tags` L799 in `quickstart_openshift_yaml` + > Resource 'KeyGen' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L814 in `quickstart_openshift_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1055 in `quickstart_openshift_yaml` + > Resource 'OpenShiftInternalSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1282 in `quickstart_openshift_yaml` + > Resource 'OpenShiftMasterELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1317 in `quickstart_openshift_yaml` + > Resource 'OpenShiftMasterInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1370 in `quickstart_openshift_yaml` + > Resource 'OpenShiftNodeInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1395 in `quickstart_openshift_yaml` + > Resource 'OpenShiftNodeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1637 in `quickstart_openshift_yaml` + > Resource 'OpenShiftSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SetupRole` (AWS::IAM::Role) → `Properties.Tags` L1657 in `quickstart_openshift_yaml` + > Resource 'SetupRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `quickstart_test_yaml` + > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L920 in `quickstart_vpc-management_json` + > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L723 in `quickstart_vpc-management_json` + > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L767 in `quickstart_vpc-management_json` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L775 in `quickstart_vpc-management_json` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L380 in `quickstart_vpc-management_json` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.Tags` L483 in `quickstart_vpc_json` + > Resource 'DHCPOptions' of type 'AWS::EC2::DHCPOptions' supports Tags but none are configured +- **I9040** `NAT1EIP` (AWS::EC2::EIP) → `Properties.Tags` L1749 in `quickstart_vpc_json` + > Resource 'NAT1EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT2EIP` (AWS::EC2::EIP) → `Properties.Tags` L1768 in `quickstart_vpc_json` + > Resource 'NAT2EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT3EIP` (AWS::EC2::EIP) → `Properties.Tags` L1787 in `quickstart_vpc_json` + > Resource 'NAT3EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT4EIP` (AWS::EC2::EIP) → `Properties.Tags` L1806 in `quickstart_vpc_json` + > Resource 'NAT4EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.Tags` L1825 in `quickstart_vpc_json` + > Resource 'NATGateway1' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.Tags` L1841 in `quickstart_vpc_json` + > Resource 'NATGateway2' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.Tags` L1857 in `quickstart_vpc_json` + > Resource 'NATGateway3' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.Tags` L1873 in `quickstart_vpc_json` + > Resource 'NATGateway4' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L2096 in `quickstart_vpc_json` + > Resource 'NATInstanceSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L2116 in `quickstart_vpc_json` + > Resource 'S3VPCEndpoint' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured + ### I9003 - 56 findings - **I9003** in `bad_E1150_network_interfaces_groupset_multi_yaml` @@ -21229,7 +17881,7 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > RDS instance should have StorageEncrypted set to true - **W9008** `PolicyList` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L55 in `good_transform_language_extension_yaml` > RDS instance should have StorageEncrypted set to true -- **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L657 in `lsp_comprehensive_json` +- **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L658 in `lsp_comprehensive_json` > RDS instance should have StorageEncrypted set to true - **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` > RDS instance should have StorageEncrypted set to true @@ -21238,6 +17890,71 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L94 in `lsp_condition-usage_yaml` > RDS instance should have StorageEncrypted set to true +### F1101 - 31 findings + +- **F1101** L8 in `bad_core_config_invalid_json_json` + > JSON parse error: expected `,` or `]` at line 8 column 6 +- **F1101** L8 in `bad_core_config_invalid_yaml_yaml` + > YAML parse error: while parsing a block mapping, did not find expected key at byte 113 line 8 column 9 +- **F1101** L18 in `bad_core_parse_invalid_map_yaml` + > Complex key not supported (line 18) +- **F1101** L8 in `bad_core_parse_malformed_core_tag_yaml` + > YAML parse error: 'not_a_number' is not a valid value for !!int +- **F1101** L7 in `bad_core_parse_multiple_documents_yaml` + > expected a single document in the stream but found another document +- **F1101** L7 in `bad_core_parse_null_key_yaml` + > Null key not supported (line 7) +- **F1101** L1 in `bad_empty_file_yaml` + > Empty YAML document +- **F1101** `Topic` (AWS::SNS::Topic) → `Properties.DisplayName` L14 in `bad_functions_findinmap_default_value_no_transform_yaml` + > Fn::FindInMap: the 'DefaultValue' element requires the AWS::LanguageExtensions transform; without it Fn::FindInMap accepts at most 3 elements +- **F1101** L5 in `bad_json_parse_json` + > JSON parse error: expected `:` at line 5 column 11 +- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy.Fn::If.2` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy.Fn::If.2` L36 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy` L30 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy` L31 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `CreationConditional` (AWS::CloudFormation::WaitCondition) → `CreationPolicy` L22 in `bad_lifecycle_policy_shapes_yaml` + > Fn::If is not supported as a top-level CreationPolicy value; CreationPolicy must be an object +- **F1101** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `CreationPolicy` L29 in `bad_lifecycle_policy_shapes_yaml` + > Ref is not supported as a top-level CreationPolicy value; CreationPolicy must be an object +- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_lifecycle_policy_shapes_yaml` + > Fn::If in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L34 in `bad_lifecycle_policy_shapes_yaml` + > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `DeletionPolicy` L38 in `bad_lifecycle_policy_shapes_yaml` + > Ref in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `UpdateReplacePolicy` L39 in `bad_lifecycle_policy_shapes_yaml` + > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` + > Fn::Cidr is not supported in DeletionPolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If +- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` + > Fn::Cidr is not supported in UpdateReplacePolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If +- **F1101** L1 in `bad_string_yaml` + > Template root must be a YAML mapping +- **F1101** L12 in `bad_template_yaml` + > YAML parse error: while parsing a block mapping, did not find expected key at byte 234 line 12 column 11 +- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object + ### W9002 - 30 findings - **W9002** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.RoleArn` L6 in `bad_codepipeline_bad_artifact_counts_yaml` @@ -21357,10 +18074,10 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Hardcoded AMI ID - use a parameter or mapping for portability - **W9010** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` > Hardcoded AMI ID - use a parameter or mapping for portability -- **W9010** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L355 in `quickstart_openshift_yaml` +- **W9010** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L356 in `quickstart_openshift_yaml` > Hardcoded AMI ID - use a parameter or mapping for portability -### F0001 - 24 findings +### F0001 - 22 findings - Basic CloudFormation Template Configuration - **F0001** L23 in `bad_conditions_and_yaml` > Resources section must exist and be non-empty @@ -21376,8 +18093,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Resources section must exist and be non-empty - **F0001** L10 in `bad_mappings_name_yaml` > Resources section must exist and be non-empty -- **F0001** in `bad_not_cloudformation_yaml` - > Resources section must exist and be non-empty - **F0001** L61 in `bad_parameters_default_yaml` > Resources section must exist and be non-empty - **F0001** L6 in `bad_resources_cloudformation_stack_nested_yaml` @@ -21388,8 +18103,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Resources section must exist and be non-empty - **F0001** L4 in `bad_templates_base_yaml` > Resources section must exist and be non-empty -- **F0001** in `gh-issues_issue-201_json` - > Resources section must exist and be non-empty - **F0001** L16 in `good_core_config_cfn_lint_json` > Resources section must exist and be non-empty - **F0001** L11 in `good_core_config_cfn_lint_yaml` @@ -21411,51 +18124,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0001** L21 in `integration_metdata_yaml` > Resources section must exist and be non-empty -### F1101 - 21 findings - -- **F1101** `Topic` (AWS::SNS::Topic) → `Properties.DisplayName` L14 in `bad_functions_findinmap_default_value_no_transform_yaml` - > Fn::FindInMap: the 'DefaultValue' element requires the AWS::LanguageExtensions transform; without it Fn::FindInMap accepts at most 3 elements -- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy.Fn::If.2` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy.Fn::If.2` L36 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy` L30 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy` L31 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `CreationConditional` (AWS::CloudFormation::WaitCondition) → `CreationPolicy` L22 in `bad_lifecycle_policy_shapes_yaml` - > Fn::If is not supported as a top-level CreationPolicy value; CreationPolicy must be an object -- **F1101** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `CreationPolicy` L29 in `bad_lifecycle_policy_shapes_yaml` - > Ref is not supported as a top-level CreationPolicy value; CreationPolicy must be an object -- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_lifecycle_policy_shapes_yaml` - > Fn::If in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L34 in `bad_lifecycle_policy_shapes_yaml` - > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `DeletionPolicy` L38 in `bad_lifecycle_policy_shapes_yaml` - > Ref in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `UpdateReplacePolicy` L39 in `bad_lifecycle_policy_shapes_yaml` - > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` - > Fn::Cidr is not supported in DeletionPolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If -- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` - > Fn::Cidr is not supported in UpdateReplacePolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If -- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object - ### W2508 - 19 findings - **W2508** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L7 in `bad_security_issues_yaml` @@ -21497,60 +18165,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2508** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L425 in `quickstart_vpc-management_json` > Security group allows 0.0.0.0/0 access to sensitive port 22 (range 22-22) -### F2012 - 15 findings - -- **F2012** → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` - > Parameter 'Port' Default 'not-a-number' is not in AllowedValues ['abc', 'def'] -- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLListStringType' Default 'bad' is not in AllowedValues ['good', 'better'] -- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLListStringType' Default 'worse' is not in AllowedValues ['good', 'better'] -- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLMultipleElementsNotAllowed' Default 'four' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLMultipleElementsNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLSingleElementNotAllowed.Default` L7 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLSingleElementNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLWhitespaceTrimsToInvalid.Default` L28 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLWhitespaceTrimsToInvalid' Default 'bad' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L47 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValuesWithSpaces' Default 'four' is not in AllowedValues ['one', 'two', 'three, four'] -- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValuesWithSpaces' Default 'three' is not in AllowedValues ['one', 'two', 'three, four'] -- **F2012** → `Parameters.myAllowedValue.Default` L18 in `bad_parameters_default_yaml` - > Parameter 'myAllowedValue' Default 'us-east-1a' is not in AllowedValues ['us-east-1b', 'us-east-1c', 'us-east-1d'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] - -### F3003 - 9 findings - Required Resource properties are missing - -- **F3003** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties` L69 in `bad_cross_resource_task10_yaml` - > 'TransitEncryptionEnabled' is a required property (from extension) -- **F3003** `DDBTable` (AWS::DynamoDB::Table) → `Properties` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'AllocatedStorage' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'Iops' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'StorageType' is a required property (from extension) -- **F3003** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `Function3` (AWS::Lambda::Function) → `Properties` L25 in `bad_resources_lambda_required_properties_yaml` - > 'Runtime' is a required property (from extension) -- **F3003** `DataTable` (AWS::DynamoDB::Table) → `Properties` L72 in `cdk_DemoStack.template_json` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties` L37 in `gh-issues_issue-235_yaml` - > 'StorageEncrypted' is a required property (from extension) - ### W2502 - 7 findings - **W2502** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L277 in `quickstart_nist_high_main_yaml` @@ -21564,9 +18178,9 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2502** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L445 in `quickstart_nist_high_main_yaml` > Resource 'ManagementVpcTemplate' has DependsOn 'ProductionVpcTemplate' which is conditional (condition 'EulaAccepted'), but 'ManagementVpcTemplate' does not have a matching condition - **W2502** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L333 in `quickstart_nist_vpc_management_yaml` - > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a + > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a - **W2502** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L917 in `quickstart_vpc-management_json` - > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a + > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a ### W2512 - 7 findings @@ -21585,19 +18199,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2512** `rSysAdminPolicy` (AWS::IAM::ManagedPolicy) L275 in `quickstart_nist_iam_yaml` > IAM policy uses NotAction which grants all actions except those listed - consider using Action instead -### E1028 - 5 findings - -- **E1028** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.Fn::If.2.Fn::If.0` L65 in `bad_conditions_yaml` - > Fn::If condition 'isDev' does not exist in Conditions section -- **E1028** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument.0.Fn::If.0` L40 in `bad_resources_iam_iam_policy_yaml` - > Fn::If condition 'cCondition' does not exist in Conditions section -- **E1028** → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression -- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.0` L236 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression -- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.2.Fn::If.0` L241 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression - ### I9002 - 5 findings - **I9002** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.TTL` L113 in `bad_route53_yaml` @@ -21611,17 +18212,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **I9002** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.TTL` L38 in `good_route53_conditional_scenarios_yaml` > 'TTL' is ignored in this configuration (from extension) -### F3002 - 4 findings - Resource properties are invalid - -- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadKey` L60 in `bad_conditions_yaml` - > Additional properties are not allowed ('BadKey' was unexpected) -- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadValue` L60 in `bad_conditions_yaml` - > Additional properties are not allowed ('BadValue' was unexpected) -- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_directives_yaml` - > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) -- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_mandatory_checks_yaml` - > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) - ### E9002 - 3 findings - **E9002** `SG` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L7 in `bad_sg_bad_port_range_yaml` @@ -21629,16 +18219,7 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **E9002** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L96 in `cdk_DemoStack.template_json` > FromPort 443 is greater than ToPort 80 - **E9002** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L25 in `gh-issues_issue-226_yaml` - > FromPort 443 is greater than ToPort 80 - -### W2509 - 3 findings - -- **W2509** → `Parameters.MyNewPassword` L10 in `bad_properties_password_yaml` - > Parameter 'MyNewPassword' appears to be a password but does not have NoEcho set to true -- **W2509** → `Parameters.MyPassword` L6 in `bad_properties_password_yaml` - > Parameter 'MyPassword' appears to be a password but does not have NoEcho set to true -- **W2509** → `Parameters.DBPassword` L6 in `integration_resources-cloudformation-init_yaml` - > Parameter 'DBPassword' appears to be a password but does not have NoEcho set to true + > FromPort 443 is greater than ToPort 80 ### E9106 - 2 findings @@ -21654,13 +18235,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0016** → `Parameters.Port.AllowedValues` L6 in `bad_param_number_default_yaml` > Parameter 'Port' AllowedValues entry 'def' is not a valid number -### F1012 - 2 findings - -- **F1012** `Bucket` (AWS::S3::Bucket) L3 in `bad_findinmap_bad_yaml` - > Fn::FindInMap references non-existent mapping 'NonExistentMap' -- **F1012** `myInstance` (AWS::EC2::Instance) L6 in `bad_functions_base64_yaml` - > Fn::FindInMap references non-existent mapping 'amimap' - ### F8611 - 2 findings - **F8611** → `Rules.ValidateRegionAndEnvironment` L198 in `lsp_comprehensive_json` @@ -21696,16 +18270,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9053** L42 in `bad_conditions_yaml` > Condition 'UnusedCondition' is equivalent to condition 'CreateProdResources' - consider consolidating -### E2504 - 1 findings - -- **E2504** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` - > FIFO queue name 'my-queue' must end with '.fifo' - -### E3001 - 1 findings - Basic CloudFormation Resource Check - -- **E3001** `mySnsTopic` (AWS::SNS::Topic) L15 in `bad_duplicate_yaml` - > Resource 'mySnsTopic' has invalid property 'Parameters'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, CreationPolicy, - ### F0003 - 1 findings - **F0003** L1 in `bad_limit_numbers_yaml` @@ -21736,26 +18300,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0015** → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` > Parameter 'Port' Default 'not-a-number' is not a valid number -### F0017 - 1 findings - -- **F0017** → `Mappings.BadMap.Key1` L4 in `bad_invalid_mapping_structure_yaml` - > Mapping 'BadMap' second level key 'Key1' must be a map - -### F0050 - 1 findings - -- **F0050** → `Mappings.Mapping201.Key` L2412 in `bad_limit_numbers_yaml` - > Mapping 'Mapping201'.'Key' has 202 attributes, maximum is 200 - -### W1019 - 1 findings - -- **W1019** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` - > Parameter 'UnusedKey' not used in Fn::Sub template string - -### W3030 - 1 findings - -- **W3030** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.VersioningConfiguration.Status` L30 in `bad_core_directives_yaml` - > 'Enabled1' is not one of ['Enabled', 'Suspended'] - ### W9006 - 1 findings - **W9006** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` @@ -21771,869 +18315,979 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9054** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.Certificate` L8 in `bad_schema_write_only_yaml` > Write-only property 'Certificate' of 'CertAuth' is referenced in output 'WriteOnlyOutput' -## Per-Template Breakdown - 177 templates with mismatches - -### `bad_limit_size_yaml` - 1796 mismatches (299 TP, 897 FP, 899 EE, 899 FN) +## Multiplicity Differences - 38 unscored findings -- FN: `W1020` ×897, `E1002`, `E1003` -- FP: `W1020` ×897 -- EE: `I9001` ×897, `F0011`, `I9003` - -### `public_watchmaker_json` - 48 mismatches (8 TP, 24 FP, 9 EE, 24 FN) +Both tools emitted an equivalent diagnostic identity, but one emitted +additional occurrences. These are diagnostic-granularity differences, +not behavioral false positives or false negatives. -- FN: `I1022` ×24 -- FP: `I1022` ×24 -- EE: `I9001` ×7, `I9003`, `I9040` - -### `quickstart_nist_application_yaml` - 23 mismatches (34 TP, 10 FP, 113 EE, 13 FN) +- **E1001** extra on reference side +- **E1001** → `AWSTemplateFormatVersion` L1 in `bad_templates_base_null_yaml` + > None is not one of ['2010-09-09'] +- **E1005** extra on engine side +- **E1005** → `Transform` L3 in `bad_templates_base_yaml` + > Transform object has unknown property 'key' - expected one of 'Name', 'Parameters' +- **E1028** extra on engine side +- **E1028** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.Fn::If.2.Fn::If.0` L65 in `bad_conditions_yaml` + > Fn::If condition 'isDev' does not exist in Conditions section +- **E2001** extra on reference side +- **E2001** → `Parameters.myInvalidParameter.NotType` L27 in `bad_parameters_configuration_yaml` + > Additional properties are not allowed ('NotType' was unexpected) +- **E3001** extra on reference side +- **E3001** `NonObjectBody` → `Resources.NonObjectBody` L8 in `bad_core_E3001_resource_shape_yaml` + > Exception "'str_node' object has no attribute 'get'" raised while validating 'cfnLint' +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not of type 'string' +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not one of ['*'] +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not valid under any of the given schemas +- **E3510** extra on engine side +- **E3510** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument` L38 in `bad_resources_iam_iam_policy_yaml` + > [{"Statement":{}}] is not of type 'object' +- **E5001** extra on reference side +- **E5001** `MyModule` → `CreationPolicy` L6 in `bad_modules_bad_has_create_policy_yaml` + > CreationPolicy is not permitted within Modules +- **E5001** extra on reference side +- **E5001** `MyModule` → `UpdatePolicy` L5 in `bad_modules_bad_has_update_policy_yaml` + > UpdatePolicy is not permitted within Modules +- **E8003** extra on reference side +- **E8003** → `Conditions.TestEqualNull.Fn::Equals` L28 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **E8003** extra on reference side +- **E8003** → `Conditions.NullEquals.Fn::Equals` L23 in `bad_conditions_equals_yaml` + > None is not of type 'array' +- **E8004** extra on reference side +- **E8004** → `Conditions.TestAndNull.Fn::And` L22 in `bad_conditions_and_yaml` + > None is not of type 'array' +- **E8004** extra on reference side +- **E8004** → `Conditions.TestAndNull.Fn::And` L18 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **E8005** extra on reference side +- **E8005** → `Conditions.TestNotNull.Fn::Not` L30 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E8001) → `Conditions.NullCondition` L51 in `bad_conditions_yaml` + > None is not of type 'boolean' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E8001) → `Conditions` L6 in `bad_core_conditions_list_yaml` + > [{'isProduction': {'Fn::Equals': [{'Ref': 'myEnvironment'}, 'prod']}}] is not of type 'object' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.AlarmName.Fn::If.0` L172-175 in `lsp_condition-usage_yaml` + > {'Fn::And': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.Threshold.Fn::If.0` L184-187 in `lsp_condition-usage_yaml` + > {'Fn::Or': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.TreatMissingData.Fn::If.0` L192-194 in `lsp_condition-usage_yaml` + > {'Fn::Not': [{'Condition': 'IsProduction'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', 'NotProduction', 'ComplexCondition'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `ListPolicies` → `UpdateReplacePolicy` L19 in `bad_lifecycle_policy_shapes_yaml` + > ['Retain'] is not one of ['Delete', 'Retain'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `ObjectPolicies` → `UpdateReplacePolicy` L25 in `bad_lifecycle_policy_shapes_yaml` + > {'Value': 'Retain'} is not one of ['Delete', 'Retain'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `InvalidMapping` → `UpdateReplacePolicy` L43 in `bad_resources_updatereplacepolicy_yaml` + > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'Snapshot'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `PolicyList` → `UpdateReplacePolicy` L16 in `bad_resources_updatereplacepolicy_yaml` + > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'Snapshot'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `UnsupportedIntrinsic` → `UpdateReplacePolicy` L32 in `bad_resources_updatereplacepolicy_yaml` + > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLListStringType' Default 'worse' is not in AllowedValues ['good', 'better'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLMultipleElementsNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` + > Parameter 'CDLAllowedValuesWithSpaces' Default 'three' is not in AllowedValues ['one', 'two', 'three, four'] +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'PolicyName' is a required property +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'Roles' is a required property +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'Users' is a required property +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `DynamicObjectPolicy` → `DeletionPolicy` L44 in `bad_lifecycle_conditional_invalid_policies_yaml` + > {'Value': {'Ref': 'Policy'}} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `ListPolicies` → `DeletionPolicy` L18 in `bad_lifecycle_policy_shapes_yaml` + > ['Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `ObjectPolicies` → `DeletionPolicy` L23 in `bad_lifecycle_policy_shapes_yaml` + > {'Value': 'Retain'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `InvalidMapping` → `DeletionPolicy` L43 in `bad_resources_deletionpolicy_yaml` + > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `PolicyList` → `DeletionPolicy` L16 in `bad_resources_deletionpolicy_yaml` + > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `UnsupportedIntrinsic` → `DeletionPolicy` L32 in `bad_resources_deletionpolicy_yaml` + > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- FN: `I1022` ×9, `W1030` ×3, `W2010` -- FP: `I1022` ×9, `W2010` -- EE: `W9003` ×53, `I9001` ×50, `I9040` ×10 +## Per-Template Breakdown - 170 templates with differences -### `good_both_forms_yaml` - 11 mismatches (1 TP, 0 FP, 2 EE, 11 FN) +### `good_both_forms_yaml` - 22 behavioral mismatches (1 TP, 11 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 11 FN) - FN: `F3003` ×11 +- FP: `I3042` ×11 - EE: `I9001` ×2 -### `bad_generic_yaml` - 10 mismatches (30 TP, 0 FP, 42 EE, 10 FN) +### `bad_conditions_condition_functions_json` - 16 behavioral mismatches (23 TP, 8 FP, 0 ID, 1 EE, 3 multiplicity, 0 RS, 0 RI, 8 FN) -- FN: `W1036` ×6, `W1028` ×2, `E1011`, `E3673` -- EE: `I9001` ×21, `I9040` ×12, `W9003` ×5, `W9010` ×3, `I9003` +- FN: `E8004` ×4, `E8003` ×2, `F0013` ×2 +- FP: `E8004` ×4, `E8003` ×2, `F0013` ×2 +- EE: `I9040` + +### `good_lifecycle_intrinsic_scenarios_yaml` - 16 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 16 FN) + +- FN: `F0018` ×5, `F3016` ×5, `W1028` ×3, `E3055` ×2, `E3001` -### `bad_transform_serverless_template_yaml` - 10 mismatches (0 TP, 3 FP, 0 EE, 7 FN) +### `bad_transform_serverless_template_yaml` - 12 behavioral mismatches (0 TP, 3 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 9 FN) -- FN: `F3003` ×2, `E2533`, `E3039`, `F3002`, `F3012`, `F3018` +- FN: `F3003` ×2, `I3011` ×2, `E2533`, `E3039`, `F3002`, `F3012`, `F3018` - FP: `E0001` ×3 -### `quickstart_openshift_yaml` - 10 mismatches (36 TP, 5 FP, 73 EE, 5 FN) +### `bad_lifecycle_policy_shapes_yaml` - 7 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 4 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `I1022` ×5 -- FP: `I1022` ×5 -- EE: `I9001` ×54, `I9040` ×10, `W2508` ×7, `I9003`, `W9010` +- FN: `E1011`, `E3055`, `F1018`, `F1020` +- FP: `E3055`, `F0018`, `F3016` +- EE: `F1101` ×6, `I9040` ×4 -### `good_lifecycle_intrinsic_scenarios_yaml` - 9 mismatches (0 TP, 0 FP, 0 EE, 9 FN) +### `bad_conditions_equals_yaml` - 9 behavioral mismatches (12 TP, 4 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `F0018` ×3, `F3016` ×3, `W1028` ×2, `E3001` +- FN: `E8003` ×4, `F1020` +- FP: `E8003` ×4 +- EE: `F0001` -### `bad_resources_cloudformation_stacks_yaml` - 8 mismatches (6 TP, 0 FP, 2 EE, 8 FN) +### `bad_generic_yaml` - 10 behavioral mismatches (30 TP, 0 FP, 5 ID, 37 EE, 0 multiplicity, 0 RS, 0 RI, 10 FN) -- FN: `E3043` ×8 -- EE: `I9040` ×2 +- FN: `W1036` ×6, `W1028` ×2, `E1011`, `E3673` +- ID: `W9003` ×5 +- EE: `I9001` ×21, `I9040` ×12, `W9010` ×3, `I9003` -### `bad_resources_iam_identity_policy_e3510_yaml` - 8 mismatches (11 TP, 1 FP, 10 EE, 7 FN) +### `bad_conditions_and_yaml` - 8 behavioral mismatches (8 TP, 4 FP, 0 ID, 2 EE, 1 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3003` ×6, `W1030` -- FP: `E3510` -- EE: `I9001` ×6, `I9040` ×2, `W2512`, `W9002` +- FN: `E8004` ×4 +- FP: `E8004` ×4 +- EE: `E9106`, `F0001` -### `bad_resources_properties_atleastone_yaml` - 8 mismatches (3 TP, 0 FP, 0 EE, 8 FN) +### `bad_core_resource_attributes_yaml` - 5 behavioral mismatches (14 TP, 2 FP, 0 ID, 5 EE, 3 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `F3003` ×6, `E3510` ×2 +- FN: `E3066` ×2, `E3055` +- FP: `E3001`, `E3055` +- EE: `I9040` ×4, `W9013` -### `gh-issues_issue-235_yaml` - 8 mismatches (106 TP, 0 FP, 124 EE, 8 FN) +### `bad_resources_properties_atleastone_yaml` - 8 behavioral mismatches (3 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 8 FN) -- FN: `I3013` ×3, `E3707` ×2, `E0002`, `E3720`, `F3012` -- EE: `I9001` ×65, `I9040` ×38, `W9008` ×13, `W9003` ×5, `F3003`, `W9002`, `W9013` +- FN: `F3003` ×6, `E3510` ×2 -### `lsp_parameter_usage_yaml` - 8 mismatches (4 TP, 0 FP, 14 EE, 8 FN) +### `lsp_parameter_usage_yaml` - 8 behavioral mismatches (4 TP, 0 FP, 0 ID, 14 EE, 0 multiplicity, 0 RS, 0 RI, 8 FN) - FN: `W1031` ×6, `W1032` ×2 - EE: `I9001` ×7, `I9040` ×7 -### `bad_lifecycle_policy_shapes_yaml` - 7 mismatches (6 TP, 3 FP, 10 EE, 4 FN) +### `bad_lifecycle_conditional_invalid_policies_yaml` - 6 behavioral mismatches (9 TP, 4 FP, 0 ID, 10 EE, 1 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `F0018` ×2, `F3016` ×2 -- FP: `E3055`, `F0018`, `F3016` -- EE: `F1101` ×6, `I9040` ×4 +- FN: `W1030` ×2 +- FP: `F0018` ×2, `F3016` ×2 +- EE: `I9040` ×6, `F1101` ×4 + +### `bad_resources_iam_identity_policy_e3510_yaml` - 7 behavioral mismatches (11 TP, 0 FP, 1 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) + +- FN: `F3003` ×6, `W1030` +- ID: `E3510` +- EE: `I9001` ×6, `I9040` ×2, `W2512`, `W9002` -### `bad_schema_composition_yaml` - 7 mismatches (4 TP, 0 FP, 3 EE, 7 FN) +### `bad_schema_composition_yaml` - 7 behavioral mismatches (4 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) - FN: `F3003` ×7 - EE: `I9040` ×2, `I9001` -### `good_transform_applications_location_yaml` - 7 mismatches (0 TP, 4 FP, 2 EE, 3 FN) +### `bad_templates_transform_invalid_entries_yaml` - 7 behavioral mismatches (0 TP, 3 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3003`, `F3012`, `F3017` -- FP: `I3011` ×4 -- EE: `I9040` ×2 +- FN: `E1005` ×4 +- FP: `E1005` ×3 -### `lsp_condition-usage_yaml` - 7 mismatches (12 TP, 0 FP, 23 EE, 7 FN) +### `gh-issues_issue-235_yaml` - 7 behavioral mismatches (106 TP, 0 FP, 6 ID, 118 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) -- FN: `F6101` ×4, `F0013` ×3 -- EE: `I9001` ×11, `I9040` ×6, `E1028` ×3, `I9003`, `W9008`, `W9010` +- FN: `I3013` ×3, `E3707` ×2, `E3720`, `F3012` +- ID: `W9003` ×5, `F3003` +- EE: `I9001` ×65, `I9040` ×38, `W9008` ×13, `W9002`, `W9013` -### `bad_core_conditions_yaml` - 6 mismatches (17 TP, 0 FP, 17 EE, 6 FN) +### `lsp_condition-usage_yaml` - 4 behavioral mismatches (12 TP, 0 FP, 3 ID, 20 EE, 3 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3014` ×2, `W1001` ×2, `F3003`, `W3698` -- EE: `I9001` ×10, `I9040` ×7 +- FN: `F6101` ×4 +- ID: `E1028` ×3 +- EE: `I9001` ×11, `I9040` ×6, `I9003`, `W9008`, `W9010` -### `bad_core_resource_attributes_yaml` - 6 mismatches (15 TP, 1 FP, 5 EE, 5 FN) +### `quickstart_nist_application_yaml` - 7 behavioral mismatches (42 TP, 2 FP, 53 ID, 60 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `E3001` ×2, `E3066` ×2, `E3055` -- FP: `E3055` -- EE: `I9040` ×4, `W9013` +- FN: `W1030` ×3, `W2506` ×2 +- FP: `W2506` ×2 +- ID: `W9003` ×53 +- EE: `I9001` ×50, `I9040` ×10 + +### `bad_core_conditions_yaml` - 6 behavioral mismatches (17 TP, 0 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) -### `bad_parameters_configuration_yaml` - 6 mismatches (33 TP, 0 FP, 1 EE, 6 FN) +- FN: `F3014` ×2, `W1001` ×2, `F3003`, `W3698` +- EE: `I9001` ×10, `I9040` ×7 -- FN: `E2001` ×4, `W2001`, `W2002` +### `bad_parameters_configuration_yaml` - 5 behavioral mismatches (33 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 5 FN) + +- FN: `E2001` ×3, `W2001`, `W2002` - EE: `I9040` -### `bad_route53_conditional_record_arrays_yaml` - 6 mismatches (4 TP, 6 FP, 15 EE, 0 FN) +### `bad_route53_conditional_record_arrays_yaml` - 6 behavioral mismatches (4 TP, 6 FP, 0 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3023` ×6 - EE: `I9001` ×15 -### `good_ecs_fargate_units_and_sizes_yaml` - 6 mismatches (0 TP, 0 FP, 43 EE, 6 FN) - -- FN: `E3047` ×3, `E3048` ×3 -- EE: `I9001` ×43 - -### `good_functions_sub_needed_custom_excludes_yaml` - 6 mismatches (3 TP, 0 FP, 2 EE, 6 FN) +### `good_functions_sub_needed_custom_excludes_yaml` - 6 behavioral mismatches (3 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) - FN: `E3530` ×6 - EE: `I9001`, `I9040` -### `lsp_parameter_usage_json` - 6 mismatches (4 TP, 0 FP, 10 EE, 6 FN) +### `lsp_parameter_usage_json` - 6 behavioral mismatches (4 TP, 0 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) - FN: `W1031` ×4, `W1032` ×2 - EE: `I9001` ×5, `I9040` ×5 -### `bad_lifecycle_conditional_invalid_policies_yaml` - 5 mismatches (9 TP, 4 FP, 10 EE, 1 FN) +### `quickstart_nat-instance_json` - 6 behavioral mismatches (4 TP, 1 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `F3016` -- FP: `F0018` ×2, `F3016` ×2 -- EE: `I9040` ×6, `F1101` ×4 +- FN: `W1030` ×4, `W2506` +- FP: `W2506` +- EE: `I9001` ×10, `I9003`, `I9040` -### `bad_resources_elasticache_cache_cluster_failover_yaml` - 5 mismatches (12 TP, 0 FP, 18 EE, 5 FN) +### `bad_resources_elasticache_cache_cluster_failover_yaml` - 5 behavioral mismatches (12 TP, 0 FP, 0 ID, 18 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) - FN: `E3026` ×5 - EE: `I9001` ×11, `I9040` ×7 -### `gh-issues_issue-61_json` - 5 mismatches (3 TP, 0 FP, 1 EE, 5 FN) +### `bad_resources_iam_iam_policy_yaml` - 1 behavioral mismatches (20 TP, 1 FP, 0 ID, 3 EE, 4 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F3003` ×5 -- EE: `I9040` - -### `lsp_constants_json` - 5 mismatches (3 TP, 2 FP, 3 EE, 3 FN) - -- FN: `E3024`, `F1018`, `F1020` -- FP: `F1018`, `F1020` -- EE: `I9001` ×2, `I9040` +- FP: `E1028` +- EE: `I9001`, `I9040`, `W2512` -### `lsp_constants_yaml` - 5 mismatches (3 TP, 2 FP, 3 EE, 3 FN) +### `gh-issues_issue-61_json` - 5 behavioral mismatches (3 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `E3024`, `F1018`, `F1020` -- FP: `F1018`, `F1020` -- EE: `I9001` ×2, `I9040` +- FN: `F3003` ×5 +- EE: `I9040` -### `bad_E3019_identity_reference_forms_yaml` - 4 mismatches (5 TP, 4 FP, 12 EE, 0 FN) +### `bad_E3019_identity_reference_forms_yaml` - 4 behavioral mismatches (5 TP, 4 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3019` ×4 - EE: `I9001` ×6, `I9040` ×6 -### `bad_E3022_equivalent_subnet_forms_yaml` - 4 mismatches (1 TP, 4 FP, 8 EE, 0 FN) +### `bad_E3022_equivalent_subnet_forms_yaml` - 4 behavioral mismatches (1 TP, 4 FP, 0 ID, 8 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3022` ×4 - EE: `I9001` ×8 -### `bad_core_sections_not_objects_yaml` - 4 mismatches (3 TP, 0 FP, 0 EE, 4 FN) +### `bad_conditions_yaml` - 2 behavioral mismatches (18 TP, 0 FP, 2 ID, 9 EE, 2 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `E0002` ×4 +- FN: `E3024` ×2 +- ID: `F3002` ×2 +- EE: `I9001` ×4, `I9040` ×2, `W1103`, `W9010`, `W9053` -### `bad_functions_join_yaml` - 4 mismatches (2 TP, 0 FP, 6 EE, 4 FN) +### `bad_functions_import_value_yaml` - 4 behavioral mismatches (1 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `E1021` ×4 -- EE: `I9001` ×4, `I9040` ×2 +- FN: `E1016` ×2, `E8003` +- FP: `E8003` +- EE: `I9001` ×2, `I9040` -### `bad_noecho_yaml` - 4 mismatches (0 TP, 2 FP, 2 EE, 2 FN) +### `bad_functions_join_yaml` - 4 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `W2010` ×2 -- FP: `W2010` ×2 -- EE: `I9040` ×2 +- FN: `E1021` ×4 +- EE: `I9001` ×4, `I9040` ×2 -### `bad_parameters_F2012_cdl_default_split_yaml` - 4 mismatches (5 TP, 0 FP, 8 EE, 4 FN) +### `bad_parameters_F2012_cdl_default_split_yaml` - 2 behavioral mismatches (9 TP, 2 FP, 0 ID, 0 EE, 2 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F2015` ×4 -- EE: `F2012` ×8 +- FP: `F2012` ×2 -### `bad_properties_sg_ingress_yaml` - 4 mismatches (16 TP, 0 FP, 28 EE, 4 FN) +### `bad_properties_sg_ingress_yaml` - 4 behavioral mismatches (16 TP, 0 FP, 7 ID, 21 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `F3014` ×4 -- EE: `I9001` ×18, `W9003` ×7, `I9040` ×3 +- ID: `W9003` ×7 +- EE: `I9001` ×18, `I9040` ×3 -### `bad_resources_iam_iam_policy_yaml` - 4 mismatches (20 TP, 1 FP, 4 EE, 3 FN) +### `bad_resources_deletionpolicy_yaml` - 1 behavioral mismatches (17 TP, 0 FP, 0 ID, 13 EE, 3 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `F3003` ×3 -- FP: `E3510` -- EE: `E1028`, `I9001`, `I9040`, `W2512` +- FN: `W2001` +- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` -### `bad_resources_iam_resource_policy_yaml` - 4 mismatches (0 TP, 0 FP, 2 EE, 4 FN) +### `bad_resources_iam_resource_policy_yaml` - 4 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `E3513` ×4 - EE: `I9040` ×2 -### `bad_sam_connector_missing_source_yaml` - 4 mismatches (0 TP, 1 FP, 0 EE, 3 FN) +### `bad_resources_updatereplacepolicy_yaml` - 1 behavioral mismatches (19 TP, 0 FP, 0 ID, 13 EE, 3 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `W2001` +- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` + +### `bad_sam_connector_missing_source_yaml` - 4 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×3 - FP: `E0001` -### `bad_transform_auto_publish_alias_yaml` - 4 mismatches (0 TP, 2 FP, 0 EE, 2 FN) +### `bad_transform_auto_publish_alias_yaml` - 4 behavioral mismatches (0 TP, 2 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E2531` ×2 - FP: `E0001` ×2 -### `gh-issues_issue-38_json` - 4 mismatches (0 TP, 0 FP, 2 EE, 4 FN) +### `gh-issues_issue-38_json` - 4 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `I3010` ×4 - EE: `I9001`, `I9040` -### `good_core_conditions_yaml` - 4 mismatches (6 TP, 0 FP, 22 EE, 4 FN) +### `good_core_conditions_yaml` - 4 behavioral mismatches (6 TP, 0 FP, 0 ID, 22 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `F3014` ×2, `W1001`, `W3698` - EE: `I9001` ×10, `I9040` ×7, `W9010` ×4, `I9003` -### `quickstart_nat-instance_json` - 4 mismatches (5 TP, 0 FP, 12 EE, 4 FN) - -- FN: `W1030` ×4 -- EE: `I9001` ×10, `I9003`, `I9040` - -### `quickstart_nist_vpc_management_yaml` - 4 mismatches (34 TP, 2 FP, 68 EE, 2 FN) - -- FN: `I1022` ×2 -- FP: `I1022` ×2 -- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` - -### `quickstart_vpc-management_json` - 4 mismatches (20 TP, 2 FP, 83 EE, 2 FN) - -- FN: `I1022` ×2 -- FP: `I1022` ×2 -- EE: `I9001` ×59, `W9003` ×15, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` - -### `bad_conditions_condition_functions_json` - 3 mismatches (31 TP, 0 FP, 1 EE, 3 FN) - -- FN: `E8003`, `E8004`, `E8005` -- EE: `I9040` - -### `bad_conditions_yaml` - 3 mismatches (18 TP, 0 FP, 12 EE, 3 FN) - -- FN: `E3024` ×2, `F0013` -- EE: `I9001` ×4, `F3002` ×2, `I9040` ×2, `E1028`, `W1103`, `W9010`, `W9053` +### `lsp_comprehensive_json` - 4 behavioral mismatches (9 TP, 0 FP, 1 ID, 32 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -### `bad_core_E3001_resource_shape_yaml` - 3 mismatches (9 TP, 0 FP, 8 EE, 3 FN) - -- FN: `E0002`, `E3001`, `E3005` -- EE: `I9001` ×4, `I9040` ×4 - -### `bad_limit_numbers_yaml` - 3 mismatches (401 TP, 0 FP, 506 EE, 3 FN) - -- FN: `E3010`, `E6010`, `E7010` -- EE: `I9040` ×501, `F0003`, `F0004`, `F0007`, `F0008`, `F0050` +- FN: `W1001` ×2, `E1701`, `F3012` +- ID: `W9003` +- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W2508`, `W9008` -### `bad_parameters_default_yaml` - 3 mismatches (18 TP, 0 FP, 5 EE, 3 FN) +### `lsp_comprehensive_yaml` - 4 behavioral mismatches (9 TP, 0 FP, 2 ID, 33 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F2015` ×3 -- EE: `F2012` ×4, `F0001` +- FN: `W1001` ×2, `E1701`, `F3012` +- ID: `W9003` ×2 +- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W1103`, `W2508`, `W9008` -### `bad_rds_dbclusterinstanceclass_invalid_yaml` - 3 mismatches (5 TP, 0 FP, 7 EE, 3 FN) +### `bad_rds_dbclusterinstanceclass_invalid_yaml` - 3 behavioral mismatches (5 TP, 0 FP, 3 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `E3692` ×3 -- EE: `F3003` ×3, `I9001` ×2, `I9003`, `I9040` +- ID: `F3003` ×3 +- EE: `I9001` ×2, `I9003`, `I9040` -### `bad_resources_circular_dependency_yaml` - 3 mismatches (27 TP, 0 FP, 35 EE, 3 FN) +### `bad_resources_circular_dependency_yaml` - 3 behavioral mismatches (27 TP, 0 FP, 5 ID, 30 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `W3037` ×2, `F1018` -- EE: `I9001` ×20, `I9040` ×9, `W9003` ×5, `I9003` - -### `bad_resources_deletionpolicy_yaml` - 3 mismatches (17 TP, 0 FP, 13 EE, 3 FN) - -- FN: `F3016` ×3 -- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` +- ID: `W9003` ×5 +- EE: `I9001` ×20, `I9040` ×9, `I9003` -### `bad_resources_dynamodb_attributes_transform_e3639_yaml` - 3 mismatches (6 TP, 3 FP, 10 EE, 0 FN) +### `bad_resources_dynamodb_attributes_transform_e3639_yaml` - 3 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 - EE: `F1101` ×4, `I9001` ×3, `I9040` ×3 -### `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - 3 mismatches (18 TP, 3 FP, 18 EE, 0 FN) +### `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - 3 behavioral mismatches (18 TP, 3 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 -- EE: `I9001` ×10, `I9040` ×7, `F3003` - -### `bad_resources_updatereplacepolicy_yaml` - 3 mismatches (19 TP, 0 FP, 13 EE, 3 FN) - -- FN: `F0018` ×3 -- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` +- EE: `I9001` ×10, `I9040` ×7 -### `bad_route53_yaml` - 3 mismatches (31 TP, 0 FP, 20 EE, 3 FN) +### `bad_route53_yaml` - 3 behavioral mismatches (31 TP, 0 FP, 0 ID, 20 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `E3023` ×3 - EE: `I9001` ×19, `I9002` -### `bad_sam_connector_missing_destination_yaml` - 3 mismatches (0 TP, 1 FP, 0 EE, 2 FN) +### `bad_sam_connector_missing_destination_yaml` - 3 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3003` ×2 - FP: `E0001` -### `bad_sam_globals_unknown_property_yaml` - 3 mismatches (0 TP, 1 FP, 0 EE, 2 FN) +### `bad_sam_globals_unknown_property_yaml` - 3 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3724`, `F3002` - FP: `E0001` -### `bad_security_issues_yaml` - 3 mismatches (1 TP, 0 FP, 3 EE, 3 FN) +### `bad_security_issues_yaml` - 3 behavioral mismatches (1 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×3 - EE: `I9001`, `I9040`, `W2508` -### `good_resources_dynamodb_attributes_transform_yaml` - 3 mismatches (6 TP, 3 FP, 10 EE, 0 FN) +### `good_resources_dynamodb_attributes_transform_yaml` - 3 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 - EE: `F1101` ×4, `I9001` ×3, `I9040` ×3 -### `good_stackset_conditional_template_source_yaml` - 3 mismatches (0 TP, 0 FP, 2 EE, 3 FN) +### `good_stackset_conditional_template_source_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×2, `F3018` - EE: `I9001` ×2 -### `good_unknown_resource_types_ignored_yaml` - 3 mismatches (0 TP, 0 FP, 0 EE, 3 FN) +### `good_transform_applications_location_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 4 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `F3006` ×3 +- FN: `F3003`, `F3012`, `F3017` +- ID: `I3011` ×4 +- EE: `I9040` ×2 -### `lsp_comprehensive_json` - 3 mismatches (10 TP, 0 FP, 32 EE, 3 FN) +### `good_unknown_resource_types_ignored_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `W1001` ×2, `E1701` -- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W2508`, `W9008` +- FN: `F3006` ×3 -### `lsp_comprehensive_yaml` - 3 mismatches (10 TP, 0 FP, 34 EE, 3 FN) +### `bad_E8007_condition_undefined_in_expr_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `W1001` ×2, `E1701` -- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W1103`, `W2508`, `W9003`, `W9008` +- FN: `E8004` +- FP: `E8007` +- EE: `I9040` -### `bad_F3018_conditional_required_novalue_yaml` - 2 mismatches (1 TP, 0 FP, 3 EE, 2 FN) +### `bad_F3018_conditional_required_novalue_yaml` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3003` ×2 - EE: `I9001` ×2, `I9040` -### `bad_W9006_every_allowed_value_too_long_json` - 2 mismatches (0 TP, 0 FP, 3 EE, 2 FN) +### `bad_W9006_every_allowed_value_too_long_json` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1030` ×2 - EE: `I9001`, `I9040`, `W9006` -### `bad_aurora_with_allocated_storage_yaml` - 2 mismatches (2 TP, 0 FP, 5 EE, 2 FN) +### `bad_aurora_with_allocated_storage_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 1 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3682`, `E3707` -- EE: `I9001` ×2, `I9003`, `I9040`, `W9003` +- ID: `W9003` +- EE: `I9001` ×2, `I9003`, `I9040` -### `bad_conditions_equals_yaml` - 2 mismatches (16 TP, 0 FP, 1 EE, 2 FN) +### `bad_core_E3001_resource_shape_yaml` - 1 behavioral mismatches (9 TP, 0 FP, 0 ID, 8 EE, 1 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E8003`, `F1020` -- EE: `F0001` +- FN: `E3005` +- EE: `I9001` ×4, `I9040` ×4 -### `bad_core_conditions_list_yaml` - 2 mismatches (1 TP, 0 FP, 1 EE, 2 FN) +### `bad_core_conditions_missing_yaml` - 2 behavioral mismatches (1 TP, 1 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E0002`, `F0013` +- FN: `E8004` +- FP: `E8007` - EE: `F0001` -### `bad_findinmap_bad_yaml` - 2 mismatches (0 TP, 0 FP, 2 EE, 2 FN) - -- FN: `E1011`, `E3024` -- EE: `F1012`, `I9001` - -### `bad_functions_foreach_no_transform_yaml` - 2 mismatches (4 TP, 0 FP, 0 EE, 2 FN) +### `bad_functions_relationship_conditions_yaml` - 2 behavioral mismatches (7 TP, 1 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E0002`, `E6001` +- FN: `W1001` +- FP: `W1001` +- EE: `I9040` ×4, `I9001` ×2 -### `bad_functions_import_value_yaml` - 2 mismatches (2 TP, 0 FP, 3 EE, 2 FN) +### `bad_limit_numbers_yaml` - 2 behavioral mismatches (402 TP, 0 FP, 0 ID, 505 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `E1016` ×2 -- EE: `I9001` ×2, `I9040` +- FN: `E3010`, `E6010` +- EE: `I9040` ×501, `F0003`, `F0004`, `F0007`, `F0008` -### `bad_functions_tojsonstring_no_transform_yaml` - 2 mismatches (2 TP, 1 FP, 1 EE, 1 FN) +### `bad_limit_size_yaml` - 2 behavioral mismatches (1196 TP, 0 FP, 0 ID, 899 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `F1031` -- FP: `F1031` -- EE: `I9040` +- FN: `E1002`, `E1003` +- EE: `I9001` ×897, `F0011`, `I9003` -### `bad_modules_bad_has_create_policy_yaml` - 2 mismatches (1 TP, 1 FP, 0 EE, 1 FN) +### `bad_modules_bad_has_create_policy_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 0 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E5001` - FP: `E3055` -### `bad_override_include_yaml` - 2 mismatches (2 TP, 0 FP, 6 EE, 2 FN) +### `bad_override_include_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3512`, `E3514` - EE: `I9001` ×3, `I9040` ×3 -### `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - 2 mismatches (11 TP, 0 FP, 67 EE, 2 FN) - -- FN: `E3048` ×2 -- EE: `I9001` ×54, `I9040` ×9, `W9003` ×4 - -### `bad_resources_properties_list_duplicates_yaml` - 2 mismatches (1 TP, 0 FP, 0 EE, 2 FN) +### `bad_resources_properties_list_duplicates_yaml` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3037` ×2 -### `bad_resources_properties_primitive_types_map_yaml` - 2 mismatches (2 TP, 0 FP, 4 EE, 2 FN) +### `bad_resources_properties_primitive_types_map_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3012` ×2 - EE: `I9040` ×2, `W9013` ×2 -### `bad_resources_rds_not_enum_master_username_yaml` - 2 mismatches (4 TP, 1 FP, 3 EE, 1 FN) +### `bad_resources_rds_not_enum_master_username_yaml` - 2 behavioral mismatches (4 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3002` - FP: `F3017` - EE: `I9001` ×2, `I9040` -### `bad_route53_conditional_scenarios_yaml` - 2 mismatches (6 TP, 2 FP, 4 EE, 0 FN) +### `bad_route53_conditional_scenarios_yaml` - 2 behavioral mismatches (6 TP, 2 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3029` ×2 - EE: `I9001` ×4 -### `bad_sam_api_missing_stagename_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_api_missing_stagename_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_function_capacityprovider_with_vpcconfig_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_capacityprovider_with_vpcconfig_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_function_image_with_handler_runtime_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_image_with_handler_runtime_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3685` - FP: `E0001` -### `bad_sam_function_packagetype_invalid_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_packagetype_invalid_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - FP: `E0001` -### `bad_sam_function_url_config_missing_authtype_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_url_config_missing_authtype_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_globals_not_dict_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_not_dict_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1001` - FP: `E0001` -### `bad_sam_globals_section_not_dict_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_section_not_dict_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3724` - FP: `E0001` -### `bad_sam_globals_unknown_section_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_unknown_section_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3724` - FP: `E0001` -### `bad_sam_graphqlapi_missing_auth_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_graphqlapi_missing_auth_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_simpletable_primarykey_missing_type_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_simpletable_primarykey_missing_type_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sub_nested_intrinsic_yaml` - 2 mismatches (0 TP, 0 FP, 3 EE, 2 FN) +### `bad_sub_nested_intrinsic_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1031` ×2 - EE: `I9040` ×2, `I9001` -### `bad_transform_no_properties_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_templates_base_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E1005` +- EE: `F0001` + +### `bad_transform_no_properties_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - 2 mismatches (1 TP, 0 FP, 43 EE, 2 FN) +### `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 43 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1034` ×2 - EE: `I9001` ×39, `I9040` ×4 -### `good_apigateway_method_authorizer_same_rest_api_yaml` - 2 mismatches (0 TP, 0 FP, 9 EE, 2 FN) +### `gh-issues_issue-34_json` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 7 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `W2506` +- FP: `W2506` +- EE: `I9001` ×4, `I9040` ×2, `I9003` + +### `good_apigateway_method_authorizer_same_rest_api_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 9 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3698`, `E3699` - EE: `I9001` ×7, `I9040` ×2 -### `good_aurora_dbinstance_yaml` - 2 mismatches (2 TP, 0 FP, 6 EE, 2 FN) +### `good_aurora_dbinstance_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3707`, `E3719` - EE: `I9001` ×3, `I9002`, `I9003`, `I9040` -### `good_functions_findinmap_yaml` - 2 mismatches (0 TP, 0 FP, 6 EE, 2 FN) +### `good_functions_findinmap_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E7001` ×2 - EE: `I9001` ×3, `I9040` ×3 -### `good_parameters_used_transform_removed_yaml` - 2 mismatches (0 TP, 0 FP, 1 EE, 2 FN) +### `good_parameters_default_yaml` - 2 behavioral mismatches (14 TP, 2 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `F2012` ×2 +- EE: `F0001` + +### `good_parameters_used_transform_removed_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3012`, `F3017` - EE: `I9040` -### `good_parameters_used_transforms_yaml` - 2 mismatches (3 TP, 0 FP, 4 EE, 2 FN) +### `good_parameters_used_transforms_yaml` - 2 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E1021`, `E3724` - EE: `I9001` ×3, `I9040` -### `good_resources_properties_templated_code_sam_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `integration_ref-no-value_yaml` - 2 behavioral mismatches (7 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `F3012` ×2 +- EE: `I9040` ×2 -### `good_sam_simpletable_no_primarykey_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `quickstart_config-rules_json` - 2 behavioral mismatches (4 TP, 1 FP, 2 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `W8003` +- FP: `W8003` +- ID: `W9003` ×2 +- EE: `I9001` ×13, `I9040` ×2 -### `good_sam_simpletable_valid_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `quickstart_nist_config_rules_yaml` - 2 behavioral mismatches (6 TP, 1 FP, 0 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `W8003` +- FP: `W8003` +- EE: `I9001` ×13, `I9040` ×2 -### `good_transform_yaml` - 2 mismatches (0 TP, 2 FP, 2 EE, 0 FN) +### `quickstart_nist_vpc_management_yaml` - 2 behavioral mismatches (35 TP, 1 FP, 0 ID, 68 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` ×2 +- FN: `W2506` +- FP: `W2506` +- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` -### `integration_ref-no-value_yaml` - 2 mismatches (7 TP, 0 FP, 2 EE, 2 FN) +### `quickstart_vpc-management_json` - 2 behavioral mismatches (21 TP, 1 FP, 15 ID, 68 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `F3012` ×2 -- EE: `I9040` ×2 +- FN: `W2506` +- FP: `W2506` +- ID: `W9003` ×15 +- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` -### `bad_F2002_ssm_parameter_type_invalid_yaml` - 1 mismatches (1 TP, 0 FP, 2 EE, 1 FN) +### `bad_F2002_ssm_parameter_type_invalid_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F1020` - EE: `I9001`, `I9040` -### `bad_F3006_invalid_aws_namespaces_yaml` - 1 mismatches (2 TP, 0 FP, 4 EE, 1 FN) +### `bad_F3006_invalid_aws_namespaces_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3006` - EE: `W9013` ×2, `I9001`, `I9040` -### `bad_F3031_log_group_name_dollar_brace_yaml` - 1 mismatches (1 TP, 1 FP, 2 EE, 0 FN) +### `bad_F3031_log_group_name_dollar_brace_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E1155` - EE: `I9001`, `I9040` -### `bad_conditions_and_yaml` - 1 mismatches (12 TP, 0 FP, 2 EE, 1 FN) +### `bad_core_conditions_list_yaml` - 0 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E8004` -- EE: `E9106`, `F0001` +- EE: `F0001` -### `bad_core_config_invalid_json_json` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_config_invalid_json_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_config_invalid_yaml_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_config_invalid_yaml_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_directives_yaml` - 1 mismatches (5 TP, 1 FP, 6 EE, 0 FN) +### `bad_core_parse_invalid_map_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `E3001` -- EE: `I9040` ×4, `F3002`, `W3030` +- FN: `F0000` +- EE: `F1101` -### `bad_core_parse_invalid_map_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_malformed_core_tag_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_malformed_core_tag_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_multiple_documents_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_multiple_documents_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_null_key_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_null_key_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_duplicate_yaml` - 1 behavioral mismatches (3 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F0000` +- FP: `E3001` +- EE: `I9040` ×2 -### `bad_empty_file_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_empty_file_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E1001` +- FN: `F0001` +- EE: `F1101` + +### `bad_findinmap_bad_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` + +### `bad_functions_base64_yaml` - 1 behavioral mismatches (3 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `F1012` +- EE: `I9001` ×2, `I9040` -### `bad_functions_findinmap_default_value_no_transform_yaml` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `bad_functions_findinmap_default_value_no_transform_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1011` - EE: `F1101`, `I9040` -### `bad_functions_select_yaml` - 1 mismatches (8 TP, 0 FP, 12 EE, 1 FN) +### `bad_functions_foreach_no_transform_yaml` - 1 behavioral mismatches (4 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E6001` + +### `bad_functions_select_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1017` - EE: `I9001` ×8, `I9040` ×4 -### `bad_hardcoded_partition_yaml` - 1 mismatches (0 TP, 1 FP, 5 EE, 0 FN) +### `bad_hardcoded_partition_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `F3017` - EE: `I9001` ×2, `I9040` ×2, `W9013` -### `bad_invalid_mapping_structure_yaml` - 1 mismatches (1 TP, 0 FP, 2 EE, 1 FN) - -- FN: `E7001` -- EE: `F0017`, `I9040` - -### `bad_json_parse_json` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_json_parse_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_mappings_used_yaml` - 1 mismatches (2 TP, 0 FP, 3 EE, 1 FN) +### `bad_mappings_used_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `W1034` - EE: `I9001` ×2, `I9040` -### `bad_modules_bad_has_update_policy_yaml` - 1 mismatches (2 TP, 0 FP, 0 EE, 1 FN) +### `bad_modules_bad_has_update_policy_yaml` - 0 behavioral mismatches (2 TP, 0 FP, 0 ID, 0 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E5001` -### `bad_modules_bad_uses_module_metadata_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_modules_bad_uses_module_metadata_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E5001` -### `bad_not_cloudformation_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `bad_parameters_default_yaml` - 0 behavioral mismatches (21 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E1001` - EE: `F0001` -### `bad_param_number_default_yaml` - 1 mismatches (1 TP, 0 FP, 4 EE, 1 FN) - -- FN: `F2015` -- EE: `F0016` ×2, `F0015`, `F2012` - -### `bad_pipeline_no_source_first_stage_yaml` - 1 mismatches (3 TP, 0 FP, 4 EE, 1 FN) +### `bad_pipeline_no_source_first_stage_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3701` - EE: `I9001`, `I9040`, `W9002`, `W9013` -### `bad_resources_backup_test_backup_plan_lifecycle_rule_yml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_resources_backup_test_backup_plan_lifecycle_rule_yml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3504` -### `bad_resources_codepipeline_stages_second_stage_yaml` - 1 mismatches (3 TP, 0 FP, 3 EE, 1 FN) +### `bad_resources_codepipeline_stages_second_stage_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3700` - EE: `I9001`, `I9040`, `W9002` -### `bad_resources_creation_policy_unsupported_e3055_yaml` - 1 mismatches (0 TP, 1 FP, 2 EE, 0 FN) +### `bad_resources_creation_policy_unsupported_e3055_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3055` - EE: `I9001`, `I9040` -### `bad_resources_dynamodb_conditional_scenarios_yaml` - 1 mismatches (8 TP, 1 FP, 5 EE, 0 FN) +### `bad_resources_dynamodb_conditional_scenarios_yaml` - 1 behavioral mismatches (8 TP, 1 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` - EE: `I9040` ×3, `I9001` ×2 -### `bad_resources_iam_iam_policy_conditional_policies_yaml` - 1 mismatches (2 TP, 0 FP, 4 EE, 1 FN) +### `bad_resources_iam_iam_policy_conditional_policies_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9040` ×2, `W2512` ×2 -### `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9001` -### `bad_resources_iam_identity_policy_wildcard_service_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_resources_iam_identity_policy_wildcard_service_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3510` -### `bad_resources_lambda_required_properties_yaml` - 1 mismatches (4 TP, 0 FP, 8 EE, 1 FN) +### `bad_resources_lambda_required_properties_yaml` - 1 behavioral mismatches (4 TP, 0 FP, 1 ID, 7 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3678` -- EE: `I9040` ×3, `W9013` ×3, `F3003`, `I9001` +- ID: `F3003` +- EE: `I9040` ×3, `W9013` ×3, `I9001` -### `bad_resources_properties_string_size_yaml` - 1 mismatches (3 TP, 0 FP, 3 EE, 1 FN) +### `bad_resources_properties_string_size_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3065` - EE: `I9040` ×3 -### `bad_resources_rds_not_enum_master_username_join_yaml` - 1 mismatches (1 TP, 1 FP, 2 EE, 0 FN) +### `bad_resources_rds_not_enum_master_username_join_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `F3017` - EE: `I9001` ×2 -### `bad_sam_function_autopublishalias_invalid_name_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_autopublishalias_invalid_name_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_deploymentpreference_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_deploymentpreference_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_dlq_invalid_type_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_dlq_invalid_type_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_dlq_missing_targetarn_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_dlq_missing_targetarn_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_functionscaling_without_capacityprovider_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_functionscaling_without_capacityprovider_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_provisioned_concurrency_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_provisioned_concurrency_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_versiondeletionpolicy_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_versiondeletionpolicy_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_zip_missing_runtime_handler_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_zip_missing_runtime_handler_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_zip_with_imageuri_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_zip_with_imageuri_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_layerversion_invalid_compatible_architectures_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_layerversion_invalid_compatible_architectures_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_layerversion_invalid_retention_policy_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_layerversion_invalid_retention_policy_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_simpletable_primarykey_invalid_type_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_simpletable_primarykey_invalid_type_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_statemachine_both_definitions_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_statemachine_both_definitions_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_statemachine_no_definition_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_statemachine_no_definition_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_schema_property_constraints_yaml` - 1 mismatches (1 TP, 0 FP, 11 EE, 1 FN) +### `bad_schema_property_constraints_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 11 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1161` - EE: `I9001` ×6, `I9040` ×2, `W9002`, `W9009`, `W9013` -### `bad_schema_required_xor_conditional_yaml` - 1 mismatches (1 TP, 0 FP, 5 EE, 1 FN) +### `bad_schema_required_xor_conditional_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001` ×5 -### `bad_schema_structural_yaml` - 1 mismatches (6 TP, 0 FP, 10 EE, 1 FN) +### `bad_schema_structural_yaml` - 1 behavioral mismatches (6 TP, 0 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001` ×8, `I9040` ×2 -### `bad_string_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_string_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_sub_needed_yaml` - 1 mismatches (3 TP, 0 FP, 2 EE, 1 FN) +### `bad_sub_needed_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1161` - EE: `I9001`, `I9040` -### `bad_template_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_template_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_templates_base_null_yaml` - 1 mismatches (2 TP, 0 FP, 1 EE, 1 FN) +### `bad_templates_base_null_yaml` - 0 behavioral mismatches (2 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E1001` - EE: `F0001` -### `bad_templates_transform_invalid_entries_yaml` - 1 mismatches (3 TP, 0 FP, 0 EE, 1 FN) - -- FN: `E1005` - -### `bad_transform_serverless_auto_publish_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_transform_serverless_auto_publish_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `cdk_application-load-balancer--LoadBalancerStack.template_json` - 1 mismatches (5 TP, 0 FP, 72 EE, 1 FN) +### `cdk_application-load-balancer--LoadBalancerStack.template_json` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 72 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3712` - EE: `I9001` ×68, `I9040` ×4 -### `cdk_classic-load-balancer--LoadBalancerStack.template_json` - 1 mismatches (1 TP, 0 FP, 65 EE, 1 FN) +### `cdk_classic-load-balancer--LoadBalancerStack.template_json` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 65 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - EE: `I9001` ×63, `I9040` ×2 -### `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - 1 mismatches (2 TP, 0 FP, 13 EE, 1 FN) +### `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 13 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `W3691` - EE: `I9001` ×7, `I9040` ×4, `I9003`, `W9008` -### `gh-issues_issue-186-clb_json` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `gh-issues_issue-186-clb_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - EE: `I9001` ×2 -### `gh-issues_issue-201_json` - 1 mismatches (2 TP, 0 FP, 1 EE, 1 FN) - -- FN: `E1001` -- EE: `F0001` - -### `gh-issues_issue-40_yaml` - 1 mismatches (1 TP, 0 FP, 14 EE, 1 FN) +### `gh-issues_issue-40_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 14 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1041` - EE: `I9001` ×6, `I9040` ×3, `W9013` ×3, `I9003`, `W9002` -### `gh-issues_issue-67_json` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `gh-issues_issue-67_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001`, `I9040` -### `good_custom_is-not-defined_yaml` - 1 mismatches (8 TP, 0 FP, 6 EE, 1 FN) +### `good_custom_is-not-defined_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E9004` - EE: `I9040` ×5, `I9001` -### `good_functions_sub_yaml` - 1 mismatches (11 TP, 0 FP, 12 EE, 1 FN) +### `good_functions_sub_yaml` - 1 behavioral mismatches (11 TP, 0 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1021` - EE: `I9001` ×7, `I9040` ×5 -### `good_output_value_string_yaml` - 1 mismatches (3 TP, 0 FP, 1 EE, 1 FN) - -- FN: `W6001` -- EE: `I9040` - -### `good_parameters_not_used_parameters_yaml` - 1 mismatches (3 TP, 0 FP, 4 EE, 1 FN) +### `good_parameters_not_used_parameters_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1021` - EE: `I9001` ×3, `I9040` -### `good_resources_iam_policy_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `good_resources_iam_policy_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9001` -### `good_resources_properties_exclusive_yaml` - 1 mismatches (1 TP, 0 FP, 6 EE, 1 FN) +### `good_resources_properties_exclusive_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1150` - EE: `I9001` ×5, `I9040` -### `good_route53_conditional_record_arrays_yaml` - 1 mismatches (2 TP, 0 FP, 9 EE, 1 FN) +### `good_route53_conditional_record_arrays_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 9 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3023` - EE: `I9001` ×9 -### `good_schema_resource_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `good_schema_resource_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3006` -### `integration_getatt-types_yaml` - 1 mismatches (8 TP, 0 FP, 17 EE, 1 FN) +### `integration_getatt-types_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E9004` - EE: `I9001` ×10, `I9040` ×7 -### `lsp_test-template_yaml` - 1 mismatches (2 TP, 0 FP, 2 EE, 1 FN) +### `integration_resources-cloudformation-init_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `W2509` +- EE: `I9001`, `I9040`, `W9010` + +### `lsp_constants_json` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` ×2, `I9040` + +### `lsp_constants_yaml` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` ×2, `I9040` + +### `lsp_test-template_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - EE: `I9040` ×2 @@ -22643,44 +19297,952 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. These templates cannot be compared because no counterpart exists in the other tool's output. They are excluded from precision/recall scoring. -### Engine reports with no cfn-lint result — 2 templates, 0 diagnostics +### Engine reports with no cfn-lint result — 6 templates, 20 diagnostics -- `empty_yaml` (0 diagnostics) -- `malformed_yaml` (0 diagnostics) +- `bad_resources_properties_custom_missing_service_token_yaml` (2 diagnostics) +- `bad_resources_sqs_standard_queue_fifo_suffix_yaml` (7 diagnostics) +- `empty_yaml` (1 diagnostics) +- `good_resources_properties_custom_with_service_token_yaml` (3 diagnostics) +- `good_resources_sqs_standard_queue_name_yaml` (6 diagnostics) +- `malformed_yaml` (1 diagnostics) ## Root-Cause Analysis +Unmatched findings are classified from diagnostics emitted by the +counterpart on the same template after exact canonical identities +have been consumed. No cause is inferred from a rule prefix or severity. + ### False Negative Root Causes | Cause | Count | % of FN | Rules | |-------|------:|--------:|-------| -| Warning-level checks | 954 | 73.95% | W1001, W1020, W1028, W1030, W1031, W1032, W1034, W1036, W2001, W2002, W2010, W3037, W3691, W3698, W6001 | -| Other | 179 | 13.88% | E0002, E2001, E2531, E2533, E5001, E6001, E6010, E7001, E7010, E8003, E8004, E8005, E9004, F0000, F0013, F0018, F1018, F1020, F1031, F2015, F3002, F3003, F3006, F3012, F3014, F3016, F3017, F3018, F3030, F3037, F6101 | -| Resource property validation | 78 | 6.05% | E3001, E3005, E3010, E3023, E3024, E3026, E3039, E3043, E3047, E3048, E3055, E3065, E3066, E3504, E3510, E3512, E3513, E3514, E3530, E3673, E3678, E3682, E3685, E3692, E3698, E3699, E3700, E3701, E3707, E3712, E3719, E3720, E3724 | -| Informational checks | 52 | 4.03% | I1022, I3010, I3013, I3510 | -| Intrinsic function validation | 27 | 2.09% | E1001, E1002, E1003, E1005, E1011, E1016, E1017, E1021, E1041, E1150, E1161, E1701 | +| No equivalent engine rule emitted | 257 | 79.08% | E1001, E1002, E1003, E1011, E1016, E1021, E1041, E1150, E1161, E1701, E2531, E2533, E3001, E3005, E3010, E3023, E3024, E3026, E3039, E3055, E3065, E3066, E3504, E3512, E3513, E3514, E3530, E3673, E3678, E3682, E3685, E3692, E3698, E3699, E3700, E3701, E3707, E3712, E3719, E3720, E3724, E5001, E6001, E6010, E7001, E9004, F0000, F0001, F0018, F1018, F1020, F3002, F3003, F3006, F3012, F3014, F3016, F3017, F3018, F3030, F6101, I3010, I3011, I3510, W1001, W1028, W1030, W1031, W1032, W1034, W1036, W2001, W2002, W3037, W3691, W3698 | +| Equivalent rule/resource emitted on a different property path | 48 | 14.77% | E1005, E1017, E2001, E3023, E8003, E8004, F0013, F3003, F3012, F3014, W1001, W1030, W2001, W2506, W8003 | +| Equivalent rule emitted on a different resource/entity | 20 | 6.15% | E3055, E3510, F3006, F3012, F3014, F3037, I3013, W1030 | ### False Positive Root Causes | Cause | Count | % of FP | Rules | |-------|------:|--------:|-------| -| Stricter than cfn-lint (warnings) | 900 | 86.79% | W1020, W2010 | -| Stricter than cfn-lint (informational) | 54 | 5.21% | I1022, I3011 | -| Other | 48 | 4.63% | E0001, F0018, F1018, F1020, F1031, F3016, F3017 | -| Over-reporting property/intrinsic errors | 35 | 3.38% | E1155, E3001, E3019, E3022, E3023, E3029, E3055, E3510, E3639 | - -## Location Mismatches - 4 matched pairs disagree on line - -Same rule ID + resource + path, but the engine start line differs from -the reference. (Messages are not compared - wording may differ freely.) - -Known benign class: on transformed (SAM) templates cfn-lint anchors -findings at the resource's first line because the -transform loses property line fidelity; the engine anchors at the -actual property line - deliberately more precise, not a defect. - -- **I3042** `myKms` → `Properties.KeyPolicy.Statement.2.Principal.AWS.0.Fn::Sub` in `bad_resources_circular_dependency_yaml`: reference L191 vs engine L192 -- **I3042** `CognitoAuthorizer` → `Properties.ProviderARNs.0.Fn::Sub` in `integration_cfn-gather_yaml`: reference L60 vs engine L61 -- **W1028** `ProductionBucket` → `Properties.PublicAccessBlockConfiguration.BlockPublicAcls.Fn::If.2` in `lsp_condition-usage_yaml`: reference L66 vs engine L69 -- **W1028** `ProductionBucket` → `Properties.PublicAccessBlockConfiguration.BlockPublicPolicy.Fn::If.2` in `lsp_condition-usage_yaml`: reference L73 vs engine L76 +| No equivalent reference rule emitted | 68 | 53.97% | E0001, E1028, E1155, E3001, E3022, E3055, E3510, E3639, F2012, F3017, I3042, W2509 | +| Equivalent rule/resource emitted on a different property path | 35 | 27.78% | E1005, E3001, E8003, E8004, E8007, F0013, F1012, F2012, W1001, W2506, W8003 | +| Equivalent rule emitted on a different resource/entity | 23 | 18.25% | E3019, E3023, E3029, E3055, E3639, F0018, F3016 | + +## Representational Path Equivalences - 84 + +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.2.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.2.Fn::If.2.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.2.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.2.Fn::If.2.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: reference `Properties.ImageId.Fn::If.1` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: reference `Properties.ImageId.Fn::If.2` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1154** `myInstance1` in `bad_core_conditions_yaml`: reference `Properties.SubnetId.Fn::If.2` vs engine `Properties.SubnetId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `GroupInvalidFalse` in `bad_route53_conditional_record_arrays_yaml`: reference `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `GroupInvalidTrue` in `bad_route53_conditional_record_arrays_yaml`: reference `Properties.RecordSets.Fn::If.1.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `ConditionalRecordSetsInvalidFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.RecordSets.Fn::If.1.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `ConditionalRecordSetsInvalidSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `WholePropertiesRecordsInvalidFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.1.RecordSets.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `WholePropertiesRecordsInvalidSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.2.RecordSets.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3029** `AliasConflictFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.1.TTL` vs engine `Properties.TTL` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3029** `AliasConflictSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.2.TTL` vs engine `Properties.TTL` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3048** `InvalidDriverInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: reference `Properties.Fn::If.1.ContainerDefinitions.0.LogConfiguration.LogDriver` vs engine `Properties.ContainerDefinitions.0.LogConfiguration.LogDriver` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3048** `PlacementInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: reference `Properties.Fn::If.1.PlacementConstraints` vs engine `Properties.PlacementConstraints` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3050** `Project` in `bad_iam_ref_with_path_yaml`: reference `Properties.ServiceRole.Ref` vs engine `Properties.ServiceRole` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **E3050** `CodeBuildProject` in `bad_resources_iam_ref_with_path_yaml`: reference `Properties.ServiceRole.Ref` vs engine `Properties.ServiceRole` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **E3053** `Task` in `bad_ecs_awsvpc_port_mismatch_yaml`: reference `Properties.ContainerDefinitions.0.PortMappings.0.HostPort` vs engine `Properties.ContainerDefinitions[0].PortMappings[0].HostPort` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.0.Tierings.0.Days` vs engine `Properties.IntelligentTieringConfigurations[0].Tierings[0].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.0.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[0].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.1.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[1].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.2.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[2].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3510** `RoleConditionalPolicies` in `bad_resources_iam_iam_policy_conditional_policies_yaml`: reference `Properties.Policies.Fn::If.1.0.PolicyDocument.Statement.0.Resource` vs engine `Properties.Policies.0.PolicyDocument.Statement.0.Resource` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `RoleConditionalPolicies` in `bad_resources_iam_iam_policy_conditional_policies_yaml`: reference `Properties.Policies.Fn::If.2.0.PolicyDocument.Statement.0.Resource` vs engine `Properties.Policies.0.PolicyDocument.Statement.0.Resource` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `SomeManagedPolicy` in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml`: reference `Properties.PolicyDocument.Statement.1.Fn::If.1.Resource.0` vs engine `Properties.PolicyDocument.Statement.1.Resource.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `SomeManagedPolicy` in `good_resources_iam_policy_yaml`: reference `Properties.PolicyDocument.Statement.1.Fn::If.1.Resource.0` vs engine `Properties.PolicyDocument.Statement.1.Resource.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3715** `myInstance2` in `bad_core_conditions_yaml`: reference `Properties.BlockDeviceMappings.Fn::If.1.0.VirtualName` vs engine `Properties.BlockDeviceMappings.0.VirtualName` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F0018** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `UpdateReplacePolicy.Fn::If.1` vs engine `UpdateReplacePolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F1018** `MyEC2Instance` in `bad_functions_ref_yaml`: reference `Properties.UserData.Fn::Sub` vs engine `Properties.UserData` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `MyEC2Instance` in `bad_refs_yaml`: reference `Properties.UserData.Fn::Sub` vs engine `Properties.UserData` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_json`: reference `Metadata.Test.Fn::Sub` vs engine `Metadata.Test` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_json`: reference `Properties.BucketName.Fn::Sub` vs engine `Properties.BucketName` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_yaml`: reference `Metadata.Test.Fn::Sub` vs engine `Metadata.Test` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_yaml`: reference `Properties.BucketName.Fn::Sub` vs engine `Properties.BucketName` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1020** `AnotherInstance` in `bad_functions_ref_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_functions_ref_yaml`: reference `Properties.UserData.Fn::Sub.1.myPackage.Ref` vs engine `Properties.UserData.Fn::Sub.1.myPackage` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_functions_ref_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: reference `Properties.HealthCheck.Target.Fn::Join.1.1.Ref` vs engine `Properties.HealthCheck.Target.Fn::Join.1.1` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: reference `Properties.Listeners.0.InstancePort.Ref` vs engine `Properties.Listeners.0.InstancePort` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_generic_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `RDSOptionGroup` in `bad_issues_yaml`: reference `Properties.OptionConfigurations.0.VpcSecurityGroupMemberships.0.Ref` vs engine `Properties.OptionConfigurations.0.VpcSecurityGroupMemberships.0` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_refs_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_refs_yaml`: reference `Properties.UserData.Fn::Sub.1.myPackage.Ref` vs engine `Properties.UserData.Fn::Sub.1.myPackage` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_refs_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `TestPipeline` in `bad_resources_codepipeline_stages_second_stage_yaml`: reference `Properties.Stages.1.Actions.0.Name.Ref` vs engine `Properties.Stages.1.Actions.0.Name` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `LambdaFunctionTestDefinedRef` in `good_custom_is-defined_yaml`: reference `Properties.Environment.Variables.NODE_ENV.Ref` vs engine `Properties.Environment.Variables.NODE_ENV` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: reference `Properties.ResourceId.Ref` vs engine `Properties.ResourceId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: reference `Properties.RestApiId.Ref` vs engine `Properties.RestApiId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `LaunchTemplate` in `integration_aws-ec2-launchtemplate_yaml`: reference `Properties.LaunchTemplateData.NetworkInterfaces.0.NetworkInterfaceId.Ref` vs engine `Properties.LaunchTemplateData.NetworkInterfaces.0.NetworkInterfaceId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_json`: reference `Metadata.TestObj.Ref` vs engine `Metadata.TestObj` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_json`: reference `Properties.Tags.0.Value.Ref` vs engine `Properties.Tags.0.Value` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_yaml`: reference `Metadata.TestObj.Ref` vs engine `Metadata.TestObj` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_yaml`: reference `Properties.Tags.0.Value.Ref` vs engine `Properties.Tags.0.Value` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F3002** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.BadLocations` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.BadLocations` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3012** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.RestrictionType.Fn::If.1` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.RestrictionType` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.1` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.2` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.1` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3017** `myPolicy2` in `bad_resources_properties_atleastone_yaml`: reference `Properties.Fn::If.1` vs engine `Properties` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.RestrictionType.Fn::If.1` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.RestrictionType` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **W1030** `mySubnet1` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `mySubnet2` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `mySubnet3` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rNatInstance` in `quickstart_nat-instance_json`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rPostProcInstance` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rMgmtBastionInstance` in `quickstart_nist_vpc_management_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_nist_vpc_management_yaml`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_nist_vpc_management_yaml`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAppPrivateSubnetB` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rDBPrivateSubnetA` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rDBPrivateSubnetB` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_vpc-management_json`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_vpc-management_json`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W2010** `SNSTopicWithSecretNameInRef` in `bad_noecho_yaml`: reference `Metadata.NoEchoParamInMetadata.Ref` vs engine `Metadata.NoEchoParamInMetadata` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W2010** `SNSTopicWithSecretNameInSub` in `bad_noecho_yaml`: reference `Metadata.NoEchoParamInMetadata.Fn::Sub` vs engine `Metadata.NoEchoParamInMetadata` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **W2010** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9.Ref` vs engine `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: reference `Properties.HealthCheckPort.Fn::If.1` vs engine `Properties.HealthCheckPort` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. + +## Engine-Preferred Path Differences - 64 + +- **E3001** `StandardVersion` in `bad_core_resource_attributes_yaml`: reference `` vs engine `Version` — Version is the exact unsupported authored resource attribute; the reference reports the resource root. +- **E3047** `TaskDef` in `bad_fargate_bad_cpu_memory_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `FargateConditionalInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `FargateInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `CpuInvalidThenValid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `CpuValidThenInvalid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `EightVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `MalformedCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `NonCanonicalCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `OverflowingMemoryUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `SixteenVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `ThirtyTwoVcpuUnsupportedSixtyFourGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `ThirtyTwoVcpuUnsupportedTwoFortyGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3060** `mySubnet2` in `bad_functions_getaz_yaml`: reference `Properties.mySubnet2.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `mySubnet3` in `bad_functions_getaz_yaml`: reference `Properties.mySubnet3.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetB` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetB.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetD.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetD.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetB` in `bad_subnet_overlap_yaml`: reference `Properties.SubnetB.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3510** `PolicyDuplicateSid` in `bad_resources_iam_identity_policy_e3510_yaml`: reference `Properties.PolicyDocument.Statement` vs engine `Properties.PolicyDocument.Statement.1.Sid` — The engine identifies the duplicate Sid token; the reference reports the containing Statement collection. +- **E3639** `DDBTable` in `bad_dynamodb_provisioned_no_throughput_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitProvisioned` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitRemovedThenValue` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitValueThenRemoved` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `NullThroughput` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `DataTable` in `cdk_DemoStack.template_json`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3660** `BadRestApi` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.Name` — The engine identifies the exact logical Name property required by the cross-resource contract. +- **E3676** `BadListener` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.Certificates` — The engine identifies the exact logical Certificates property required by the listener contract. +- **E3704** `BadValkey` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.TransitEncryptionEnabled` — The engine identifies the exact logical TransitEncryptionEnabled property required by the resource contract. +- **E3710** `ShutdownResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **I2530** `Func` in `bad_lambda_no_snapstart_yaml`: reference `Properties.SnapStart.ApplyOn` vs engine `Properties.Runtime` — Runtime is the authored value that triggers the recommendation; the reference points at an absent SnapStart child. +- **I2530** `LambdaFn` in `bad_lambda_zipfile_java_yaml`: reference `Properties.SnapStart.ApplyOn` vs engine `Properties.Runtime` — Runtime is the authored value that triggers the recommendation; the reference points at an absent SnapStart child. +- **I3510** `myPolicy` in `bad_functions_sub_needed_yaml`: reference `Properties.PolicyDocument.Statement.1.Resource` vs engine `Properties.PolicyDocument.Statement.1.NotResource` — The source uses NotResource; the reference reports the nonexistent sibling Resource path. +- **W3696** `myAcl` in `bad_generic_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `SunsetResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh0` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh1` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh2` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh3` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh4` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh` in `good_functions_findinmap_enhanced_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh2` in `good_functions_findinmap_enhanced_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LC` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyLaunchConfig` in `bad_properties_ebs_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MaintenanceResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_classic-load-balancer--LoadBalancerStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyFleetLaunchConfig5D7F9801` in `cdk_ecs-cluster--MyFirstEcsCluster.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `appasgLaunchConfig9EFFB3A3` in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyLaunchConfig` in `gh-issues_issue-37_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_functions_sub_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_parameters_not_used_parameters_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_parameters_used_transforms_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfig` in `good_resources_update_policy_supported_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `integration_ref-types_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftEtcdLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftMasterASLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftNodesLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. + +## Non-Comparable Path Anchors - 8 + +- **E3024** `IamRole1` in `integration_ref-no-value_yaml`: reference `Properties.Tags.3` vs engine `Properties.Tags` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **E3502** `MainQueue` in `bad_sqs_fifo_standard_dlq_yaml`: reference `Properties.FifoQueue` vs engine `Properties.RedrivePolicy` — FifoQueue and RedrivePolicy are the two authored endpoints of the incompatible queue relationship; neither is a unique source anchor. +- **E3502** `FifoQueue` in `integration_cfn-gather_yaml`: reference `Properties.FifoQueue` vs engine `Properties.RedrivePolicy` — FifoQueue and RedrivePolicy are the two authored endpoints of the incompatible queue relationship; neither is a unique source anchor. +- **F3003** `myInstance2` in `bad_core_conditions_yaml`: reference `Properties.BlockDeviceMappings.Fn::If.1.0` vs engine `Properties.BlockDeviceMappings.{}` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: reference `Properties.Tags.3` vs engine `Properties.Tags` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **F3014** `Policy` in `bad_schema_required_xor_conditional_yaml`: reference `Properties.ResourceId` vs engine `Properties` — The required alternative child is absent; the engine anchors the containing Properties object while the reference names one missing alternative. +- **F3014** `ScalingPolicyBothIds` in `bad_schema_structural_yaml`: reference `Properties.ResourceId` vs engine `Properties` — The required alternative child is absent; the engine anchors the containing Properties object while the reference names one missing alternative. +- **W2533** `Function2` in `bad_resources_lambda_required_properties_yaml`: reference `Properties.PackageType` vs engine `Properties.Code` — PackageType and Code jointly determine the missing-code condition, so the diagnostic has no unique authored endpoint. + +## Representational Span Equivalences - 499 + +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `lsp_constants_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic1` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic2` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic3` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic4` in `bad_functions_get_stack_output_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2001** `` in `gh-issues_issue-194_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2001** `` in `gh-issues_issue-63_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `SampleLambdaB2FF4FA1` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `ApiCorsLambda5083F55F` in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `UrlShortenerFunctionB5E87AC1` in `cdk_py-url-shortener--urlshort-app.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `FailureLambdaHandlerBB58C051` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SuccessLambdaHandler0E2CD797` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `destinedLambda8DF776BB` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `dynamoStreamSubscriberLambdaHandlerD2AAE139` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer1LambdaC3C4DA46` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer2LambdaB7E263A7` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer3Lambda880BEEDF` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmProducerLambda71029F8F` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `ErrorLambdaHandler4224322A` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `WebserviceIntegrationLambdaHandler5E349AB7` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `LoadLambdaHandlerFDA03D53` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `ObserveLambdaHandler685FFDBB` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `TransformLambdaHandler60ABE8EE` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `extractLambdaHandlerD06B8F09` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `UnreliableLambdaHandlerD4A4DED9` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `cancelFlightLambdaHandler437EEC76` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `cancelHotelLambdaHandler09F13EF6` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `confirmFlightLambdaHandler96C3663F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `confirmHotelLambdaHandler882ACF2D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `refundPaymentLambdaHandler932D11D5` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `reserveFlightLambdaHandler3C75473D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `reserveHotelLambdaHandler020AE24A` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sagaLambdaHandlerFC24742F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `takePaymentLambdaHandlerB96529D4` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSPublishLambdaHandler51EE31BE` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSSubscribeLambdaHandlerBBB58615` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `scheduledLambda8A84450D` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `LoyaltyLambdaHandler5918F0DA` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `pineappleCheckLambdaHandlerFDB742D5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `HelloWorldHandler30C22324` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `httpLambdaHandler66D9C9A8` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sqsLambdaHandler0DD5DF9B` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sqsSubscribeLambdaHandlerD66392B8` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `snsLambdaHandlerE7B0ABE3` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `snsSubscriptionLambdaHandler68619CD8` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `consumerlambdafunction40710347` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `producerlambdafunctionCE724CE7` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `PollerFunction` in `public_lambda-poller_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `rAMIComplianceFunction` in `quickstart_config-rules_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `rCloudTrailValidationFunction` in `quickstart_config-rules_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3001** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3001** `Bucket1` in `lsp_parameter_usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3005** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3016** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3016** `ProductionBucket` in `lsp_condition-usage_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3045** `DataBucket` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3045** `Bucket` in `gh-issues_issue-54_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3062** `RDSE0E96D00` in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3505** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3628** `WebInstanceF774E10D` in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3639** `DataTable` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3677** `MyFunction` in `gh-issues_issue-47_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3677** `FutureNodeFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8004** `` in `bad_conditions_condition_functions_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8004** `` in `bad_conditions_condition_functions_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8005** `` in `bad_conditions_condition_functions_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F1018** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1018** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1020** `Bucket` in `lsp_constants_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1020** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F2002** `` in `gh-issues_issue-201_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3002** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3004** `ClusterCreationRoleDefaultPolicyE8BDFC7B` in `gh-issues_issue-53_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3004** `ClusterKubectlReadyBarrier200052AF` in `gh-issues_issue-53_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3006** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3014** `Pipeline` in `gh-issues_issue-44_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3017** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `ImagePipeline7DDDE57F` in `gh-issues_issue-186-imagebuilder_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `MyFunction` in `gh-issues_issue-47_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `FutureNodeFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `MyFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3032** `Canary` in `gh-issues_issue-62_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `MyFunction` in `gh-issues_issue-41_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterAwsAuthmanifestFE51F8AE` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 12→11 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstance` in `quickstart_nat-instance_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstance` in `quickstart_nat-instance_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDHCPoptions` in `quickstart_vpc-management_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `DHCPOptions` in `quickstart_vpc_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `S3VPCEndpoint` in `quickstart_vpc_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `DataTable` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `DataTable` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `efsstorage` in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `efsstorage` in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `emrcluster` in `cdk_py-emr--emr-cluster.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `emrcluster` in `cdk_py-emr--emr-cluster.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `CfnLogGroup` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `CfnLogGroup` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Database` in `lsp_condition-usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Database` in `lsp_condition-usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo1DFB897B` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEvA054414A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi243BAA69` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema34D41C85` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 242→241 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `itemL3TableSqsDlqQueueD3C251B9` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `SampleQueue49AAAEFF` in `cdk_lambda-manage-s3-event-notification--AStack.template_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `SQSQueue7674CD17` in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `RDSE0E96D00` in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Canary` in `gh-issues_issue-62_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Database` in `lsp_condition-usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1028** `ProductionBucket` in `lsp_condition-usage_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1028** `ProductionBucket` in `lsp_condition-usage_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rNatInstance` in `quickstart_nat-instance_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `gh-issues_issue-201_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `good_decode_parsing_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `quickstart_nat-instance_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `quickstart_vpc-management_json`: end_col 17→16 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2501** `Database` in `lsp_condition-usage_json`: end_col 29→28 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `AppFunction` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionBD0C2D50` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `createItemFunction8D47E48A` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `deleteItemFunction2918B1B0` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `getAllItemsFunction0B7A913E` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `getOneItemFunctionE3257B22` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `updateItemFunction59415205` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `apigwasynclambdafnAD6250E4` in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `authenticationlambdaDD3A2252` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `operationallambdaFE43E13E` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct1FunctionWithReservedCEs6458B719` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct1StandardFunctionD5361E84` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct2FunctionWithReservedCEs89864BB2` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct2StandardFunction1EBDBFFA` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `BuildLambda72E2A667` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `helloWorldFunction00C940B5` in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `itemL2TableLambdaFunction1987B4C5` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `itemL3TableLambdaFunction7B818C58` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `EICEndpointisCompleteHandler0273707A` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `EICEndpointonEventHandlerC2E1F5F2` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Singleton8C7B99F3` in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Inspector2FindingHandler1F85FFBC` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Inspector2InitialScanHandler460C9991` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Singleton8C7B99F3` in `cdk_lambda-cron--LambdaCronExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `S3EventNotificationsLambda20F17D80` in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `WidgetsWidgetHandler1BC9DB34` in `cdk_my-widget-service--MyWidgetServiceStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventConsumer1Lambda4AF2292E` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventConsumer2Lambda1631C47A` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventProducerLambda100D549C` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `IoTCertProviderframeworkonEvent8FF1476F` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction45C982D3` in `cdk_py-lambda-layer--LambdaLayerExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `statusLambdaCF47B86D` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `submitLambda3C32AFD4` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `RekFunction9837D13D` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `retrieveTransformedObjectLambdaD5D6532C` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CheckLambda9CBBF9BA` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `SubmitLambda8054545E` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `MyFunction` in `gh-issues_issue-41_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `MyLambda` in `gh-issues_issue-65_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionBD0C2D50` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 126→125 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 123→122 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `createItemFunction8D47E48A` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `deleteItemFunction2918B1B0` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `getAllItemsFunction0B7A913E` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `getOneItemFunctionE3257B22` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `updateItemFunction59415205` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `apigwasynclambdafnAD6250E4` in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `authenticationlambdaDD3A2252` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `operationallambdaFE43E13E` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1SecurityGroupF7DF9E6F` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2SecurityGroup7268045A` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `mystatemachine15ECA539` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 33→32 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `connectlambdaFFAE59F3` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `disconnectlambdaAC22A441` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `messagelambda16C1C2A3` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `echoFunction5207BE9B` in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct1FunctionWithReservedCEs6458B719` in `cdk_aspects--SampleStack.template_json`: end_col 59→58 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct1StandardFunctionD5361E84` in `cdk_aspects--SampleStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct2FunctionWithReservedCEs89864BB2` in `cdk_aspects--SampleStack.template_json`: end_col 59→58 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct2StandardFunction1EBDBFFA` in `cdk_aspects--SampleStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `JobSubmitterFunctionFAE645C8` in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BuildDeployPipeline5EEC284B` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BuildLambda72E2A667` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `helloWorldFunction00C940B5` in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DemoResourceProviderframeworkonEventF8E49AD2` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 62→61 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 73→72 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DemoResourceMyProviderframeworkonEvent65F24A35` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 73→72 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `itemL2TableLambdaFunction1987B4C5` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `itemL3TableLambdaFunction7B818C58` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` in `cdk_ec2-instance--EC2Example.template_json`: end_col 89→88 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_ec2-instance--EC2Example.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EC2Instance1F00751C57ee729c1274d778` in `cdk_ec2-instance--EC2Example.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EC2Instance1F00751C57ee729c1274d778` in `cdk_ec2-instance--EC2Example.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkisCompleteB1442B18` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkonEventB48896C9` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkonTimeout83318112` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderwaiterstatemachine1A139B58` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointisCompleteHandler0273707A` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointonEventHandlerC2E1F5F2` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ServiceD69D759B` in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionE0DEFB31` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: end_col 74→73 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionC919C385` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: end_col 89→88 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: end_col 84→83 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionE17A5F5E` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: end_col 74→73 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `FargateServiceECC8084D` in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sampleappServiceE7504FDB` in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json`: end_col 97→96 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_inspector2--Inspector2EnableStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Inspector2FindingHandler1F85FFBC` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Inspector2InitialScanHandler460C9991` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SampleLambdaB2FF4FA1` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_lambda-cron--LambdaCronExample.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LambdaFunctionBF21E41F` in `cdk_lambda-layer--LambdaLayerStack.template_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `S3EventNotificationsLambda20F17D80` in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `WidgetsWidgetHandler1BC9DB34` in `cdk_my-widget-service--MyWidgetServiceStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 69→68 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 68→67 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `FailureLambdaHandlerBB58C051` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SuccessLambdaHandler0E2CD797` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `destinedLambda8DF776BB` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `dynamoStreamSubscriberLambdaHandlerD2AAE139` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 65→64 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer1LambdaC3C4DA46` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer2LambdaB7E263A7` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer3Lambda880BEEDF` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmProducerLambda71029F8F` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ErrorLambdaHandler4224322A` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `WebserviceIntegrationLambdaHandler5E349AB7` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 81→80 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LandingBucketNotificationsEF1634C6` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LoadLambdaHandlerFDA03D53` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ObserveLambdaHandler685FFDBB` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `TransformLambdaHandler60ABE8EE` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `extractLambdaHandlerD06B8F09` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `UnreliableLambdaHandlerD4A4DED9` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BookingSagaFA991213` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `cancelFlightLambdaHandler437EEC76` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `cancelHotelLambdaHandler09F13EF6` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `confirmFlightLambdaHandler96C3663F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `confirmHotelLambdaHandler882ACF2D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `refundPaymentLambdaHandler932D11D5` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `reserveFlightLambdaHandler3C75473D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `reserveHotelLambdaHandler020AE24A` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sagaLambdaHandlerFC24742F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `takePaymentLambdaHandlerB96529D4` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSPublishLambdaHandler51EE31BE` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSSubscribeLambdaHandlerBBB58615` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `scheduledLambda8A84450D` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LoyaltyLambdaHandler5918F0DA` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `StateMachine2E01A3A5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `pineappleCheckLambdaHandlerFDB742D5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `HelloWorldHandler30C22324` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `httpLambdaHandler66D9C9A8` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sqsLambdaHandler0DD5DF9B` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sqsSubscribeLambdaHandlerD66392B8` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `snsLambdaHandlerE7B0ABE3` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `snsSubscriptionLambdaHandler68619CD8` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 58→57 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ApiCorsLambda5083F55F` in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventConsumer1Lambda4AF2292E` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventConsumer2Lambda1631C47A` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventProducerLambda100D549C` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSTriggerLambda99F71FB3` in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdafunction40710347` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `producerlambdafunctionCE724CE7` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json`: end_col 86→85 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CertHandler220363A9` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `IoTCertProviderframeworkonEvent8FF1476F` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_py-lambda-cron--LambdaCronExample.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdaContainerFunction5815FD88` in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction45C982D3` in `cdk_py-lambda-layer--LambdaLayerExample.template_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `StateMachine2E01A3A5` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `statusLambdaCF47B86D` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `submitLambda3C32AFD4` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `UrlShortenerFunctionB5E87AC1` in `cdk_py-url-shortener--urlshort-app.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_r53-resolver--R53ResolverStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 77→76 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `RekFunction9837D13D` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `retrieveTransformedObjectLambdaD5D6532C` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_static-site-basic--MyStaticSite.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_static-site-basic--MyStaticSite.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyStateMachine6C968CA5` in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json`: end_col 33→32 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CheckLambda9CBBF9BA` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CronStateMachine7E50955B` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SubmitLambda8054545E` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` in `gh-issues_issue-53_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rAMIComplianceFunction` in `quickstart_config-rules_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rCloudTrailValidationFunction` in `quickstart_config-rules_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rIAMAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rInstanceOpsProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rReadOnlyAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rSysAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rGWAttachmentMgmtIGW` in `quickstart_vpc-management_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `DataBucket` in `cdk_DemoStack.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `examplebucketC9DFA43E` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `Bucket` in `gh-issues_issue-54-with-ownership_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `Bucket` in `gh-issues_issue-54_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3687** `NATInstanceSecurityGroup` in `quickstart_vpc_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W7001** `` in `lsp_parameter_usage_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W7001** `` in `quickstart_vpc-management_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 23→22 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_condition-usage_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_parameter_usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_parameter_usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `quickstart_vpc-management_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. + +## Engine-Preferred Source Spans - 135 + +- **E1011** `myInstance` in `bad_functions_base64_yaml`: col 57→65 — The engine points at the exact invalid Base64 operand; the reference starts at the containing intrinsic. +- **E1017** `myInstance2` in `bad_functions_select_yaml`: col 11→17, end_col 38→18 — The engine points at the exact invalid Select list operand; the reference starts at the containing expression. +- **E1040** `Instance1` in `integration_formats_yaml`: col 13→21 — The engine points at the exact value with the incompatible list context; the reference starts at the containing intrinsic. +- **E3001** `StandardVersion` in `bad_core_resource_attributes_yaml`: line 3→5, col 3→5, end_line 3→5, end_col 18→12 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3019** `Bucket2` in `bad_resources_primary_identifiers_yaml`: line 150→151, col 7→9, end_line 150→151, end_col 17→15 — The primary-identifier finding is caused by the authored property value; the engine points at that intrinsic value while the reference points at its key. +- **E3022** `AuxiliaryPublicSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 44→45, col 9→11, end_line 44→45, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `PrivateSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 35→36, col 9→11, end_line 35→36, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `ProxySubnetRouteTableAssociation` in `bad_properties_rt_association_yaml`: line 52→53, col 9→11, end_line 52→53 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `PublicSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 27→28, col 9→11, end_line 27→28, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3023** `Group` in `bad_E3023_conditional_record_items_yaml`: col 15→40, end_col 50→49 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3023** `Standalone` in `bad_E3023_conditional_record_items_yaml`: col 11→36, end_col 46→45 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3023** `MyCNAMERecordSetConditions` in `bad_route53_yaml`: line 90→91, col 7→9, end_line 90→91, end_col 22→15 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3047** `TaskDef` in `bad_fargate_bad_cpu_memory_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `FargateConditionalInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: line 161→165, col 5→7, end_line 161→165, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `FargateInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: line 37→42, col 5→7, end_line 37→42, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `CpuInvalidThenValid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 98→102, col 5→7, end_line 98→102, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `CpuValidThenInvalid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 111→115, col 5→7, end_line 111→115, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `EightVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 7→11, col 5→7, end_line 7→11, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `MalformedCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 59→63, col 5→7, end_line 59→63, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `NonCanonicalCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 72→76, col 5→7, end_line 72→76, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `OverflowingMemoryUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 85→89, col 5→7, end_line 85→89, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `SixteenVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 20→24, col 5→7, end_line 20→24, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `ThirtyTwoVcpuUnsupportedSixtyFourGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 33→37, col 5→7, end_line 33→37, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `ThirtyTwoVcpuUnsupportedTwoFortyGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 46→50, col 5→7, end_line 46→50, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `mySubnet2` in `bad_functions_getaz_yaml`: line 21→23, col 5→7, end_line 21→23, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `mySubnet3` in `bad_functions_getaz_yaml`: line 30→32, col 5→7, end_line 30→32, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetB` in `bad_subnet_overlap_multi_yaml`: line 20→22, col 5→7, end_line 20→22, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: line 32→34, col 5→7, end_line 32→34, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: line 32→34, col 5→7, end_line 32→34, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetB` in `bad_subnet_overlap_yaml`: line 15→17, col 5→7, end_line 15→17, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3510** `PolicyDuplicateSid` in `bad_resources_iam_identity_policy_e3510_yaml`: line 30→35, col 9→13, end_line 30→35, end_col 18→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3710** `ShutdownResource` in `bad_schema_lifecycle_yaml`: line 6→4, col 5→3, end_line 6→4, end_col 15→19 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E9006** `Database` in `lsp_comprehensive_json`: line 647→648, end_line 647→648, end_col 24→23 — The unsupported engine-version finding is caused by the authored EngineVersion value; the engine points at that value rather than its key. +- **E9006** `Database` in `lsp_comprehensive_yaml`: line 271→272, end_line 271→272 — The unsupported engine-version finding is caused by the authored EngineVersion value; the engine points at that value rather than its key. +- **F0018** `ListPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 19→11, end_line 19→11 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `ObjectPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 25→17, end_line 25→17 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 43→44, end_line 43→44 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 23→24, end_line 23→24 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `MyIAMUser` in `bad_resources_updatereplacepolicy_yaml`: line 29→30, end_line 29→30 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 16→17, end_line 16→17 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `UnsupportedIntrinsic` in `bad_resources_updatereplacepolicy_yaml`: line 32→33, end_line 32→33 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: col 17→20, end_col 20→21 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F1020** `RDSOptionGroup` in `bad_issues_yaml`: line 11→12, col 11→20, end_line 11→12, end_col 38→42 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: line 95→100, col 11→23, end_line 95→100, end_col 19→41 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F3016** `DynamicObjectPolicy` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 44→40, end_line 44→40 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `ListPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 18→10, end_line 18→10 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `ObjectPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 23→15, end_line 23→15 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 43→44, end_line 43→44 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 23→24, end_line 23→24 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `MyIAMUser` in `bad_resources_deletionpolicy_yaml`: line 29→30, end_line 29→30 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 16→17, end_line 16→17 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `UnsupportedIntrinsic` in `bad_resources_deletionpolicy_yaml`: line 32→33, end_line 32→33 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3020** `Subnet` in `integration_availability-zones_yaml`: line 6→7, col 7→9, end_line 6→7, end_col 23→19 — The invalid availability-zone finding is caused by the authored AvailabilityZone value; the engine points at the intrinsic value rather than its key. +- **F6101** `` in `bad_output_value_not_string_yaml`: end_col 33→26 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `bad_output_value_not_string_yaml`: end_col 42→36 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `integration_getatt-types_yaml`: col 5→33, end_col 10→66 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `lsp_comprehensive_json`: line 946→947, end_line 946→947, end_col 18→17 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `lsp_comprehensive_yaml`: line 423→424, end_line 423→424 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **I2530** `Func` in `bad_lambda_no_snapstart_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→14 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **I2530** `LambdaFn` in `bad_lambda_zipfile_java_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→14 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **I3042** `myKms` in `bad_resources_circular_dependency_yaml`: line 191→192, col 15→24, end_line 191→192, end_col 18→75 — The engine points at the exact Sub scalar that uses a fixed partition; the reference points at the containing property key. +- **I3042** `CognitoAuthorizer` in `integration_cfn-gather_yaml`: line 60→61, col 7→16, end_line 60→61, end_col 19→84 — The engine points at the exact Sub scalar that uses a fixed partition; the reference points at the containing property key. +- **I3100** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 41→42, end_line 41→42 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 21→22, end_line 21→22 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 14→15, end_line 14→15 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 41→42, end_line 41→42 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 21→22, end_line 21→22 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 14→15, end_line 14→15 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_resources_deletionpolicy_yaml`: line 30→35, end_line 30→35 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_resources_updatereplacepolicy_yaml`: line 30→35, end_line 30→35 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_transform_language_extension_yaml`: line 53→57, end_line 53→57 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3510** `myPolicy` in `bad_functions_sub_needed_yaml`: line 21→29, col 9→11, end_line 21→29, end_col 18→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W1001** `AMIIDLookup` in `bad_functions_relationship_conditions_yaml`: line 37→38, col 7→9, end_line 37→38, end_col 11→19 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `InstanceProfile` in `bad_functions_relationship_conditions_yaml`: col 9→14 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 292→293, col 9→11, end_line 292→293, end_col 27→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 296→297, col 9→11, end_line 296→297, end_col 27→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 310→311, col 9→11, end_line 310→311, end_col 26→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 314→315, col 9→11, end_line 314→315, end_col 26→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 319→320, col 9→11, end_line 319→320, end_col 20→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 323→324, col 9→11, end_line 323→324, end_col 20→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 344→345, col 9→11, end_line 344→345, end_col 23→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 352→353, col 9→11, end_line 352→353, end_col 28→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 489→490, col 9→11, end_line 489→490, end_col 23→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 497→498, col 9→11, end_line 497→498, end_col 31→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 501→502, col 9→11, end_line 501→502, end_col 30→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1011** `Database` in `lsp_comprehensive_json`: line 664→666, col 9→11, end_line 664→666, end_col 29→15 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1011** `Database` in `lsp_comprehensive_yaml`: line 276→277, end_line 276→277 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1011** `rRDSInstanceMySQL` in `quickstart_nist_application_yaml`: line 1016→1017, col 7→9, end_line 1016→1017, end_col 25→12 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1028** `Stack3` in `good_resources_cloudformation_stacks_yaml`: col 13→16, end_line 50→48, end_col 11→17 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `GroupUnreachableInvalid` in `good_route53_conditional_record_arrays_yaml`: end_line 62→58, end_col 3→12 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `StandaloneUnreachableInvalid` in `good_route53_conditional_record_arrays_yaml`: end_col 43→12 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `Policy` in `good_schema_required_xor_resource_condition_yaml`: col 41→46 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `` in `lsp_comprehensive_json`: line 1014→1015, end_line 1016→1015 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `` in `lsp_comprehensive_yaml`: line 450→451, col 9→14, end_line 450→451 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `ProductionBucket` in `lsp_condition-usage_yaml`: line 66→69, col 9→13, end_line 66→69, end_col 24→18 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `ProductionBucket` in `lsp_condition-usage_yaml`: line 73→76, col 11→15, end_line 73→76, end_col 17→20 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance1` in `quickstart_vpc_json`: end_line 1931→1929 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance2` in `quickstart_vpc_json`: end_line 1983→1981 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance3` in `quickstart_vpc_json`: end_line 2035→2033 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance4` in `quickstart_vpc_json`: end_line 2087→2085 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W2010** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: col 21→24, end_col 24→25 — The engine points at the referenced parameter operand inside metadata; the reference starts at the surrounding Ref syntax. +- **W2531** `TestLambdaFunction` in `good_transform_language_extension_yaml`: line 78→82, end_line 78→82 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W2531** `LambdaFunction` in `lsp_comprehensive_json`: line 738→739, end_line 738→739, end_col 18→17 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W2531** `LambdaFunction` in `lsp_comprehensive_yaml`: line 306→307, end_line 306→307 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W3696** `myAcl` in `bad_generic_yaml`: line 142→140, col 5→3, end_line 142→140, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `SunsetResource` in `bad_schema_lifecycle_yaml`: line 12→10, col 5→3, end_line 12→10, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh0` in `good_functions_findinmap_default_value_yaml`: line 45→43, col 5→3, end_line 45→43, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh1` in `good_functions_findinmap_default_value_yaml`: line 61→59, col 5→3, end_line 61→59, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh2` in `good_functions_findinmap_default_value_yaml`: line 72→70, col 5→3, end_line 72→70, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh3` in `good_functions_findinmap_default_value_yaml`: line 83→81, col 5→3, end_line 83→81, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh4` in `good_functions_findinmap_default_value_yaml`: line 95→93, col 5→3, end_line 95→93, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh` in `good_functions_findinmap_enhanced_yaml`: line 22→20, col 5→3, end_line 22→20, end_col 15→7 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh2` in `good_functions_findinmap_enhanced_yaml`: line 35→33, col 5→3, end_line 35→33, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LC` in `bad_cross_resource_task10_yaml`: line 13→11, col 5→3, end_line 13→11, end_col 15→5 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyLaunchConfig` in `bad_properties_ebs_yaml`: line 42→40, col 5→3, end_line 42→40, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MaintenanceResource` in `bad_schema_lifecycle_yaml`: line 18→16, col 5→3, end_line 18→16, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: line 553→551, col 4→3, end_line 553→551, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_classic-load-balancer--LoadBalancerStack.template_json`: line 553→551, col 4→3, end_line 553→551, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyFleetLaunchConfig5D7F9801` in `cdk_ecs-cluster--MyFirstEcsCluster.template_json`: line 590→588, col 4→3, end_line 590→588, end_col 16→31 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→57 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→67 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→57 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `appasgLaunchConfig9EFFB3A3` in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json`: line 93→91, col 4→3, end_line 93→91, end_col 16→30 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: line 399→397, col 4→3, end_line 399→397, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyLaunchConfig` in `gh-issues_issue-37_yaml`: line 5→3, col 5→3, end_line 5→3, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_functions_sub_yaml`: line 56→54, col 5→3, end_line 56→54, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_parameters_not_used_parameters_yaml`: line 19→17, col 5→3, end_line 19→17, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_parameters_used_transforms_yaml`: line 22→20, col 5→3, end_line 22→20, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfig` in `good_resources_update_policy_supported_yaml`: line 14→12, col 5→3, end_line 14→12 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `integration_ref-types_yaml`: line 113→111, col 5→3, end_line 113→111, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: line 377→218, col 5→3, end_line 377→218, end_col 15→24 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: line 508→416, col 5→3, end_line 508→416, end_col 15→24 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftEtcdLaunchConfig` in `quickstart_openshift_yaml`: line 901→860, col 5→3, end_line 901→860, end_col 15→28 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftMasterASLaunchConfig` in `quickstart_openshift_yaml`: line 1126→1084, col 5→3, end_line 1126→1084, end_col 15→32 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftNodesLaunchConfig` in `quickstart_openshift_yaml`: line 1455→1414, col 5→3, end_line 1455→1414, end_col 15→29 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. + +## Non-Comparable Source Spans - 110 + +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 19→15, col 25→13, end_line 19→15, end_col 34→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 26→15, col 33→13, end_line 26→15, end_col 42→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 30→15, col 33→13, end_line 30→15, end_col 42→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 54→51, col 9→5, end_line 54→51, end_col 16→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 58→51, col 11→5, end_line 58→51, end_col 18→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 60→51, col 11→5, end_line 60→51, end_col 18→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: col 35→7, end_col 47→14 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: col 49→7, end_col 61→14 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1154** `myInstance1` in `bad_core_conditions_yaml`: col 53→7, end_col 65→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3024** `IamRole1` in `integration_ref-no-value_yaml`: line 22→11, col 11→7, end_line 24→11, end_col 3→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3029** `AliasConflictFirst` in `bad_route53_conditional_scenarios_yaml`: line 20→12, col 9→5, end_line 20→12, end_col 12→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3029** `AliasConflictSecond` in `bad_route53_conditional_scenarios_yaml`: line 41→28, col 9→5, end_line 41→28, end_col 12→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3048** `InvalidDriverInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: line 47→36, col 15→5, end_line 47→36, end_col 24→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3048** `PlacementInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: line 21→15, col 9→5, end_line 21→15, end_col 29→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3502** `MainQueue` in `bad_sqs_fifo_standard_dlq_yaml`: line 11→12, end_line 11→12, end_col 16→20 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3502** `FifoQueue` in `integration_cfn-gather_yaml`: line 40→42, end_line 40→42, end_col 16→20 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3510** `Policy` in `bad_iam_bad_statement_yaml`: col 13→19, end_line 13→10, end_col 7→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 11→19, end_line 26→23, end_col 9→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 13→19, end_line 31→30, end_col 11→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 13→19, end_line 35→31, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3639** `ExplicitRemovedThenValue` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 61→65, col 5→7, end_line 61→65, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3639** `ExplicitValueThenRemoved` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 50→54, col 5→7, end_line 50→54, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3639** `NullThroughput` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 35→44, col 5→7, end_line 35→44, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3687** `mySecurityGroupVpc1` in `bad_functions_ref_yaml`: col 9→19, end_line 17→15, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_functions_ref_yaml`: col 9→19, end_line 20→18, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc2` in `bad_functions_ref_yaml`: col 9→19, end_line 29→27, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupNonVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 28→26, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 37→35, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 41→38, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 44→42, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 47→45, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 51→48, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 31→29, end_col 9→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 33→31, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc2` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 41→39, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc3` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 49→47, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3702** `Pipeline` in `bad_codepipeline_bad_artifact_counts_yaml`: col 15→19, end_line 31→23, end_col 1→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3715** `myInstance2` in `bad_core_conditions_yaml`: line 39→36, col 13→7, end_line 39→36, end_col 24→26 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F0001** `` in `bad_not_cloudformation_yaml`: line 2→missing, col 1→missing, end_line 3→missing, end_col 1→missing — The required top-level section is absent, so there is no authored child token; whole-document and missing-location fallbacks are not equivalent ranges. +- **F0001** `` in `gh-issues_issue-201_json`: line 1→missing, col 1→missing, end_line 7→missing, end_col 2→missing — The required top-level section is absent, so there is no authored child token; whole-document and missing-location fallbacks are not equivalent ranges. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→18, end_line 175→172, end_col 9→19 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→17, end_line 187→184, end_col 9→18 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→18, end_line 194→192, end_col 9→19 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0018** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 21→22, col 38→5, end_line 21→22, end_col 46→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3002** `CloudFrontDistribution` in `bad_conditions_yaml`: line 95→89, col 15→11, end_line 95→89, end_col 27→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3003** `myInstance2` in `bad_core_conditions_yaml`: line 39→36, col 13→7, end_line 44→36, end_col 9→26 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3003** `RootRole` in `bad_generic_yaml`: col 11→21, end_line 90→83, end_col 3→22 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 27→24, end_col 9→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 27→24, end_col 9→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 32→27, end_col 3→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 32→27, end_col 3→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `ModelPackage` in `bad_sagemaker_instance_types_yaml`: col 13→35, end_line 42→37, end_col 3→36 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: line 22→11, col 11→7, end_line 24→11, end_col 3→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_json`: line 564→565, end_line 564→565, end_col 19→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_json`: line 564→565, end_line 564→565, end_col 19→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_yaml`: line 236→237, end_line 236→237 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_yaml`: line 236→237, end_line 236→237 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3012** `CloudFrontDistribution` in `bad_conditions_yaml`: line 93→89, col 19→11, end_line 94→89, end_col 17→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3014** `Policy` in `bad_schema_required_xor_conditional_yaml`: line 17→13, col 7→5, end_line 17→13, end_col 17→15 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3014** `ScalingPolicyBothIds` in `bad_schema_structural_yaml`: line 29→25, col 7→5, end_line 29→25, end_col 17→15 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 25→26, col 33→5, end_line 25→26, end_col 41→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 25→26, col 43→5, end_line 25→26, end_col 52→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3016** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 17→18, col 33→5, end_line 17→18, end_col 46→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3017** `myPolicy2` in `bad_resources_properties_atleastone_yaml`: line 19→17, col 9→7, end_line 21→17, end_col 7→13 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: line 93→89, col 19→11, end_line 94→89, end_col 17→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **I3011** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 17→18, end_line 17→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 10→11, end_line 10→11 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 37→38, end_line 37→38 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 17→18, end_line 17→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 10→11, end_line 10→11 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `NoValuePoliciesWithoutTransform` in `bad_lifecycle_policy_shapes_yaml`: line 62→36, end_line 62→36 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 39→40, end_line 39→40 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 19→20, end_line 19→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 12→13, end_line 12→13 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 39→40, end_line 39→40 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 19→20, end_line 19→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 12→13, end_line 12→13 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_resources_deletionpolicy_yaml`: line 28→33, end_line 28→33 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_resources_updatereplacepolicy_yaml`: line 28→33, end_line 28→33 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_transform_language_extension_yaml`: line 51→55, end_line 51→55 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **W2533** `Function2` in `bad_resources_lambda_required_properties_yaml`: line 22→18, end_line 22→18, end_col 18→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **W3011** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 23→26, col 3→5, end_line 23→26, end_col 22→19 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 15→18, col 3→5, end_line 15→18, end_col 29→19 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 19→22, col 3→5, end_line 19→22, end_col 27→24 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `DynamicObjectPolicy` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 42→38, end_line 42→38 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 17→18, end_line 17→18 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MyIAMUser` in `bad_resources_deletionpolicy_yaml`: line 24→25, end_line 24→25 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 10→11, end_line 10→11 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `UnsupportedIntrinsic` in `bad_resources_deletionpolicy_yaml`: line 30→31, end_line 30→31 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 37→38, end_line 37→38 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 17→18, end_line 17→18 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MyIAMUser` in `bad_resources_updatereplacepolicy_yaml`: line 24→25, end_line 24→25 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 10→11, end_line 10→11 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `UnsupportedIntrinsic` in `bad_resources_updatereplacepolicy_yaml`: line 30→31, end_line 30→31 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: col 47→7, end_col 53→22 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_json`: line 155→156, end_line 155→156, end_col 23→22 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_json`: line 125→126, end_line 125→126, end_col 22→21 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_yaml`: line 101→102, end_line 101→102 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_yaml`: line 93→94, end_line 93→94 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8003** `` in `bad_lifecycle_policy_shapes_yaml`: line 13→6, end_line 13→6 — The transform-wide lifecycle finding is derived from expanded resource state, so the transform source and generated resource anchors are not one-to-one. diff --git a/scripts/snapshots/report_rego_detailed.md b/scripts/snapshots/report_rego_detailed.md index 3a599eac..70c5794e 100644 --- a/scripts/snapshots/report_rego_detailed.md +++ b/scripts/snapshots/report_rego_detailed.md @@ -1,1849 +1,75 @@ # cloudformation-validate vs cfn-lint - Parity Report -> Generated: 2026-08-16 17:50:25 -> Engine: **rego** -> Detail level: **detailed** -> Matching: `(rule_id, resource_id, path)` two-pass with `(rule_id, resource_id)` fallback + aliases -> Templates compared: **664** +> Engine: **rego** +> Detail level: **detailed** +> Candidate pairing: exact normalized anchors first, then same-path SAM logical-ID equivalents, then only explicitly classified alternative anchors. Arbitrary same-rule/resource paths remain unmatched +> Templates compared: **664** ## Terminology | Term | Meaning | |------|---------| -| **TP** (True Positive) | Engine and cfn-lint agree - correct finding | +| **TP** (True Positive) | Engine and cfn-lint emit the same canonical rule/resource/property-path occurrence, or an explicitly proven transform-error identity; severity and span differences remain separately reported | | **FP** (False Positive) | Engine reports it, cfn-lint doesn't - noise or engine bug | -| **EE** (Engine Extra) | Correct engine finding that cfn-lint does not cover | +| **ID** (Intentional Divergence) | Evidence-backed correct finding for an equivalent rule where cfn-lint misses this case | +| **EE** (Engine Extra) | Correct engine finding for a check with no cfn-lint equivalent | +| **RS** (Reference Suppressed) | Engine finding explicitly disabled by template-local cfn-lint configuration; excluded from parity scoring | +| **OOS** (Reference Out of Scope) | Reference finding for an explicitly documented non-comparable check; rendered but excluded from recall | +| **RI** (Reference Incorrect) | cfn-lint finding demonstrably wrong per CloudFormation behavior; excluded from FN and recall | +| **Multiplicity** | Both tools report the same identity but emit a different number of diagnostics; excluded from FP/FN | +| **Representational equivalence** | Different path or endpoint notation proven to identify the same logical node/range | +| **Engine-preferred** | Authored-source evidence shows the engine anchor is more precise or the reference anchor is incorrect | +| **Non-comparable** | Missing, generated, conditional, or multi-endpoint constructs have no single source token shared by both representations | | **FN** (False Negative) | cfn-lint expects it, engine misses it - gap in coverage | -| **Precision** | TP/(TP+FP) - excludes Engine Extra from noise count | -| **Recall** | TP/(TP+FN) - how much of what cfn-lint expects the engine catches | +| **Precision** | TP/(TP+FP) - excludes Intentional Divergence and Engine Extra from noise count | +| **Recall** | TP/(TP+FN) - excludes RI from denominator; how much of what cfn-lint correctly expects the engine catches | | **F1** | Harmonic mean of Precision and Recall - single quality score | ## Summary -| Metric | Value | -|--------|------:| -| True Positives | 3094 | -| False Positives (engine bugs) | 1037 | -| Engine Extra (correct, cfn-lint gap) | 8293 | -| False Negatives (engine misses) | 1290 | -| Precision | 74.90% | -| Recall | 70.57% | -| F1 | 72.67% | -| Unique rules detected | 237 | -| Perfect templates | 487/664 | -| Location mismatches (matched pairs) | 4 | +Counts are diagnostic occurrences unless the row explicitly says templates, rules, or a percentage. + +| Population or calculation | Value | +|---------------------------|------:| +| Findings paired as the same occurrence (TP) | 3998 | +| Unmatched comparable findings emitted only by the engine (FP) | 126 | +| Correct unmatched engine findings for rules with a reference equivalent (ID) | 216 | +| Correct engine findings for rules with no reference equivalent (EE) | 8089 | +| Engine findings disabled by template reference configuration; excluded from scoring (RS) | 4 | +| Reference findings from checks outside comparison scope; excluded from scoring (OOS) | 20 | +| Demonstrably incorrect reference findings; excluded from recall (RI) | 8 | +| Unpaired duplicate occurrences of an otherwise matched identity; excluded from FP/FN (Multiplicity) | 38 | +| Unmatched comparable findings emitted only by the reference (FN) | 325 | +| Precision: TP / (TP + FP) | 96.94% | +| Recall: TP / (TP + FN) | 92.48% | +| F1: harmonic mean of precision and recall | 94.66% | +| Canonical rule IDs represented in TP/FP/ID/EE/FN/RI populations | 231 | +| Templates with no FP, FN, multiplicity, or matched path/span/severity difference | 328/664 | +| Matched occurrences with notation-only path differences (representational) | 84 | +| Matched occurrences where the engine path is more precise or correct | 64 | +| Matched occurrences with no unique shared path anchor | 8 | +| Matched occurrences with endpoint-notation-only span differences (representational) | 499 | +| Matched occurrences where the engine source span is more precise or correct | 135 | +| Matched occurrences with no uniquely comparable source span | 110 | +| Paired occurrences with an unclassified path difference (unresolved) | 0 | +| Paired occurrences with an unclassified start-line difference (unresolved) | 0 | +| Paired occurrences with an unclassified full-span difference (unresolved) | 0 | +| Matched occurrences with different severities | 140 | ### By Severity -| Severity | TP | FP | EE | FN | Precision | Recall | -|----------|---:|---:|---:|---:|----------:|-------:| -| Fatal | 438 | 14 | 87 | 148 | 96.90% | 74.74% | -| Error | 850 | 69 | 12 | 136 | 92.49% | 86.21% | -| Warning | 1178 | 900 | 371 | 954 | 56.69% | 55.25% | -| Info | 628 | 54 | 7823 | 52 | 92.08% | 92.35% | +| Severity | TP | FP | ID | EE | RI | FN | Precision | Recall | +|----------|---:|---:|---:|---:|---:|---:|----------:|-------:| +| Fatal | 429 | 16 | 8 | 63 | 0 | 127 | 96.40% | 77.16% | +| Error | 830 | 89 | 4 | 5 | 8 | 119 | 90.32% | 87.46% | +| Warning | 2069 | 10 | 192 | 198 | 0 | 67 | 99.52% | 96.86% | +| Info | 670 | 11 | 12 | 7823 | 0 | 12 | 98.38% | 98.24% | -## False Negatives - 1290 missed findings across 95 rules +## False Negatives - 325 missed findings across 87 rules These are diagnostics cfn-lint expects but the engine does not report. -### W1020 - 897 missed - Sub isn't needed if it doesn't have a variable defined - -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L61 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource1` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L55 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L952 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L911 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource10` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L946 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9862 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9821 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource100` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9856 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9961 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9920 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource101` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9955 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10060 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10019 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource102` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10054 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10159 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10118 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource103` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10153 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10258 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10217 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource104` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10252 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10357 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10316 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource105` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10351 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10456 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10415 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource106` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10450 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10555 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10514 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource107` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10549 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10654 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10613 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource108` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10648 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10753 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10712 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource109` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10747 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1051 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1010 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource11` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1045 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10852 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10811 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource110` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10846 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L10951 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L10910 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource111` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L10945 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11050 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11009 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource112` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11044 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11149 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11108 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource113` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11143 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11248 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11207 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource114` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11242 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11347 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11306 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource115` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11341 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11446 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11405 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource116` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11440 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11545 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11504 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource117` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11539 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11644 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11603 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource118` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11638 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11743 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11702 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource119` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11737 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1150 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1109 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource12` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1144 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11842 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11801 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource120` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11836 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L11941 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11900 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource121` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L11935 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12040 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L11999 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource122` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12034 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12139 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12098 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource123` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12133 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12238 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12197 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource124` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12232 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12337 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12296 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource125` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12331 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12436 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12395 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource126` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12430 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12535 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12494 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource127` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12529 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12634 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12593 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource128` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12628 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12733 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12692 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource129` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12727 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1249 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1208 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource13` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1243 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12832 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12791 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource130` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12826 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L12931 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12890 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource131` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L12925 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13030 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L12989 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource132` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13024 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13129 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13088 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource133` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13123 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13228 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13187 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource134` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13222 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13327 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13286 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource135` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13321 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13426 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13385 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource136` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13420 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13525 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13484 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource137` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13519 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13624 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13583 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource138` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13618 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13723 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13682 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource139` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13717 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1348 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1307 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource14` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1342 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13822 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13781 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource140` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13816 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L13921 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13880 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource141` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L13915 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14020 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L13979 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource142` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14014 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14119 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14078 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource143` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14113 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14218 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14177 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource144` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14212 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14317 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14276 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource145` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14311 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14416 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14375 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource146` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14410 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14515 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14474 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource147` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14509 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14614 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14573 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource148` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14608 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14713 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14672 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource149` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14707 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1447 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1406 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource15` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1441 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14812 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14771 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource150` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14806 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L14911 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14870 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource151` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L14905 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15010 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L14969 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource152` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15004 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15109 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15068 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource153` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15103 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15208 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15167 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource154` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15202 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15307 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15266 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource155` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15301 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15406 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15365 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource156` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15400 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15505 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15464 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource157` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15499 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15604 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15563 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource158` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15598 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15703 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15662 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource159` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15697 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1546 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1505 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource16` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1540 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15802 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15761 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource160` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15796 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L15901 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15860 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource161` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15895 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16000 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L15959 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource162` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L15994 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16099 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16058 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource163` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16093 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16198 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16157 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource164` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16192 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16297 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16256 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource165` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16291 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16396 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16355 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource166` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16390 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16495 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16454 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource167` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16489 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16594 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16553 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource168` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16588 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16693 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16652 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource169` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16687 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1645 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1604 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource17` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1639 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16792 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16751 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource170` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16786 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16891 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16850 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource171` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16885 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L16990 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L16949 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource172` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L16984 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17089 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17048 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource173` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17083 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17188 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17147 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource174` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17182 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17287 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17246 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource175` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17281 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17386 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17345 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource176` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17380 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17485 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17444 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource177` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17479 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17584 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17543 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource178` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17578 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17683 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17642 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource179` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17677 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1744 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1703 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource18` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1738 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17782 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17741 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource180` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17776 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17881 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17840 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource181` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17875 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L17980 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L17939 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource182` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L17974 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18079 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18038 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource183` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18073 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18178 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18137 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource184` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18172 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18277 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18236 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource185` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18271 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18376 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18335 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource186` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18370 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18475 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18434 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource187` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18469 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18574 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18533 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource188` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18568 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18673 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18632 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource189` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18667 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1843 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1802 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource19` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1837 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18772 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18731 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource190` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18766 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18871 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18830 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource191` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18865 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L18970 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L18929 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource192` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L18964 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19069 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19028 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource193` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19063 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19168 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19127 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource194` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19162 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19267 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19226 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource195` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19261 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19366 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19325 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource196` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19360 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19465 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19424 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource197` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19459 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19564 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19523 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource198` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19558 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19663 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19622 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource199` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19657 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L160 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L119 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource2` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L154 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L1942 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L1901 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource20` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L1936 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19762 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19721 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource200` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19756 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19861 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19820 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource201` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19855 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L19960 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L19919 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource202` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L19954 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20059 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20018 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource203` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20053 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20158 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20117 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource204` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20152 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20257 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20216 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource205` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20251 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20356 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20315 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource206` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20350 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20455 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20414 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource207` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20449 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20554 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20513 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource208` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20548 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20653 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20612 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource209` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20647 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2041 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2000 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource21` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2035 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20752 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20711 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource210` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20746 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20851 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20810 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource211` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20845 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L20950 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L20909 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource212` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L20944 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21049 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21008 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource213` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21043 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21148 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21107 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource214` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21142 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21247 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21206 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource215` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21241 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21346 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21305 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource216` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21340 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21445 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21404 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource217` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21439 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21544 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21503 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource218` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21538 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21643 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21602 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource219` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21637 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2140 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2099 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource22` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2134 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21742 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21701 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource220` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21736 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21841 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21800 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource221` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21835 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L21940 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21899 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource222` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L21934 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22039 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L21998 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource223` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22033 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22138 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22097 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource224` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22132 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22237 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22196 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource225` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22231 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22336 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22295 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource226` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22330 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22435 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22394 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource227` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22429 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22534 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22493 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource228` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22528 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22633 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22592 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource229` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22627 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2239 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2198 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource23` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2233 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22732 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22691 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource230` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22726 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22831 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22790 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource231` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22825 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L22930 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22889 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource232` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L22924 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23029 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L22988 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource233` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23023 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23128 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23087 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource234` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23122 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23227 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23186 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource235` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23221 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23326 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23285 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource236` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23320 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23425 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23384 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource237` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23419 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23524 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23483 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource238` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23518 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23623 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23582 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource239` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23617 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2338 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2297 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource24` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2332 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23722 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23681 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource240` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23716 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23821 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23780 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource241` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23815 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L23920 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23879 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource242` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L23914 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24019 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L23978 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource243` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24013 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24118 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24077 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource244` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24112 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24217 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24176 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource245` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24211 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24316 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24275 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource246` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24310 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24415 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24374 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource247` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24409 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24514 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24473 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource248` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24508 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24613 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24572 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource249` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24607 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2437 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2396 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource25` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2431 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24712 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24671 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource250` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24706 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24811 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24770 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource251` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24805 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L24910 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24869 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource252` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L24904 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25009 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L24968 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource253` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25003 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25108 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25067 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource254` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25102 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25207 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25166 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource255` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25201 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25306 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25265 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource256` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25300 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25405 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25364 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource257` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25399 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25504 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25463 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource258` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25498 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25603 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25562 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource259` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25597 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2536 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2495 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource26` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2530 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25702 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25661 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource260` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25696 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25801 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25760 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource261` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25795 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25900 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25859 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource262` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25894 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L25999 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L25958 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource263` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L25993 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26098 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26057 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource264` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26092 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26197 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26156 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource265` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26191 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26296 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26255 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource266` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26290 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26395 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26354 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource267` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26389 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26494 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26453 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource268` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26488 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26593 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26552 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource269` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26587 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2635 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2594 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource27` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2629 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26692 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26651 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource270` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26686 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26791 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26750 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource271` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26785 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26890 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26849 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource272` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26884 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L26989 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L26948 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource273` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L26983 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27088 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27047 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource274` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27082 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27187 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27146 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource275` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27181 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27286 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27245 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource276` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27280 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27385 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27344 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource277` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27379 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27484 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27443 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource278` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27478 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27583 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27542 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource279` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27577 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2734 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2693 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource28` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2728 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27682 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27641 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource280` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27676 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27781 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27740 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource281` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27775 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27880 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27839 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource282` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27874 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L27979 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L27938 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource283` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L27973 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28078 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28037 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource284` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28072 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28177 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28136 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource285` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28171 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28276 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28235 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource286` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28270 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28375 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28334 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource287` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28369 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28474 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28433 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource288` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28468 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28573 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28532 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource289` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28567 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2833 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2792 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource29` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2827 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28672 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28631 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource290` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28666 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28771 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28730 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource291` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28765 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28870 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28829 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource292` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28864 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L28969 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L28928 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource293` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L28963 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29068 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29027 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource294` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29062 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29167 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29126 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource295` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29161 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29266 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29225 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource296` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29260 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29365 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29324 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource297` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29359 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29464 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29423 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource298` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29458 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L29563 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L29522 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource299` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L29557 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L259 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L218 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource3` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L253 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L2932 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2891 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource30` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L2926 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3031 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L2990 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource31` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3025 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3130 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3089 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource32` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3124 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3229 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3188 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource33` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3223 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3328 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3287 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource34` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3322 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3427 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3386 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource35` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3421 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3526 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3485 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource36` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3520 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3625 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3584 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource37` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3619 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3724 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3683 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource38` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3718 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3823 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3782 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource39` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3817 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L358 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L317 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource4` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L352 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L3922 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3881 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource40` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L3916 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4021 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L3980 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource41` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4015 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4120 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4079 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource42` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4114 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4219 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4178 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource43` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4213 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4318 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4277 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource44` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4312 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4417 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4376 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource45` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4411 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4516 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4475 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource46` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4510 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4615 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4574 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource47` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4609 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4714 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4673 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource48` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4708 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4813 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4772 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource49` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4807 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L457 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L416 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource5` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L451 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L4912 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4871 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource50` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L4906 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5011 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L4970 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource51` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5005 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5110 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5069 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource52` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5104 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5209 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5168 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource53` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5203 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5308 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5267 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource54` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5302 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5407 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5366 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource55` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5401 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5506 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5465 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource56` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5500 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5605 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5564 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource57` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5599 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5704 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5663 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource58` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5698 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5803 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5762 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource59` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5797 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L556 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L515 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource6` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L550 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L5902 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5861 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource60` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5896 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6001 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L5960 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource61` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L5995 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6100 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6059 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource62` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6094 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6199 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6158 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource63` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6193 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6298 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6257 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource64` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6292 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6397 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6356 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource65` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6391 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6496 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6455 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource66` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6490 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6595 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6554 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource67` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6589 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6694 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6653 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource68` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6688 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6793 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6752 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource69` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6787 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L655 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L614 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource7` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L649 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6892 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6851 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource70` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6886 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L6991 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L6950 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource71` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L6985 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7090 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7049 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource72` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7084 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7189 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7148 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource73` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7183 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7288 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7247 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource74` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7282 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7387 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7346 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource75` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7381 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7486 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7445 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource76` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7480 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7585 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7544 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource77` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7579 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7684 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7643 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource78` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7678 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7783 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7742 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource79` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7777 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L754 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L713 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource8` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L748 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7882 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7841 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource80` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7876 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L7981 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L7940 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource81` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L7975 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8080 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8039 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource82` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8074 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8179 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8138 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource83` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8173 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8278 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8237 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource84` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8272 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8377 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8336 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource85` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8371 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8476 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8435 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource86` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8470 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8575 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8534 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource87` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8569 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8674 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8633 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource88` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8668 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8773 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8732 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource89` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8767 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L853 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L812 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource9` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L847 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8872 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8831 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource90` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8866 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L8971 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L8930 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource91` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L8965 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9070 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9029 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource92` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9064 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9169 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9128 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource93` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9163 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9268 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9227 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource94` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9262 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9367 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9326 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource95` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9361 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9466 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9425 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource96` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9460 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9565 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9524 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource97` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9559 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9664 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9623 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource98` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9658 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub` L9763 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub` L9722 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables -- **W1020** `Resource99` → `Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub` L9757 in `bad_limit_size_yaml` - > 'Fn::Sub' isn't needed because there are no variables - -### F3003 - 61 missed - Required Resource properties are missing +### F3003 - 58 missed - Required Resource properties are missing - **F3003** (cfn-lint: E3003) `MissingTemplateSourceInOneWorld` → `Properties` L7 in `bad_F3018_conditional_required_novalue_yaml` > 'TemplateBody' is a required property @@ -1851,12 +77,6 @@ These are diagnostics cfn-lint expects but the engine does not report. > 'TemplateURL' is a required property - **F3003** (cfn-lint: E3003) `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1` L46-48 in `bad_core_conditions_yaml` > 'DeviceName' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'PolicyName' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'Roles' is a required property -- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` - > 'Users' is a required property - **F3003** (cfn-lint: E3003) `PolicyEmptyAction` → `Properties` L15 in `bad_resources_iam_identity_policy_e3510_yaml` > 'Groups' is a required property - **F3003** (cfn-lint: E3003) `PolicyEmptyAction` → `Properties` L15 in `bad_resources_iam_identity_policy_e3510_yaml` @@ -1968,92 +188,32 @@ These are diagnostics cfn-lint expects but the engine does not report. - **F3003** (cfn-lint: E3003) `MyApi` → `Properties` L8 in `lsp_test-template_yaml` > 'StageName' is a required property -### I1022 - 42 missed - Use Sub instead of Join - -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join.0` L870 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join.0` L888 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L933 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L951 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L994 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1011 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/scripts/watchmaker-install.sh.content.Fn::Join.0` L1039 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join.0` L1102 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0` L1120 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0` L1138 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0` L1156 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L1174 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1192 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0` L1227 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0` L1245 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0` L1263 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0` L1281 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0` L1299 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join.0` L1317 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.Tags.0.Value.Fn::Join.0` L1441 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.88.Fn::If.1.Fn::Join.0` L1597 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.89.Fn::If.1.Fn::Join.0` L1614 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.98.Fn::If.1.Fn::Join.0` L1643 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `WatchmakerInstance` → `Properties.UserData.Fn::Base64.Fn::Join.1.99.Fn::If.1.Fn::Join.0` L1660 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0` L245 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L256 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/cfn-hup.conf.content.Fn::Join.0` L265 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.0` L285 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.0` L325 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigApp` → `Properties.UserData.Fn::Base64.Fn::Join.0` L389 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L442 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Metadata.AWS::CloudFormation::Init.nginx.files./tmp/nginx/default.conf.content.Fn::Join.0` L451 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rAutoScalingConfigWeb` → `Properties.UserData.Fn::Base64.Fn::Join.0` L521 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L505 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Properties.UserData.Fn::Base64.Fn::Join.0` L528 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `AnsibleConfigServer` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L305 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `AnsibleConfigServer` → `Metadata.AWS::CloudFormation::Init.SetPrivateKey.files./root/.ssh/id_rsa.content.Fn::Join.0` L328 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftEtcdLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L873 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftMasterASLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L1098 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `OpenShiftNodesLaunchConfig` → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0` L1427 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0` L706 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** `rMgmtBastionInstance` → `Properties.UserData.Fn::Base64.Fn::Join.0` L660 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter +### W1030 - 12 missed - Validate the values that come from a Ref function + +- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` + > {'Ref': 'BucketNameChoice'} is longer than 63 when 'Ref' is resolved +- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` + > {'Ref': 'BucketNameChoice'} is not a 'AWS::S3::Bucket.Name' with pattern '^(?![.\\-])(?!.*\\.\\.)(?!.*\\-\\.)(?!.*\\.\\-)[a-z0-9.\\-]{3,63}(? {'Ref': 'AWS::StackId'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] when 'Ref' is resolved +- **W1030** `StackIdPolicies` → `UpdateReplacePolicy.Ref` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` + > {'Ref': 'AWS::StackId'} is not one of ['Delete', 'Retain'] when 'Ref' is resolved +- **W1030** `PolicyDynamicActionBadEffect` → `Properties.PolicyDocument.Statement.0.Action.Ref` L82 in `bad_resources_iam_identity_policy_e3510_yaml` + > 'arn' is not one of ['a2c', 'a4b', 'access-analyzer', 'account', 'acm', 'acm-pca', 'aco-automation', 'action-recommendations', 'activate', 'agentaccess-mcp', 'aidevops', 'aiops', 'airflow', 'airflow-s +- **W1030** `rNatInstanceEni` → `Properties.GroupSet.0.Ref` L82 in `quickstart_nat-instance_json` + > {'Ref': 'pSecurityGroupSSHFromVpc'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.GroupSet.1.Ref` L84 in `quickstart_nat-instance_json` + > {'Ref': 'pSecurityGroupVpcNat'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` + > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^[\\.\\-_\\/#A-Za-z0-9]{1,512}\\Z' when 'Ref' is resolved +- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` + > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^subnet-(([0-9A-Fa-f]{8})|([0-9A-Fa-f]{17}))$' when 'Ref' is resolved +- **W1030** → `Parameters.pSecurityAlarmTopic.Default` L198 in `quickstart_nist_application_yaml` + > {'Ref': 'pSecurityAlarmTopic'} does not match '^(arn:(aws[A-Za-z\\-]*?|\\*):[^:]+:[^:]*(:(?:\\d{12}|\\*|aws)?:.+|)|\\*)$' when 'Ref' is resolved at 'Resources/rPostProcInstanceRole/Properties/Policies +- **W1030** `rAutoScalingConfigApp` → `Properties.KeyName.Ref` L383 in `quickstart_nist_application_yaml` + > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved +- **W1030** `rAutoScalingConfigWeb` → `Properties.KeyName.Ref` L515 in `quickstart_nist_application_yaml` + > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved ### W1031 - 12 missed - Validate the values that come from a Fn::Sub function @@ -2107,28 +267,51 @@ These are diagnostics cfn-lint expects but the engine does not report. - **F3014** (cfn-lint: E3014) `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1.VirtualName` L48 in `good_core_conditions_yaml` > Only one of ['VirtualName', 'Ebs', 'NoDevice'] is a required property -### W1030 - 10 missed - Validate the values that come from a Ref function +### E8004 - 10 missed - Check Fn::And structure for validity + +- **E8004** → `Conditions.IsHighAvailability.Fn::And.1.Condition` L11 in `bad_E8007_condition_undefined_in_expr_yaml` + > 'DoesNotExist' is not one of ['IsProd', 'IsHighAvailability'] +- **E8004** → `Conditions.TestAndBadArray.Fn::And.0` L20 in `bad_conditions_and_yaml` + > 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.1` L20 in `bad_conditions_and_yaml` + > 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.0` L19 in `bad_conditions_and_yaml` + > {'Condition': 'TestAndToMany', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.1` L19 in `bad_conditions_and_yaml` + > {'Bad': 'TestAndToMany'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.0` L11 in `bad_conditions_condition_functions_json` + > 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And.1` L11 in `bad_conditions_condition_functions_json` + > 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.0` L14 in `bad_conditions_condition_functions_json` + > {'Condition': 'TestAndString', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And.1` L15 in `bad_conditions_condition_functions_json` + > {'Bad': 'TestAndString'} is not of type 'boolean' +- **E8004** → `Conditions.isPrimaryAndProduction.Fn::And.1.Condition` L11 in `bad_core_conditions_missing_yaml` + > 'isPrimary' is not one of ['isProduction', 'isPrimaryAndProduction'] + +### F3012 - 10 missed - Check resource properties values -- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` - > {'Ref': 'BucketNameChoice'} is longer than 63 when 'Ref' is resolved -- **W1030** `Bucket` → `Properties.BucketName.Ref` L14 in `bad_W9006_every_allowed_value_too_long_json` - > {'Ref': 'BucketNameChoice'} is not a 'AWS::S3::Bucket.Name' with pattern '^(?![.\\-])(?!.*\\.\\.)(?!.*\\-\\.)(?!.*\\.\\-)[a-z0-9.\\-]{3,63}(? 'arn' is not one of ['a2c', 'a4b', 'access-analyzer', 'account', 'acm', 'acm-pca', 'aco-automation', 'action-recommendations', 'activate', 'agentaccess-mcp', 'aidevops', 'aiops', 'airflow', 'airflow-s -- **W1030** `rNatInstanceEni` → `Properties.GroupSet.0.Ref` L82 in `quickstart_nat-instance_json` - > {'Ref': 'pSecurityGroupSSHFromVpc'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.GroupSet.1.Ref` L84 in `quickstart_nat-instance_json` - > {'Ref': 'pSecurityGroupVpcNat'} is not a 'AWS::EC2::SecurityGroup.Id' with pattern '^sg-([a-fA-F0-9]{8}|[a-fA-F0-9]{17})$' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` - > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^[\\.\\-_\\/#A-Za-z0-9]{1,512}\\Z' when 'Ref' is resolved -- **W1030** `rNatInstanceEni` → `Properties.SubnetId.Ref` L79 in `quickstart_nat-instance_json` - > {'Ref': 'pDMZSubnetA'} is not a 'AWS::EC2::Subnet.Id' with pattern '^subnet-(([0-9A-Fa-f]{8})|([0-9A-Fa-f]{17}))$' when 'Ref' is resolved -- **W1030** → `Parameters.pSecurityAlarmTopic.Default` L198 in `quickstart_nist_application_yaml` - > {'Ref': 'pSecurityAlarmTopic'} does not match '^(arn:(aws[A-Za-z\\-]*?|\\*):[^:]+:[^:]*(:(?:\\d{12}|\\*|aws)?:.+|)|\\*)$' when 'Ref' is resolved at 'Resources/rPostProcInstanceRole/Properties/Policies -- **W1030** `rAutoScalingConfigApp` → `Properties.KeyName.Ref` L383 in `quickstart_nist_application_yaml` - > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved -- **W1030** `rAutoScalingConfigWeb` → `Properties.KeyName.Ref` L515 in `quickstart_nist_application_yaml` - > {'Ref': 'pEC2KeyPair'} is shorter than 1 when 'Ref' is resolved +- **F3012** (cfn-lint: E3012) `ExampleLambda` → `Properties.Environment.Variables` L14 in `bad_resources_properties_primitive_types_map_yaml` + > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' +- **F3012** (cfn-lint: E3012) `ExampleLambda1` → `Properties.Environment.Variables.Fn::If.1` L34-37 in `bad_resources_properties_primitive_types_map_yaml` + > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' +- **F3012** (cfn-lint: E3012) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` + > [{'AttributeName': 'String', 'KeyType': 'String'}] is not of type 'object', 'string' +- **F3012** (cfn-lint: E3012) `DynamicProperties` → `Properties` L250 in `gh-issues_issue-235_yaml` + > '{{resolve:ssm:/rds/properties}}' is not of type object +- **F3012** (cfn-lint: E3012) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` + > 'EDGE' is not of type 'object' +- **F3012** (cfn-lint: E3012) `App2` → `Properties.Location` L10 in `good_transform_applications_location_yaml` + > {'ApplicationId': '1'} is not of type 'string' +- **F3012** (cfn-lint: E3012) `CloudFront1` → `Properties.Ref` L39 in `integration_ref-no-value_yaml` + > {'Ref': 'AWS::NoValue'} is not of type object +- **F3012** (cfn-lint: E3012) `IamRole2` → `Properties.Ref` L26 in `integration_ref-no-value_yaml` + > {'Ref': 'AWS::NoValue'} is not of type object +- **F3012** (cfn-lint: E3012) `Database` → `Properties.MultiAZ` L679 in `lsp_comprehensive_json` + > {'Condition': 'IsProduction'} is not of type 'boolean' +- **F3012** (cfn-lint: E3012) `Database` → `Properties.MultiAZ` L280 in `lsp_comprehensive_yaml` + > {'Condition': 'IsProduction'} is not of type 'boolean' ### F0000 - 9 missed - Parsing error found when parsing the template @@ -2154,121 +337,24 @@ but found another document - **F0000** (cfn-lint: E0000) L12 in `bad_template_yaml` > did not find expected key -### F3016 - 9 missed - Check DeletionPolicy values for Resources - -- **F3016** (cfn-lint: E3035) `DynamicObjectPolicy` → `DeletionPolicy` L40 in `bad_lifecycle_conditional_invalid_policies_yaml` - > {'Value': {'Ref': 'Policy'}} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ListPolicies` → `DeletionPolicy` L10 in `bad_lifecycle_policy_shapes_yaml` - > ['Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ObjectPolicies` → `DeletionPolicy` L15 in `bad_lifecycle_policy_shapes_yaml` - > {'Value': 'Retain'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `InvalidMapping` → `DeletionPolicy` L44 in `bad_resources_deletionpolicy_yaml` - > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] -- **F3016** (cfn-lint: E3035) `PolicyList` → `DeletionPolicy` L17 in `bad_resources_deletionpolicy_yaml` - > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] -- **F3016** (cfn-lint: E3035) `UnsupportedIntrinsic` → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` - > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `CorrelatedConditionalPolicies` → `DeletionPolicy.Fn::If.2` L50 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L55 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- **F3016** (cfn-lint: E3035) `ImpossibleResourcePolicies` → `DeletionPolicy` L61 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] - -### E0002 - 8 missed - Error processing rule on the template - -- **E0002** L1 in `bad_core_E3001_resource_shape_yaml` - > Unknown exception while processing rule E1029: "'str_node' object has no attribute 'get'" -- **E0002** L1 in `bad_core_conditions_list_yaml` - > Unknown exception while processing rule W8001: "'list_node' object has no attribute 'items'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule E3007: "argument of type 'NoneType' is not iterable" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W2001: "'NoneType' object has no attribute 'keys'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W2501: "'NoneType' object has no attribute 'keys'" -- **E0002** L1 in `bad_core_sections_not_objects_yaml` - > Unknown exception while processing rule W7001: "'list_node' object has no attribute 'items'" -- **E0002** L1 in `bad_functions_foreach_no_transform_yaml` - > Unknown exception while processing rule E1029: "'list_node' object has no attribute 'get'" -- **E0002** L1 in `gh-issues_issue-235_yaml` - > Unknown exception while processing rule I3100: "'str_node' object has no attribute 'get'" - -### E3043 - 8 missed - Validate parameters for in a nested stack - -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "One" is not specified when condition "IsUsEast1" is False and when condition "IsUsWest2" is True -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified when condition "IsUsEast1" is False and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified when condition "IsUsEast1" is True and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsEast1" is False and when condition "IsUsWest2" is False -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsEast1" is False and when condition "IsUsWest2" is True -- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Zero" doesn't exist in nested stack template when condition "IsUsEast1" is True and when condition "IsUsWest2" is False -- **E3043** `StackNormal` → `Properties.Parameters` L10 in `bad_resources_cloudformation_stacks_yaml` - > Nested stack template parameter "Two" is not specified at Resources/StackNormal/Properties/Parameters -- **E3043** `StackNormal` → `Properties.Parameters.Three` L12 in `bad_resources_cloudformation_stacks_yaml` - > Specified parameter "Three" doesn't exist in nested stack template at Resources/StackNormal/Properties/Parameters/Three - -### F0018 - 8 missed - Check UpdateReplacePolicy values for Resources - -- **F0018** (cfn-lint: E3036) `ListPolicies` → `UpdateReplacePolicy` L11 in `bad_lifecycle_policy_shapes_yaml` - > ['Retain'] is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ObjectPolicies` → `UpdateReplacePolicy` L17 in `bad_lifecycle_policy_shapes_yaml` - > {'Value': 'Retain'} is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `InvalidMapping` → `UpdateReplacePolicy` L44 in `bad_resources_updatereplacepolicy_yaml` - > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'Snapshot'] -- **F0018** (cfn-lint: E3036) `PolicyList` → `UpdateReplacePolicy` L17 in `bad_resources_updatereplacepolicy_yaml` - > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'Snapshot'] -- **F0018** (cfn-lint: E3036) `UnsupportedIntrinsic` → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` - > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `CorrelatedConditionalPolicies` → `UpdateReplacePolicy.Fn::If.2` L51 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L56 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] -- **F0018** (cfn-lint: E3036) `ImpossibleResourcePolicies` → `UpdateReplacePolicy` L62 in `good_lifecycle_intrinsic_scenarios_yaml` - > 'InvalidReplacement' is not one of ['Delete', 'Retain'] - -### F2015 - 8 missed - Default value is within parameter constraints - -- **F2015** (cfn-lint: E2015) → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLSingleElementNotAllowed.Default` L7 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLWhitespaceTrimsToInvalid.Default` L28 in `bad_parameters_F2012_cdl_default_split_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLAllowedValues.Default` L47 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues -- **F2015** (cfn-lint: E2015) → `Parameters.myAllowedValue.Default` L18 in `bad_parameters_default_yaml` - > Default should be a value within AllowedValues - -### F3012 - 8 missed - Check resource properties values +### W1001 - 8 missed - Ref/GetAtt to resource that is available when conditions are applied -- **F3012** (cfn-lint: E3012) `ExampleLambda` → `Properties.Environment.Variables` L14 in `bad_resources_properties_primitive_types_map_yaml` - > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' -- **F3012** (cfn-lint: E3012) `ExampleLambda1` → `Properties.Environment.Variables.Fn::If.1` L34-37 in `bad_resources_properties_primitive_types_map_yaml` - > [{'Key': 'A', 'Value': 'B'}, {'C': 'd'}] is not of type 'object' -- **F3012** (cfn-lint: E3012) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` - > [{'AttributeName': 'String', 'KeyType': 'String'}] is not of type 'object', 'string' -- **F3012** (cfn-lint: E3012) `DynamicProperties` → `Properties` L250 in `gh-issues_issue-235_yaml` - > '{{resolve:ssm:/rds/properties}}' is not of type object -- **F3012** (cfn-lint: E3012) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` - > 'EDGE' is not of type 'object' -- **F3012** (cfn-lint: E3012) `App2` → `Properties.Location` L10 in `good_transform_applications_location_yaml` - > {'ApplicationId': '1'} is not of type 'string' -- **F3012** (cfn-lint: E3012) `CloudFront1` → `Properties.Ref` L39 in `integration_ref-no-value_yaml` - > {'Ref': 'AWS::NoValue'} is not of type object -- **F3012** (cfn-lint: E3012) `IamRole2` → `Properties.Ref` L26 in `integration_ref-no-value_yaml` - > {'Ref': 'AWS::NoValue'} is not of type object +- **W1001** `AMIIDLookup` → `Properties.Role.Fn::If.1` L102 in `bad_core_conditions_yaml` + > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Resources/AMIIDLookup/Properties/Role/Fn::If/1 +- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `bad_core_conditions_yaml` + > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 +- **W1001** → `Outputs.lambdaArn.Value` L63 in `bad_functions_relationship_conditions_yaml` + > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Outputs/lambdaArn/Value +- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `good_core_conditions_yaml` + > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L586-588 in `lsp_comprehensive_json` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L589-591 in `lsp_comprehensive_json` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L243 in `lsp_comprehensive_yaml` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde +- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L243 in `lsp_comprehensive_yaml` + > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId ### E1021 - 7 missed - Base64 validation of parameters @@ -2287,22 +373,22 @@ but found another document - **E1021** `LaunchConfiguration` → `Properties.UserData.Fn::Base64.Fn::Sub` L27 in `good_parameters_used_transforms_yaml` > {'Fn::Transform': {'Name': 'DynamicUserData'}} is not of type 'array', 'string' -### W1001 - 7 missed - Ref/GetAtt to resource that is available when conditions are applied - -- **W1001** `AMIIDLookup` → `Properties.Role.Fn::If.1` L102 in `bad_core_conditions_yaml` - > GetAtt to resource 'LambdaExecutionRole' that may not be available when condition 'isPrimary' is False at Resources/AMIIDLookup/Properties/Role/Fn::If/1 -- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `bad_core_conditions_yaml` - > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 -- **W1001** `myInstance1` → `Properties.SubnetId.Fn::If.1` L30 in `good_core_conditions_yaml` - > Ref to resource 'mySubnet' that may not be available when condition 'isPrimaryAndProduction' is False and when condition 'isDevelopment' is True at Resources/myInstance1/Properties/SubnetId/Fn::If/1 -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L587-589 in `lsp_comprehensive_json` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L590-592 in `lsp_comprehensive_json` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.1` L244 in `lsp_comprehensive_yaml` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is True at Resources/AutoScalingGroup/Properties/VPCZoneIde -- **W1001** `AutoScalingGroup` → `Properties.VPCZoneIdentifier.0.Fn::If.2` L244 in `lsp_comprehensive_yaml` - > Ref to resource 'PublicSubnet' that may not be available when condition 'IsProductionOrStaging' is False and when condition 'HasMultipleAZs' is False at Resources/AutoScalingGroup/Properties/VPCZoneId +### E8003 - 7 missed - Check Fn::Equals structure for validity + +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals.0` L24 in `bad_conditions_condition_functions_json` + > [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals.1` L25 in `bad_conditions_condition_functions_json` + > {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals.0` L11 in `bad_conditions_equals_yaml` + > [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals.1` L11 in `bad_conditions_equals_yaml` + > {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.TestWrongType.Fn::Equals.1` L12 in `bad_conditions_equals_yaml` + > ['Not a List'] is not of type 'string' +- **E8003** → `Conditions.ToManyFunctions.Fn::Equals.1` L19-21 in `bad_conditions_equals_yaml` + > {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' +- **E8003** → `Conditions.primaryRegion.Fn::Equals.0` L4 in `bad_functions_import_value_yaml` + > {'Fn::ImportValue': 'PrimaryRegion'} is not of type 'string' ### E3530 - 6 missed - Validate IAM trust polices @@ -2334,18 +420,33 @@ but found another document - **W1036** `lambdaMap1` → `Properties.SecurityGroupIngress.Fn::GetAZs` L198 in `bad_generic_yaml` > 'us-east-1f' is not of type 'object' when 'Fn::GetAZs' is resolved -### E1001 - 5 missed - Basic CloudFormation Template Configuration - -- **E1001** L1 in `bad_empty_file_yaml` - > 'Resources' is a required property -- **E1001** L2-3 in `bad_not_cloudformation_yaml` - > 'Resources' is a required property -- **E1001** → `Globals` L2 in `bad_sam_globals_not_dict_yaml` - > 'notadict' is not of type 'object' -- **E1001** → `AWSTemplateFormatVersion` L1 in `bad_templates_base_null_yaml` - > None is not one of ['2010-09-09'] -- **E1001** L1-7 in `gh-issues_issue-201_json` - > 'Resources' is a required property +### W2506 - 6 missed - Check if ImageId Parameters have the correct type + +- **W2506** → `Parameters.SsmStringImageParam.Type` L8 in `gh-issues_issue-34_json` + > 'AWS::SSM::Parameter::Value' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pNatAmi.Type` L49 in `quickstart_nat-instance_json` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pAppAmi.Type` L128 in `quickstart_nist_application_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pWebServerAMI.Type` L216 in `quickstart_nist_application_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pBastionAmi.Type` L195 in `quickstart_nist_vpc_management_yaml` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] +- **W2506** → `Parameters.pBastionAmi.Type` L136 in `quickstart_vpc-management_json` + > 'String' is not one of ['AWS::EC2::Image::Id', 'AWS::SSM::Parameter::Value'] + +### E1005 - 5 missed - Validate Transform configuration + +- **E1005** → `Transform.key` L3 in `bad_templates_base_yaml` + > Additional properties are not allowed ('key' was unexpected) +- **E1005** → `Transform.1` L2 in `bad_templates_transform_invalid_entries_yaml` + > 42 is not of type 'string', 'array', 'object' +- **E1005** → `Transform.1` L2 in `bad_templates_transform_invalid_entries_yaml` + > 42 is not of type 'string', 'object' +- **E1005** → `Transform.2.Parameters` L6 in `bad_templates_transform_invalid_entries_yaml` + > 'not-an-object' is not of type 'object' +- **E1005** → `Transform.3.Name` L7 in `bad_templates_transform_invalid_entries_yaml` + > ['AWS::Include'] is not of type 'string' ### E3024 - 5 missed - Validate tag configuration @@ -2373,31 +474,18 @@ but found another document - **E3026** `ThirdReplicationGroup` → `Properties.CacheParameterGroupName.Ref.NumCacheClusters` L77 in `bad_resources_elasticache_cache_cluster_failover_yaml` > "NumCacheClusters" must be greater than one when creating a cluster at Resources/ThirdReplicationGroup/Properties/CacheParameterGroupName/Ref/NumCacheClusters -### E3048 - 5 missed - Validate ECS Fargate tasks have required properties and values - -- **E3048** `ThirtyTwoVcpuUnsupportedSixtyFourGb` → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' -- **E3048** `ThirtyTwoVcpuUnsupportedTwoFortyGb` → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > 32768 is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] -- **E3048** `ThirtyTwoVcpuOneTwentyGb` → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` - > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] -- **E3048** `ThirtyTwoVcpuSixtyGb` → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` - > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' -- **E3048** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` - > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] - -### F0013 - 5 missed - Conditions have appropriate properties +### F0018 - 5 missed - Check UpdateReplacePolicy values for Resources -- **F0013** (cfn-lint: E8001) → `Conditions.NullCondition` L51 in `bad_conditions_yaml` - > None is not of type 'boolean' -- **F0013** (cfn-lint: E8001) → `Conditions` L6 in `bad_core_conditions_list_yaml` - > [{'isProduction': {'Fn::Equals': [{'Ref': 'myEnvironment'}, 'prod']}}] is not of type 'object' -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.AlarmName.Fn::If.0` L172-175 in `lsp_condition-usage_yaml` - > {'Fn::And': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB' -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.Threshold.Fn::If.0` L184-187 in `lsp_condition-usage_yaml` - > {'Fn::Or': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', -- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.TreatMissingData.Fn::If.0` L192-194 in `lsp_condition-usage_yaml` - > {'Fn::Not': [{'Condition': 'IsProduction'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', 'NotProduction', 'ComplexCondition'] +- **F0018** (cfn-lint: E3036) `CorrelatedConditionalPolicies` → `UpdateReplacePolicy.Fn::If.2` L89 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L94 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `ImpossibleResourcePolicies` → `UpdateReplacePolicy` L100 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidReplacement' is not one of ['Delete', 'Retain'] +- **F0018** (cfn-lint: E3036) `JoinPolicies` → `UpdateReplacePolicy` L83 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Dele', 'e']]} is not of type 'string' +- **F0018** (cfn-lint: E3036) `JoinPolicies` → `UpdateReplacePolicy` L83 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Dele', 'e']]} is not one of ['Delete', 'Retain'] ### F3006 - 5 missed - Validate the CloudFormation resource type @@ -2412,27 +500,31 @@ but found another document - **F3006** (cfn-lint: E3006) `UnbundledAmznType` → `Type` L14 in `good_unknown_resource_types_ignored_yaml` > Resource type 'AMZN::Internal::UnbundledType' does not exist in 'us-east-1' -### E2001 - 4 missed - Parameters have appropriate properties +### F3016 - 5 missed - Check DeletionPolicy values for Resources -- **E2001** → `Parameters.NullParamType` L35 in `bad_parameters_configuration_yaml` - > 'Type' is a required property -- **E2001** → `Parameters.allowedValuesAListofBadTypes.AllowedValues.0` L10-11 in `bad_parameters_configuration_yaml` - > {'key': 'value'} is not of type 'string' -- **E2001** → `Parameters.maxLengthIsNotString.MaxLength` L16 in `bad_parameters_configuration_yaml` - > 'MaxLength' is not one of ['AllowedValues', 'ConstraintDescription', 'Default', 'Description', 'MaxValue', 'MinValue', 'NoEcho', 'Type'] -- **E2001** → `Parameters.myInvalidParameter.NotType` L27 in `bad_parameters_configuration_yaml` - > Additional properties are not allowed ('NotType' was unexpected) +- **F3016** (cfn-lint: E3035) `CorrelatedConditionalPolicies` → `DeletionPolicy.Fn::If.2` L88 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L93 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `ImpossibleResourcePolicies` → `DeletionPolicy` L99 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'InvalidDeletion' is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** (cfn-lint: E3035) `JoinPolicies` → `DeletionPolicy` L82 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Re', 'ain']]} is not of type 'string' +- **F3016** (cfn-lint: E3035) `JoinPolicies` → `DeletionPolicy` L82 in `good_lifecycle_intrinsic_scenarios_yaml` + > {'Fn::Join': ['t', ['Re', 'ain']]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -### E3001 - 4 missed - Basic CloudFormation Resource Check +### W1028 - 5 missed - Check Fn::If has a path that cannot be reached -- **E3001** `NonObjectBody` → `Resources.NonObjectBody` L8 in `bad_core_E3001_resource_shape_yaml` - > Exception "'str_node' object has no attribute 'get'" raised while validating 'cfnLint' -- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` - > True is not one of ['*'] -- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` - > True is not valid under any of the given schemas -- **E3001** `ImpossibleResourcePolicies` → `Resources.ImpossibleResourcePolicies` L58 in `good_lifecycle_intrinsic_scenarios_yaml` - > Exception "When setting condition 'Never' to True" raised while validating 'cfnLint' +- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Listeners.0.Fn::If.2` L161-164 in `bad_generic_yaml` + > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True +- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Tags.0.Fn::If.2` L178-180 in `bad_generic_yaml` + > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True +- **W1028** `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L93 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True +- **W1028** `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L94 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True +- **W1028** `ImpossibleCreationPolicyBranch` → `CreationPolicy.Fn::If.1` L49 in `good_lifecycle_intrinsic_scenarios_yaml` + > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True ### E3023 - 4 missed - Validate Route53 RecordSets @@ -2445,6 +537,17 @@ but found another document - **E3023** `GroupUnreachableInvalid` → `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` L61 in `good_route53_conditional_record_arrays_yaml` > 'unreachable-group-invalid' is not a 'ipv4' +### E3055 - 4 missed - Check CreationPolicy values for Resources + +- **E3055** `ScalarCreationPolicy` → `CreationPolicy` L8 in `bad_core_resource_attributes_yaml` + > 'invalid' is not of type 'object' +- **E3055** `CreationConditionalInvalid` → `CreationPolicy.Fn::If.2` L51 in `bad_lifecycle_policy_shapes_yaml` + > 'invalid' is not of type 'object' +- **E3055** `CorrelatedCreationPolicy` → `CreationPolicy.Fn::If.2` L45 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'invalid' is not of type 'object' +- **E3055** `ImpossibleCreationPolicyBranch` → `CreationPolicy.Fn::If.1` L49 in `good_lifecycle_intrinsic_scenarios_yaml` + > 'invalid' is not of type 'object' + ### E3513 - 4 missed - Validate ECR repository policy - **E3513** `ecr1` → `Properties.RepositoryPolicyText.Statement.0.BadProperty` L16 in `bad_resources_iam_resource_policy_yaml` @@ -2478,17 +581,6 @@ but found another document - **E3724** → `Globals.Function.CodeUri` L9 in `good_parameters_used_transforms_yaml` > {'Bucket': 'somebucket', 'Key': {'Fn::Sub': 'lambda/code/lambda-${Version}-shaded.jar'}} is not of type 'string' -### F1020 - 4 missed - Ref validation of value - -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > {'Ref': 'BadType'} is not of type 'string' -- **F1020** (cfn-lint: E1020) → `Conditions.TagEnvironments.Fn::Not.0.Fn::Equals.1` L15 in `bad_conditions_equals_yaml` - > {'Ref': 'Environments'} is not of type 'string' -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.Tags.0.Value.Ref` L34 in `lsp_constants_json` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] -- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.Tags.0.Value.Ref` L21 in `lsp_constants_yaml` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] - ### F6101 - 4 missed - Validate that outputs values are a string - **F6101** (cfn-lint: E6101) → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251-256 in `lsp_condition-usage_yaml` @@ -2511,17 +603,6 @@ but found another document - **I3010** `Memory` → `Properties.MemoryStrategies.3` L36-49 in `gh-issues_issue-38_json` > 'Resources/Memory/Properties/MemoryStrategies/3' is approaching the limit of 1 properties -### W1028 - 4 missed - Check Fn::If has a path that cannot be reached - -- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Listeners.0.Fn::If.2` L161-164 in `bad_generic_yaml` - > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True -- **W1028** `conditionLoadBalancer` → `Properties.Fn::If.1.Tags.0.Fn::If.2` L178-180 in `bad_generic_yaml` - > ['Fn::If', 2] is not reachable. When setting condition 'IsProduction' to False from current status True -- **W1028** `ImpossibleBranchPolicies` → `DeletionPolicy.Fn::If.1` L55 in `good_lifecycle_intrinsic_scenarios_yaml` - > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True -- **W1028** `ImpossibleBranchPolicies` → `UpdateReplacePolicy.Fn::If.1` L56 in `good_lifecycle_intrinsic_scenarios_yaml` - > ['Fn::If', 1] is not reachable. When setting condition 'Never' to True - ### W1032 - 4 missed - Validate the values that come from a Fn::Join function - **W1032** `Bucket2` → `Properties.BucketName.Fn::Join` L42 in `lsp_parameter_usage_json` @@ -2535,21 +616,21 @@ but found another document ### E1011 - 3 missed - FindInMap validation of configuration -- **E1011** `Bucket` → `Properties.Tags.0.Value.Fn::FindInMap.0` L9 in `bad_findinmap_bad_yaml` - > 'NonExistentMap' is not one of [] - **E1011** `Topic` → `Properties.DisplayName.Fn::FindInMap` L15 in `bad_functions_findinmap_default_value_no_transform_yaml` > expected maximum item count: 3, found: 4 - **E1011** `lambdaMap2` → `Properties.SecurityGroupIngress.0` L206-207 in `bad_generic_yaml` > {'Fn::FindInMap': ['runtime', {'Ref': 'AWS::Region'}, 'production']} is not of type 'object' +- **E1011** `CreationRootFindInMap` → `CreationPolicy` L34 in `bad_lifecycle_policy_shapes_yaml` + > {'Fn::FindInMap': ['CreationValues', 'Primary', 'Policy']} is not of type 'object' -### E3047 - 3 missed - Validate ECS Fargate tasks have the right combination of CPU and memory +### E2001 - 3 missed - Parameters have appropriate properties -- **E3047** `ThirtyTwoVcpuOneTwentyGb` → `Properties` L71 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32768' is not compatible with memory '122880' -- **E3047** `ThirtyTwoVcpuSixtyGb` → `Properties` L55 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32 vCPU' is not compatible with memory '60 GB' -- **E3047** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties` L87 in `good_ecs_fargate_units_and_sizes_yaml` - > Cpu '32768' is not compatible with memory '244 GB' +- **E2001** → `Parameters.NullParamType` L35 in `bad_parameters_configuration_yaml` + > 'Type' is a required property +- **E2001** → `Parameters.allowedValuesAListofBadTypes.AllowedValues.0` L10-11 in `bad_parameters_configuration_yaml` + > {'key': 'value'} is not of type 'string' +- **E2001** → `Parameters.maxLengthIsNotString.MaxLength` L16 in `bad_parameters_configuration_yaml` + > 'MaxLength' is not one of ['AllowedValues', 'ConstraintDescription', 'Default', 'Description', 'MaxValue', 'MinValue', 'NoEcho', 'Type'] ### E3692 - 3 missed - Validate Multi-AZ DB cluster configuration @@ -2560,32 +641,14 @@ but found another document - **E3692** `Cluster` → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` > 'StorageType' is a required property -### E5001 - 3 missed - Check that Modules resources are valid - -- **E5001** `MyModule` → `CreationPolicy` L6 in `bad_modules_bad_has_create_policy_yaml` - > CreationPolicy is not permitted within Modules -- **E5001** `MyModule` → `UpdatePolicy` L5 in `bad_modules_bad_has_update_policy_yaml` - > UpdatePolicy is not permitted within Modules -- **E5001** `MyModule` → `Metadata.AWS::CloudFormation::Module.{'something': 'true'}` L7 in `bad_modules_bad_uses_module_metadata_yaml` - > The Metadata key AWS::CloudFormation::Module is reserved +### F1020 - 3 missed - Ref validation of value -### E7001 - 3 missed - Mappings are appropriately configured - -- **E7001** → `Mappings.BadMap.Key1` L4 in `bad_invalid_mapping_structure_yaml` - > 'value_not_a_map' is not of type 'object' -- **E7001** → `Mappings.myMap.us-east-1.32` L7 in `good_functions_findinmap_yaml` - > 32 does not match any of the regexes: '^[a-zA-Z0-9]+$' -- **E7001** → `Mappings.myMap.us-east-1.64` L7 in `good_functions_findinmap_yaml` - > 64 does not match any of the regexes: '^[a-zA-Z0-9]+$' - -### F1018 - 3 missed - Sub validation of parameters - -- **F1018** (cfn-lint: E1019) `myInstanceSub` → `Properties.UserData.Fn::Sub` L218 in `bad_resources_circular_dependency_yaml` - > {'Test': 'bad configuration'} is not of type 'array', 'string' -- **F1018** (cfn-lint: E1019) `Bucket` → `Properties.BucketName.Fn::Sub` L28 in `lsp_constants_json` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] -- **F1018** (cfn-lint: E1019) `Bucket` → `Properties.BucketName.Fn::Sub` L18 in `lsp_constants_yaml` - > 'foo' is not one of ['Bucket', 'PersonalS3', 'AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix'] +- **F1020** (cfn-lint: E1020) `Bucket` → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > {'Ref': 'BadType'} is not of type 'string' +- **F1020** (cfn-lint: E1020) → `Conditions.TagEnvironments.Fn::Not.0.Fn::Equals.1` L15 in `bad_conditions_equals_yaml` + > {'Ref': 'Environments'} is not of type 'string' +- **F1020** (cfn-lint: E1020) `CreationRootRef` → `CreationPolicy` L30 in `bad_lifecycle_policy_shapes_yaml` + > {'Ref': 'Policy'} is not of type 'object' ### F3002 - 3 missed - Resource properties are invalid @@ -2632,14 +695,14 @@ but found another document - **W1034** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` → `Properties.Runtime.Fn::FindInMap` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` > Runtime {'Fn::FindInMap': ['LatestNodeRuntimeMap', {'Ref': 'AWS::Region'}, 'value']} was deprecated on '2026-04-30'. Creation was disabled on '2027-02-01' and update on '2027-03-03'. Please consider u -### W2010 - 3 missed - NoEcho parameters are not masked when used in Metadata and Outputs +### W2001 - 3 missed - Check if Parameters are Used -- **W2010** `SNSTopicWithSecretNameInRef` → `Metadata.NoEchoParamInMetadata.Ref` L13 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** `SNSTopicWithSecretNameInSub` → `Metadata.NoEchoParamInMetadata.Fn::Sub` L19 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** `rAutoScalingConfigApp` → `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9.Ref` L343 in `quickstart_nist_application_yaml` - > Don't use 'NoEcho' parameter 'pDBPassword' in resource metadata +- **W2001** → `Parameters.NullParameter` L34 in `bad_parameters_configuration_yaml` + > Parameter NullParameter not used. +- **W2001** → `Parameters.DBPolicy` L6 in `bad_resources_deletionpolicy_yaml` + > Parameter DBPolicy not used. +- **W2001** → `Parameters.DBPolicy` L6 in `bad_resources_updatereplacepolicy_yaml` + > Parameter DBPolicy not used. ### E1016 - 2 missed - ImportValue validation of parameters @@ -2657,9 +720,9 @@ but found another document ### E1701 - 2 missed - Validate the configuration of Assertions -- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L313 in `lsp_comprehensive_json` +- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L312 in `lsp_comprehensive_json` > {'Fn::Implies': [{'Fn::Equals': [{'Ref': 'BooleanParameter'}, 'true']}, {'Fn::And': [{'Fn::Not': [{'Fn::Equals': [{'Ref': 'InstanceCount'}, 1]}]}, {'Fn::Not': [{'Fn::Equals': [{'Ref': 'SSMParameter'}, -- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L131 in `lsp_comprehensive_yaml` +- **E1701** → `Rules.ValidateParameterCombinations.Assertions.1.Assert` L130 in `lsp_comprehensive_yaml` > {'Fn::Implies': [{'Fn::Equals': [{'Ref': 'BooleanParameter'}, 'true']}, {'Fn::And': [{'Fn::Not': [{'Fn::Equals': [{'Ref': 'InstanceCount'}, 1]}]}, {'Fn::Not': [{'Fn::Equals': [{'Ref': 'SSMParameter'}, ### E2531 - 2 missed - Validate if lambda runtime is deprecated @@ -2683,19 +746,12 @@ but found another document - **E3510** `myPolicy2` → `Properties.Fn::If.2.PolicyDocument` L22 in `bad_resources_properties_atleastone_yaml` > 'Statement' is a required property -### E8003 - 2 missed - Check Fn::Equals structure for validity - -- **E8003** → `Conditions.TestEqualNull.Fn::Equals` L28 in `bad_conditions_condition_functions_json` - > None is not of type 'array' -- **E8003** → `Conditions.ToManyFunctions.Fn::Equals.1` L19-21 in `bad_conditions_equals_yaml` - > {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' - -### E8004 - 2 missed - Check Fn::And structure for validity +### E7001 - 2 missed - Mappings are appropriately configured -- **E8004** → `Conditions.TestAndNull.Fn::And` L22 in `bad_conditions_and_yaml` - > None is not of type 'array' -- **E8004** → `Conditions.TestAndNull.Fn::And` L18 in `bad_conditions_condition_functions_json` - > None is not of type 'array' +- **E7001** → `Mappings.myMap.us-east-1.32` L7 in `good_functions_findinmap_yaml` + > 32 does not match any of the regexes: '^[a-zA-Z0-9]+$' +- **E7001** → `Mappings.myMap.us-east-1.64` L7 in `good_functions_findinmap_yaml` + > 64 does not match any of the regexes: '^[a-zA-Z0-9]+$' ### E9004 - 2 missed - GetAtt validation of parameters @@ -2704,6 +760,20 @@ but found another document - **E9004** (cfn-lint: E1010) `SsmParameter` → `Properties.Value.Fn::GetAtt` L18 in `integration_getatt-types_yaml` > {'Fn::GetAtt': ['CapacityReservation', 'InstanceCount']} is not of type 'string' +### F0013 - 2 missed - Conditions have appropriate properties + +- **F0013** (cfn-lint: E8001) → `Conditions.TestIfNotArray` L31 in `bad_conditions_condition_functions_json` + > {'Fn::If': 'string'} is not of type 'boolean' +- **F0013** (cfn-lint: E8001) → `Conditions.TestIfWrongCount` L32 in `bad_conditions_condition_functions_json` + > {'Fn::If': ['c', 't']} is not of type 'boolean' + +### F1018 - 2 missed - Sub validation of parameters + +- **F1018** (cfn-lint: E1019) `CreationRootSub` → `CreationPolicy` L45 in `bad_lifecycle_policy_shapes_yaml` + > {'Fn::Sub': ['${Value}', {'Value': 'not-an-object'}]} is not of type 'object' +- **F1018** (cfn-lint: E1019) `myInstanceSub` → `Properties.UserData.Fn::Sub` L218 in `bad_resources_circular_dependency_yaml` + > {'Test': 'bad configuration'} is not of type 'array', 'string' + ### F3017 - 2 missed - Check Properties that need at least one of a list of properties - **F3017** (cfn-lint: E3017) `MyAPI` → `Properties.EndpointConfiguration` L17 in `good_parameters_used_transform_removed_yaml` @@ -2716,7 +786,7 @@ but found another document - **F3018** (cfn-lint: E3018) `myFunctionRole` → `Properties.KeySchema` L70 in `bad_transform_serverless_template_yaml` > [{'AttributeName': 'String', 'KeyType': 'String'}] is not valid under any of the given schemas - **F3018** (cfn-lint: E3018) `ConditionalTemplateSource` → `Properties` L7 in `good_stackset_conditional_template_source_yaml` - > {'StackSetName': 'conditional-template-source', 'PermissionModel': 'SELF_MANAGED', 'TemplateBody': {'Fn::If': ['UseInlineTemplate', '{"AWSTemplateFormatVersion":"2010-09-09","Resources":{}}', {'Ref': + > {'StackSetName': 'conditional-template-source', 'PermissionModel': 'SELF_MANAGED', 'TemplateBody': {'Fn::If': ['UseInlineTemplate', '{"AWSTemplateFormatVersion":"2010-09-09","Resources":{}}', {'Ref': ### F3037 - 2 missed - Check if a list has duplicate values @@ -2725,6 +795,13 @@ but found another document - **F3037** (cfn-lint: E3037) `IamGroupWithConditions` → `Properties.ManagedPolicyArns` L22 in `bad_resources_properties_list_duplicates_yaml` > ['arn:aws:iam::aws:policy/AdministratorPolicy', 'arn:aws:iam::aws:policy/AdministratorPolicy', {'Ref': 'IamPolicy'}, {'Ref': 'IamPolicy'}] has non-unique elements +### I3011 - 2 missed - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy + +- **I3011** `myFunctionRole` → `Resources.myFunctionRole` L66 in `bad_transform_serverless_template_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `myFunctionRole` → `Resources.myFunctionRole` L66 in `bad_transform_serverless_template_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) + ### W3037 - 2 missed - Check IAM Permission configuration - **W3037** `myRoleToWriteToS3` → `Properties.Policies.0.PolicyDocument.Statement.2.Action` L140 in `bad_resources_circular_dependency_yaml` @@ -2739,6 +816,18 @@ but found another document - **W3698** `myInstance2` → `Properties.BlockDeviceMappings.Fn::If.2.0.Fn::If.1.VirtualName` L48 in `good_core_conditions_yaml` > 'VirtualName' is ignored when 'Ebs' is specified +### W8003 - 2 missed - Fn::Equals will always return true or false + +- **W8003** → `Conditions.cApprovedAMIsRule.Fn::Not.0` L39-41 in `quickstart_config-rules_json` + > ['', ''] will always return True or False +- **W8003** → `Conditions.cApprovedAMIsRule.Fn::Not.0` L5-8 in `quickstart_nist_config_rules_yaml` + > ['', ''] will always return True or False + +### E1001 - 1 missed - Basic CloudFormation Template Configuration + +- **E1001** → `Globals` L2 in `bad_sam_globals_not_dict_yaml` + > 'notadict' is not of type 'object' + ### E1002 - 1 missed - Validate if a template size is too large - **E1002** → `Template` L1 in `bad_limit_size_yaml` @@ -2749,11 +838,6 @@ but found another document - **E1003** → `Description` L1 in `bad_limit_size_yaml` > expected maximum length: 1024, found: 1026 -### E1005 - 1 missed - Validate Transform configuration - -- **E1005** → `Transform.3.Name` L7 in `bad_templates_transform_invalid_entries_yaml` - > ['AWS::Include'] is not of type 'string' - ### E1017 - 1 missed - Select validation of parameters - **E1017** `myInstance1` → `Properties.AvailabilityZone.Fn::Select.1` L21 in `bad_functions_select_yaml` @@ -2774,6 +858,11 @@ but found another document - **E2533** `myFunction` → `Properties.Runtime` L9 in `bad_transform_serverless_template_yaml` > Runtime 'nodejs4.3' was deprecated on '2020-03-05'. Creation was disabled on '2020-02-03' and update on '2020-03-05'. Please consider updating to 'nodejs24.x' +### E3001 - 1 missed - Basic CloudFormation Resource Check + +- **E3001** `ImpossibleResourcePolicies` → `Resources.ImpossibleResourcePolicies` L96 in `good_lifecycle_intrinsic_scenarios_yaml` + > Exception "When setting condition 'Never' to True" raised while validating 'cfnLint' + ### E3005 - 1 missed - Check DependsOn values for Resources - **E3005** `ValidResource` → `DependsOn.0` L31 in `bad_core_E3001_resource_shape_yaml` @@ -2789,11 +878,6 @@ but found another document - **E3039** `myFunctionRole` → `Properties` L68 in `bad_transform_serverless_template_yaml` > The set of Attributes in AttributeDefinitions: [] and KeySchemas: ['String'] must match at Resources/myFunctionRole/Properties -### E3055 - 1 missed - Check CreationPolicy values for Resources - -- **E3055** `ScalarCreationPolicy` → `CreationPolicy` L8 in `bad_core_resource_attributes_yaml` - > 'invalid' is not of type 'object' - ### E3065 - 1 missed - Check if a list has more unique values than allowed - **E3065** `CloudWatchAlarm` → `Properties.AlarmActions` L15 in `bad_resources_properties_string_size_yaml` @@ -2869,6 +953,11 @@ but found another document - **E3720** `KmsKeyWithoutEncryption` → `Properties` L37 in `gh-issues_issue-235_yaml` > 'StorageEncrypted' is a required property +### E5001 - 1 missed - Check that Modules resources are valid + +- **E5001** `MyModule` → `Metadata.AWS::CloudFormation::Module.{'something': 'true'}` L7 in `bad_modules_bad_uses_module_metadata_yaml` + > The Metadata key AWS::CloudFormation::Module is reserved + ### E6001 - 1 missed - Check the properties of Outputs - **E6001** → `Outputs.Fn::ForEach::BucketOutputs` L33 in `bad_functions_foreach_no_transform_yaml` @@ -2879,25 +968,10 @@ but found another document - **E6010** → `Outputs` L1407 in `bad_limit_numbers_yaml` > 'Outputs' has more than 200 properties -### E7010 - 1 missed - Max number of properties for Mappings - -- **E7010** → `Mappings.Mapping201.Key` L2412 in `bad_limit_numbers_yaml` - > 'Mappings/Mapping201/Key' has more than 200 properties - -### E8005 - 1 missed - Check Fn::Not structure for validity +### F0001 - 1 missed - Basic CloudFormation Template Configuration -- **E8005** → `Conditions.TestNotNull.Fn::Not` L30 in `bad_conditions_condition_functions_json` - > None is not of type 'array' - -### F1031 - 1 missed - ToJsonString validation of parameters - -- **F1031** (cfn-lint: E1031) `Topic` → `Metadata.Custom` L14 in `bad_functions_tojsonstring_no_transform_yaml` - > Fn::ToJsonString is not supported without 'AWS::LanguageExtensions' transform - -### W2001 - 1 missed - Check if Parameters are Used - -- **W2001** → `Parameters.NullParameter` L34 in `bad_parameters_configuration_yaml` - > Parameter NullParameter not used. +- **F0001** (cfn-lint: E1001) L1 in `bad_empty_file_yaml` + > 'Resources' is a required property ### W2002 - 1 missed - Parameter type is not officially supported by CloudFormation @@ -2909,1899 +983,10 @@ but found another document - **W3691** `RDSE0E96D00` → `Properties` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` > Engine version '8.0.16' for engine 'mysql' is deprecated and cannot be used to create new RDS DB instances -### W6001 - 1 missed - Check Outputs using ImportValue - -- **W6001** → `Outputs.ImportedValue.Value.Fn::ImportValue` L39 in `good_output_value_string_yaml` - > The output value {'Fn::ImportValue': 'SomeExportedName'} is an import from another output - -## False Positives - 1037 extra findings across 20 rules +## False Positives - 126 extra findings across 26 rules These are diagnostics the engine reports but cfn-lint does not expect (potential bugs). -### W1020 - 897 extra - Sub isn't needed if it doesn't have a variable defined - -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..configure_magento.sh.source` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..etc.awslogs.awslogs.conf.content` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L117 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L216 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L315 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L414 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L513 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L612 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L711 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L810 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L909 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1008 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1107 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1206 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1305 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1404 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1503 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1602 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1701 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1800 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1899 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L1998 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2097 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2196 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2295 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2394 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2493 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2592 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2691 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2790 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2889 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L2988 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3087 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3186 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3285 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3384 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3483 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3582 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3681 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3780 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3879 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L3978 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4077 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4176 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4275 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4374 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4473 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4572 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4671 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4770 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4869 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L4968 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5067 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5166 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5265 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5364 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5463 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5562 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5661 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5760 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5859 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L5958 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6057 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6156 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6255 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6354 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6453 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6552 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6651 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6750 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6849 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L6948 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7047 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7146 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7245 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7344 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7443 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7542 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7641 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7740 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7839 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L7938 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8037 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8136 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8235 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8334 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8433 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8532 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8631 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8730 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8829 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L8928 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9027 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9126 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9225 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9324 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9423 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9522 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9621 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9720 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9819 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L9918 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10017 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10116 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10215 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10314 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10413 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10512 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10611 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10710 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10809 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L10908 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11007 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11106 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11205 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11304 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11403 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11502 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11601 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11700 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11799 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11898 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L11997 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12096 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12195 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12294 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12393 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12492 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12591 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12690 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12789 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12888 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L12987 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13086 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13185 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13284 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13383 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13482 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13581 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13680 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13779 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13878 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L13977 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14076 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14175 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14274 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14373 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14472 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14571 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14670 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14769 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14868 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L14967 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15066 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15165 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15264 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15363 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15462 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15561 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15660 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15759 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15858 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L15957 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16056 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16155 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16254 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16353 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16452 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16551 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16650 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16749 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16848 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L16947 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17046 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17145 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17244 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17343 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17442 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17541 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17640 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17739 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17838 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L17937 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18036 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18135 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18234 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18333 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18432 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18531 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18630 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18729 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18828 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L18927 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19026 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19125 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19224 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19323 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19422 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19521 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19620 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19719 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19818 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L19917 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20016 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20115 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20214 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20313 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20412 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20511 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20610 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20709 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20808 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L20907 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21006 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21105 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21204 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21303 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21402 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21501 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21600 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21699 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21798 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21897 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L21996 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22095 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22194 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22293 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22392 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22491 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22590 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22689 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22788 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22887 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L22986 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23085 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23184 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23283 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23382 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23481 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23580 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23679 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23778 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23877 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L23976 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24075 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24174 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24273 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24372 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24471 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24570 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24669 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24768 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24867 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L24966 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25065 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25164 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25263 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25362 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25461 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25560 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25659 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25758 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25857 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L25956 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26055 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26154 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26253 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26352 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26451 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26550 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26649 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26748 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26847 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L26946 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27045 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27144 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27243 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27342 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27441 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27540 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27639 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27738 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27837 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L27936 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28035 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28134 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28233 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28332 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28431 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28530 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28629 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28728 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28827 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L28926 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29025 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29124 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29223 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29322 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29421 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables -- **W1020** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.config.files..install_magento.sh.source` L29520 in `bad_limit_size_yaml` - > Fn::Sub isn't needed because there are no variables - -### I1022 - 42 extra - Use Sub instead of Join - -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.01-get-cloudwatch-agent.command.Fn::Join` L647 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.02-extract-cloudwatch-agent.command.Fn::Join` L662 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.10-install-cloudwatch-agent.command.Fn::Join` L673 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L816 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L833 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join` L869 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join` L887 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.setup.files..etc.cfn.scripts.watchmaker-install.sh.content.Fn::Join` L911 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join` L1101 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L1119 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L1137 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join` L1155 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join` L1173 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join` L1191 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join` L1226 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join` L1244 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join` L1262 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join` L1280 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join` L1298 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join` L1316 in `public_watchmaker_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L430 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L255 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L441 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_cfn.files..etc.cfn.cfn-hup.conf.content.Fn::Join` L261 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_cfn.files..etc.cfn.hooks.d.cfn-auto-reloader.conf.content.Fn::Join` L261 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_wordpress.files..tmp.create-wp-config.content.Fn::Join` L324 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.nginx.files..tmp.nginx.default.conf.content.Fn::Join` L447 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.LandingPageURL.Value.Fn::Join` L92 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.WebsiteURL.Value.Fn::Join` L105 in `quickstart_nist_application_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L491 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L504 in `quickstart_nist_vpc_management_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files..root..ssh.public.key.content.Fn::Join` L1094 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.GetPublicKey.files..root..ssh.public.key.content.Fn::Join` L1423 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.SetPrivateKey.files..root..ssh.id_rsa.content.Fn::Join` L324 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.ContainerAccessELBName.Value.Fn::Join` L123 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** → `Outputs.OpenShiftUI.Value.Fn::Join` L132 in `quickstart_openshift_yaml` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join` L687 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter -- **I1022** (AWS::EC2::Instance) → `Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join` L705 in `quickstart_vpc-management_json` - > Prefer using Fn::Sub over Fn::Join with an empty delimiter - ### E0001 - 34 extra - **E0001** `MyApi` (AWS::Serverless::Api) → `Properties/StageName` L3 in `bad_sam_api_missing_stagename_yaml` @@ -4873,32 +1058,30 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E0001** `myFunction` (AWS::Serverless::Function) → `Properties/Events/MyTimer` L39 in `bad_transform_serverless_template_yaml` > Error transforming template: Resource with id [myFunctionMyTimer] is invalid. Missing required property 'Schedule'. -### I3011 - 12 extra - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy - -- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` - > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) -- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` - > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +### I3042 - 11 extra - ARNs should use correctly placed Pseudo Parameters + +- **I3042** `SubBlock` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L125 in `good_both_forms_yaml` + > ARN in Resource SubBlock contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithBase64` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L85 in `good_both_forms_yaml` + > ARN in Resource WithBase64 contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithCidr` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L115 in `good_both_forms_yaml` + > ARN in Resource WithCidr contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithFindInMap` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L75 in `good_both_forms_yaml` + > ARN in Resource WithFindInMap contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithGetAZs` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L108 in `good_both_forms_yaml` + > ARN in Resource WithGetAZs contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithGetAtt` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L36 in `good_both_forms_yaml` + > ARN in Resource WithGetAtt contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithIf` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L65 in `good_both_forms_yaml` + > ARN in Resource WithIf contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithImport` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L101 in `good_both_forms_yaml` + > ARN in Resource WithImport contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithJoin` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L47 in `good_both_forms_yaml` + > ARN in Resource WithJoin contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithSelect` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L56 in `good_both_forms_yaml` + > ARN in Resource WithSelect contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters +- **I3042** `WithSplit` (Custom::IntrinsicTest) → `Properties.ServiceToken.Fn::Sub` L92 in `good_both_forms_yaml` + > ARN in Resource WithSplit contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters ### E3639 - 10 extra - When BillingMode is Provisioned you must specify ProvisionedThroughput @@ -4923,6 +1106,42 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3639** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.ProvisionedThroughput` L20 in `good_resources_dynamodb_attributes_transform_yaml` > ProvisionedThroughput is required when BillingMode defaults to 'PROVISIONED' +### E8004 - 8 extra - Check Fn::And structure for validity + +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L20 in `bad_conditions_and_yaml` + > Fn::And: element 0: 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L20 in `bad_conditions_and_yaml` + > Fn::And: element 1: 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L19 in `bad_conditions_and_yaml` + > Fn::And: element 0: {'Condition': 'TestAndToMany', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L19 in `bad_conditions_and_yaml` + > Fn::And: element 1: {'Bad': 'TestAndToMany'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L11 in `bad_conditions_condition_functions_json` + > Fn::And: element 0: 'Test' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadArray.Fn::And` L11 in `bad_conditions_condition_functions_json` + > Fn::And: element 1: 'Test2' is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L13 in `bad_conditions_condition_functions_json` + > Fn::And: element 0: {'Condition': 'TestAndString', 'Extra': 'ThisIsBad'} is not of type 'boolean' +- **E8004** → `Conditions.TestAndBadCondition.Fn::And` L13 in `bad_conditions_condition_functions_json` + > Fn::And: element 1: {'Bad': 'TestAndString'} is not of type 'boolean' + +### E8003 - 7 extra - Check Fn::Equals structure for validity + +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals` L23 in `bad_conditions_condition_functions_json` + > Fn::Equals: argument 0: [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.TestEqualBadArgs.Fn::Equals` L23 in `bad_conditions_condition_functions_json` + > Fn::Equals: argument 1: {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals` L11 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 0: [{'Ref': 'AWS::Region'}] is not of type 'string' +- **E8003** → `Conditions.Test.Fn::Equals` L11 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 1: {'Bad': 'Value'} is not of type 'string' +- **E8003** → `Conditions.TestWrongType.Fn::Equals` L12 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 1: ['Not a List'] is not of type 'string' +- **E8003** → `Conditions.ToManyFunctions.Fn::Equals` L18 in `bad_conditions_equals_yaml` + > Fn::Equals: argument 0: {'Ref': 'AWS::Region', 'Fn::Select': ['Environments', 0]} is not of type 'string' +- **E8003** → `Conditions.primaryRegion.Fn::Equals` L4 in `bad_functions_import_value_yaml` + > Fn::Equals: argument 1: {'Fn::ImportValue': 'PrimaryRegion'} is not of type 'string' + ### E3023 - 6 extra - Validate Route53 RecordSets - **E3023** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.RecordSets.0.ResourceRecords.1` L117 in `bad_route53_conditional_record_arrays_yaml` @@ -4938,6 +1157,21 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3023** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.ResourceRecords` L125 in `bad_route53_conditional_record_arrays_yaml` > CNAME records must have at most 1 ResourceRecord +### W2506 - 6 extra - Check if ImageId Parameters have the correct type + +- **W2506** → `Parameters.SsmStringImageParam` L7 in `gh-issues_issue-34_json` + > Parameter 'SsmStringImageParam' is used as an ImageId but has Type 'AWS::SSM::Parameter::Value' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pNatAmi` L47 in `quickstart_nat-instance_json` + > Parameter 'pNatAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pAppAmi` L125 in `quickstart_nist_application_yaml` + > Parameter 'pAppAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pWebServerAMI` L213 in `quickstart_nist_application_yaml` + > Parameter 'pWebServerAMI' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pBastionAmi` L192 in `quickstart_nist_vpc_management_yaml` + > Parameter 'pBastionAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' +- **W2506** → `Parameters.pBastionAmi` L134 in `quickstart_vpc-management_json` + > Parameter 'pBastionAmi' is used as an ImageId but has Type 'String' - consider using 'AWS::EC2::Image::Id' + ### E3019 - 4 extra - Validate that all resources have unique primary identifiers - **E3019** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` @@ -4971,14 +1205,25 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3055** `MyBucket` (AWS::S3::Bucket) → `CreationPolicy` L5 in `bad_resources_creation_policy_unsupported_e3055_yaml` > CreationPolicy is not supported on resource type 'AWS::S3::Bucket' -### E3510 - 3 extra - Validate identity based IAM polices +### F2012 - 4 extra -- **E3510** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument` L38 in `bad_resources_iam_iam_policy_yaml` - > [{"Statement":{}}] is not of type 'object' -- **E3510** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyDocument.Id` L47 in `bad_resources_iam_identity_policy_e3510_yaml` - > Additional properties are not allowed ('Id' was unexpected) -- **E3510** `WildcardServicePolicy` (AWS::IAM::ManagedPolicy) → `Properties.PolicyDocument.Statement.0.Resource` L13 in `bad_resources_iam_identity_policy_wildcard_service_yaml` - > 'arn:aws:*:::example-bucket/*' does not match '^(arn:(aws[A-Za-z\-]*?|[A-Za-z?*\-]*[?*][A-Za-z?*\-]*):[^:*?]+:[^:]*(:(?:\d{12}|\*|aws)?:.+|)|\*)$' +- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` + > Parameter 'CDLAllowedValues' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] +- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` + > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] + +### E1005 - 3 extra - Validate Transform configuration + +- **E1005** → `Transform` L4 in `bad_templates_transform_invalid_entries_yaml` + > Transform entry must be a transform name or a {Name, Parameters} object, got a number +- **E1005** → `Transform` L6 in `bad_templates_transform_invalid_entries_yaml` + > Transform 'Parameters' must be an object, got a string +- **E1005** → `Transform` L7 in `bad_templates_transform_invalid_entries_yaml` + > Transform 'Name' must be a string, got a list ### F0018 - 3 extra - Check UpdateReplacePolicy values for Resources @@ -5007,14 +1252,12 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **F3017** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` > 'rdsadmin' at 'MasterUsername' does not satisfy the composition branch constraint (none of ['rdsadmin']): 'rdsadmin' must not be one of ['rdsadmin'] -### W2010 - 3 extra - NoEcho parameters are not masked when used in Metadata and Outputs +### E3001 - 2 extra - Basic CloudFormation Resource Check -- **W2010** (AWS::SNS::Topic) → `Metadata.NoEchoParamInMetadata` L13 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** (AWS::SNS::Topic) → `Metadata.NoEchoParamInMetadata` L19 in `bad_noecho_yaml` - > Don't use 'NoEcho' parameter 'NoEchoParam' in resource metadata -- **W2010** (AWS::AutoScaling::LaunchConfiguration) → `Metadata.AWS::CloudFormation::Init.install_wordpress.files..tmp.create-wp-config.content.Fn::Join.1.9` L343 in `quickstart_nist_application_yaml` - > Don't use 'NoEcho' parameter 'pDBPassword' in resource metadata +- **E3001** `UnsupportedAttributes` (AWS::S3::Bucket) → `Connectors` L20 in `bad_core_resource_attributes_yaml` + > Resource 'UnsupportedAttributes' has invalid property 'Connectors'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, Crea +- **E3001** `mySnsTopic` (AWS::SNS::Topic) → `Parameters` L15 in `bad_duplicate_yaml` + > Resource 'mySnsTopic' has invalid property 'Parameters'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, CreationPolicy, ### E3029 - 2 extra - Validate Route53 record set aliases @@ -5023,15570 +1266,64 @@ These are diagnostics the engine reports but cfn-lint does not expect (potential - **E3029** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.AliasTarget` L48 in `bad_route53_conditional_scenarios_yaml` > AliasTarget cannot be used with record type 'SOA' -### F1018 - 2 extra - Sub validation of parameters +### E8007 - 2 extra + +- **E8007** L11 in `bad_E8007_condition_undefined_in_expr_yaml` + > Condition 'IsHighAvailability' references undefined condition 'DoesNotExist' +- **E8007** L8 in `bad_core_conditions_missing_yaml` + > Condition 'isPrimaryAndProduction' references undefined condition 'isPrimary' + +### F0013 - 2 extra - Conditions have appropriate properties -- **F1018** (AWS::S3::Bucket) → `Metadata.Test` L19 in `lsp_constants_json` - > Fn::Sub variable '${sub}' does not reference a valid resource, parameter, or pseudo-parameter -- **F1018** (AWS::S3::Bucket) → `Metadata.Test` L15 in `lsp_constants_yaml` - > Fn::Sub variable '${sub}' does not reference a valid resource, parameter, or pseudo-parameter +- **F0013** → `Conditions.TestIfNotArray.Fn::If` L31 in `bad_conditions_condition_functions_json` + > Fn::If: 'string' is not of type 'array' +- **F0013** → `Conditions.TestIfWrongCount.Fn::If` L32 in `bad_conditions_condition_functions_json` + > Fn::If: must have exactly 3 elements, got 2 -### F1020 - 2 extra - Ref validation of value +### W8003 - 2 extra - Fn::Equals will always return true or false -- **F1020** (AWS::S3::Bucket) → `Metadata.TestObj` L22 in `lsp_constants_json` - > 'obj' is not one of ['AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix', 'Bucket', 'PersonalS3'] -- **F1020** (AWS::S3::Bucket) → `Metadata.TestObj` L16 in `lsp_constants_yaml` - > 'obj' is not one of ['AWS::AccountId', 'AWS::NoValue', 'AWS::NotificationARNs', 'AWS::Partition', 'AWS::Region', 'AWS::StackId', 'AWS::StackName', 'AWS::URLSuffix', 'Bucket', 'PersonalS3'] +- **W8003** → `Conditions.cApprovedAMIsRule` L38 in `quickstart_config-rules_json` + > Fn::Equals in condition 'cApprovedAMIsRule' will always return True +- **W8003** → `Conditions.cApprovedAMIsRule` L3 in `quickstart_nist_config_rules_yaml` + > Fn::Equals in condition 'cApprovedAMIsRule' will always return True + +### E1028 - 1 extra + +- **E1028** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument.0.Fn::If.0` L40 in `bad_resources_iam_iam_policy_yaml` + > Fn::If condition 'cCondition' does not exist in Conditions section ### E1155 - 1 extra - **E1155** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` > 'invalid ${literal' does not match format 'AWS::Logs::LogGroup.Name' -### E3001 - 1 extra - Basic CloudFormation Resource Check +### E3510 - 1 extra - Validate identity based IAM polices -- **E3001** `myBucketFirstAndLastPass` (AWS::S3::Bucket) L19 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastPass' has invalid property 'BadProperty'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, +- **E3510** `WildcardServicePolicy` (AWS::IAM::ManagedPolicy) → `Properties.PolicyDocument.Statement.0.Resource` L13 in `bad_resources_iam_identity_policy_wildcard_service_yaml` + > 'arn:aws:*:::example-bucket/*' does not match '^(arn:(aws[A-Za-z\-]*?|[A-Za-z?*\-]*[?*][A-Za-z?*\-]*):[^:*?]+:[^:]*(:(?:\d{12}|\*|aws)?:.+|)|\*)$' -### F1031 - 1 extra - ToJsonString validation of parameters +### F1012 - 1 extra -- **F1031** (AWS::SNS::Topic) → `Metadata.Custom` L14 in `bad_functions_tojsonstring_no_transform_yaml` - > Fn::ToJsonString requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1012** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId.Fn::FindInMap.0` L9 in `bad_functions_base64_yaml` + > Fn::FindInMap references non-existent mapping 'amimap' -## Engine Extra - 8293 correct findings across 43 rules +### W1001 - 1 extra - Ref/GetAtt to resource that is available when conditions are applied -These are correct diagnostics the engine reports that cfn-lint does not cover. +- **W1001** → `Outputs.lambdaArn.Value.Fn::GetAtt` L63 in `bad_functions_relationship_conditions_yaml` + > Reference to 'LambdaExecutionRole' which is conditional on 'isPrimary' - target may not exist -### I9001 - 5465 findings +### W2509 - 1 extra -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `bad_E1050_dynamic_ref_malformed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L11 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `A` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `B` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `C` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `D` (AWS::S3::Bucket) → `Properties.BucketName` L21 in `bad_E3019_four_way_group_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `JoinBucket` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralA` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralB` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `RefBucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_E3019_identity_reference_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L19 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L20 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L24 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_E3022_equivalent_subnet_forms_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `bad_E3023_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `bad_E3023_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `bad_E3023_conditional_record_items_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerLiteral` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L21 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerParam` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L40 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L29 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L28 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L27 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L48 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L47 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L46 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AuthorizerB` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L20 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L28 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.ResourceId` L27 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.RestApiId` L26 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `GoodCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L34 in `bad_F3006_invalid_aws_namespaces_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `bad_F3018_conditional_required_novalue_yaml` - > Property 'PermissionModel' is create-only; updating it will cause resource replacement -- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `bad_F3018_conditional_required_novalue_yaml` - > Property 'StackSetName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `VpcControl` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `bad_I9001_conditional_create_only_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.CidrBlock` L8 in `bad_I9001_conditional_create_only_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `bad_I9001_conditional_create_only_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_W1028_allowedvalues_excludes_literal_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L8 in `bad_W1053_dynref_spaces_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_W1054_raw_pseudo_param_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L13 in `bad_W3010_full_coverage_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L45 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.AvailabilityZone` L17 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L18 in `bad_W3010_full_coverage_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L22 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `bad_W3010_full_coverage_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `bad_W3010_full_coverage_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.AvailabilityZone` L63 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.Engine` L65 in `bad_W3010_full_coverage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L36 in `bad_W3010_full_coverage_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L35 in `bad_W3010_full_coverage_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L34 in `bad_W3010_full_coverage_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L54 in `bad_W3010_full_coverage_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L55 in `bad_W3010_full_coverage_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L56 in `bad_W3010_full_coverage_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L15 in `bad_W3030_enum_case_insensitive_mismatch_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `bad_W3030_enum_case_insensitive_mismatch_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L10 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `bad_aurora_with_allocated_storage_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `bad_aurora_with_allocated_storage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L56 in `bad_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.Device` L75 in `bad_conditions_yaml` - > Property 'Device' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.InstanceId` L73 in `bad_conditions_yaml` - > Property 'InstanceId' is create-only; updating it will cause resource replacement -- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.VolumeId` L74 in `bad_conditions_yaml` - > Property 'VolumeId' is create-only; updating it will cause resource replacement -- **I9001** `BadConditionType` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ValidResource` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `bad_core_E3001_resource_shape_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L92 in `bad_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L87 in `bad_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `bad_core_conditions_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L36 in `bad_core_conditions_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L65 in `bad_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L66 in `bad_core_conditions_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `bad_core_conditions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `bad_core_conditions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L21 in `bad_core_config_configure_e3012_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L17 in `bad_core_config_configure_e3012_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L10 in `bad_cross_resource_task10_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L42 in `bad_cross_resource_task10_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BadFargateService` (AWS::ECS::Service) → `Properties.LaunchType` L76 in `bad_cross_resource_task10_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L55 in `bad_cross_resource_task10_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.PackageType` L56 in `bad_cross_resource_task10_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L20 in `bad_cross_resource_task10_yaml` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L14 in `bad_cross_resource_task10_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L15 in `bad_cross_resource_task10_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L35 in `bad_cross_resource_task10_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L36 in `bad_cross_resource_task10_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L37 in `bad_cross_resource_task10_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `bad_cross_resource_task10_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `bad_cross_resource_task10_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `bad_cross_resource_task10_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_cross_resource_task10_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_cross_resource_task10_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MySNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L26 in `bad_duplicate_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_duplicate_primary_id_multi_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `bad_duplicate_primary_id_multi_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_duplicate_primary_id_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_duplicate_primary_id_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_attribute_mismatch_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_attribute_mismatch_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_prod_no_kms_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.TableName` L7 in `bad_dynamodb_prod_no_kms_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L15 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L16 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L17 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `bad_ecs_fargate_mismatch_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `bad_ecs_fargate_mismatch_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L8 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L9 in `bad_ecs_fargate_mismatch_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `bad_ecs_fargate_mismatch_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `bad_ecs_role_no_boundary_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L27 in `bad_ecs_role_no_boundary_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L26 in `bad_ecs_role_no_boundary_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L6 in `bad_elb_http_443_yaml` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `bad_fargate_bad_cpu_memory_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.Cluster` L9 in `bad_fargate_daemon_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.LaunchType` L6 in `bad_fargate_daemon_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L7 in `bad_fargate_daemon_yaml` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `bad_fargate_daemon_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L16 in `bad_fargate_daemon_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `bad_fargate_daemon_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L17 in `bad_fargate_daemon_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L18 in `bad_fargate_daemon_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L14 in `bad_fargate_daemon_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_findinmap_bad_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_formatters_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L9 in `bad_formatters_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_base64_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L10 in `bad_functions_base64_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L11 in `bad_functions_findinmap_enhanced_invalid_key_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L22 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L33 in `bad_functions_getaz_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `bad_functions_getaz_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L31 in `bad_functions_getaz_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `bad_functions_import_value_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L12 in `bad_functions_import_value_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_join_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L10 in `bad_functions_join_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `bad_functions_join_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.UserData` L20 in `bad_functions_join_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L54 in `bad_functions_ref_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L51 in `bad_functions_ref_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L52 in `bad_functions_ref_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L53 in `bad_functions_ref_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L62 in `bad_functions_ref_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L65 in `bad_functions_ref_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L35 in `bad_functions_ref_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_functions_ref_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L33 in `bad_functions_ref_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L34 in `bad_functions_ref_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L43 in `bad_functions_ref_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L46 in `bad_functions_ref_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `bad_functions_ref_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L12 in `bad_functions_ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_functions_ref_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `bad_functions_ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L30 in `bad_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `bad_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L10 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L18 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L17 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L27 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L35 in `bad_functions_select_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `bad_functions_select_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AdditionalInfo` L12 in `bad_functions_sub_needed_yaml` - > Property 'AdditionalInfo' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `bad_functions_sub_needed_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `mySnsTopic` (AWS::SNS::Topic) → `Properties.TopicName` L33 in `bad_functions_sub_needed_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L113 in `bad_generic_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L122 in `bad_generic_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L48 in `bad_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L43 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L44 in `bad_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L45 in `bad_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L63 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L222 in `bad_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.ImageId` L219 in `bad_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.InstanceType` L220 in `bad_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.KeyName` L221 in `bad_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L223 in `bad_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L212 in `bad_generic_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L213 in `bad_generic_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L105 in `bad_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L81 in `bad_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L139 in `bad_generic_yaml` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L196 in `bad_generic_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L204 in `bad_generic_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `myAcl` (AWS::WAFRegional::WebACL) → `Properties.Name` L143 in `bad_generic_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L15 in `bad_hard_coded_arn_properties_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L36 in `bad_hard_coded_arn_properties_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_hardcoded_partition_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L10 in `bad_hardcoded_partition_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `Role` (AWS::IAM::Role) → `Properties.Path` L6 in `bad_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `R` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_if_wrong_arity_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.EngineName` L6 in `bad_issues_yaml` - > Property 'EngineName' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.MajorEngineVersion` L7 in `bad_issues_yaml` - > Property 'MajorEngineVersion' is create-only; updating it will cause resource replacement -- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.OptionGroupDescription` L8 in `bad_issues_yaml` - > Property 'OptionGroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Fn` (AWS::Lambda::Function) → `Properties.PackageType` L11 in `bad_lambda_image_handler_intrinsic_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_no_snapstart_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `bad_lambda_permission_no_source_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `bad_lambda_permission_no_source_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `bad_lambda_permission_no_source_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `bad_lambda_permission_no_source_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_snapstart_bad_runtime_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L21 in `bad_lambda_sqs_timeout_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zip_no_handler_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zipfile_java_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.ImageId` L89 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.InstanceType` L90 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.UserData` L91 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.ImageId` L980 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.InstanceType` L981 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.UserData` L982 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.ImageId` L9890 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.InstanceType` L9891 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.UserData` L9892 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.ImageId` L9989 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.InstanceType` L9990 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.UserData` L9991 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.ImageId` L10088 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.InstanceType` L10089 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.UserData` L10090 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.ImageId` L10187 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.InstanceType` L10188 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.UserData` L10189 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.ImageId` L10286 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.InstanceType` L10287 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.UserData` L10288 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.ImageId` L10385 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.InstanceType` L10386 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.UserData` L10387 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.ImageId` L10484 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.InstanceType` L10485 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.UserData` L10486 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.ImageId` L10583 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.InstanceType` L10584 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.UserData` L10585 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.ImageId` L10682 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.InstanceType` L10683 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.UserData` L10684 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.ImageId` L10781 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.InstanceType` L10782 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.UserData` L10783 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.ImageId` L1079 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.InstanceType` L1080 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.UserData` L1081 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.ImageId` L10880 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.InstanceType` L10881 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.UserData` L10882 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.ImageId` L10979 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.InstanceType` L10980 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.UserData` L10981 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.ImageId` L11078 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.InstanceType` L11079 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.UserData` L11080 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.ImageId` L11177 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.InstanceType` L11178 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.UserData` L11179 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.ImageId` L11276 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.InstanceType` L11277 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.UserData` L11278 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.ImageId` L11375 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.InstanceType` L11376 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.UserData` L11377 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.ImageId` L11474 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.InstanceType` L11475 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.UserData` L11476 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.ImageId` L11573 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.InstanceType` L11574 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.UserData` L11575 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.ImageId` L11672 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.InstanceType` L11673 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.UserData` L11674 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.ImageId` L11771 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.InstanceType` L11772 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.UserData` L11773 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.ImageId` L1178 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.InstanceType` L1179 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.UserData` L1180 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.ImageId` L11870 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.InstanceType` L11871 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.UserData` L11872 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.ImageId` L11969 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.InstanceType` L11970 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.UserData` L11971 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.ImageId` L12068 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.InstanceType` L12069 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.UserData` L12070 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.ImageId` L12167 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.InstanceType` L12168 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.UserData` L12169 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.ImageId` L12266 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.InstanceType` L12267 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.UserData` L12268 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.ImageId` L12365 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.InstanceType` L12366 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.UserData` L12367 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.ImageId` L12464 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.InstanceType` L12465 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.UserData` L12466 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.ImageId` L12563 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.InstanceType` L12564 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.UserData` L12565 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.ImageId` L12662 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.InstanceType` L12663 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.UserData` L12664 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.ImageId` L12761 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.InstanceType` L12762 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.UserData` L12763 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.ImageId` L1277 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.InstanceType` L1278 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.UserData` L1279 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.ImageId` L12860 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.InstanceType` L12861 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.UserData` L12862 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.ImageId` L12959 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.InstanceType` L12960 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.UserData` L12961 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.ImageId` L13058 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.InstanceType` L13059 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.UserData` L13060 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.ImageId` L13157 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.InstanceType` L13158 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.UserData` L13159 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.ImageId` L13256 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.InstanceType` L13257 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.UserData` L13258 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.ImageId` L13355 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.InstanceType` L13356 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.UserData` L13357 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.ImageId` L13454 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.InstanceType` L13455 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.UserData` L13456 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.ImageId` L13553 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.InstanceType` L13554 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.UserData` L13555 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.ImageId` L13652 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.InstanceType` L13653 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.UserData` L13654 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.ImageId` L13751 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.InstanceType` L13752 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.UserData` L13753 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.ImageId` L1376 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.InstanceType` L1377 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.UserData` L1378 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.ImageId` L13850 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.InstanceType` L13851 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.UserData` L13852 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.ImageId` L13949 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.InstanceType` L13950 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.UserData` L13951 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.ImageId` L14048 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.InstanceType` L14049 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.UserData` L14050 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.ImageId` L14147 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.InstanceType` L14148 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.UserData` L14149 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.ImageId` L14246 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.InstanceType` L14247 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.UserData` L14248 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.ImageId` L14345 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.InstanceType` L14346 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.UserData` L14347 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.ImageId` L14444 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.InstanceType` L14445 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.UserData` L14446 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.ImageId` L14543 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.InstanceType` L14544 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.UserData` L14545 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.ImageId` L14642 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.InstanceType` L14643 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.UserData` L14644 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.ImageId` L14741 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.InstanceType` L14742 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.UserData` L14743 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.ImageId` L1475 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.InstanceType` L1476 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.UserData` L1477 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.ImageId` L14840 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.InstanceType` L14841 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.UserData` L14842 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.ImageId` L14939 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.InstanceType` L14940 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.UserData` L14941 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.ImageId` L15038 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.InstanceType` L15039 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.UserData` L15040 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.ImageId` L15137 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.InstanceType` L15138 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.UserData` L15139 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.ImageId` L15236 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.InstanceType` L15237 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.UserData` L15238 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.ImageId` L15335 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.InstanceType` L15336 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.UserData` L15337 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.ImageId` L15434 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.InstanceType` L15435 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.UserData` L15436 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.ImageId` L15533 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.InstanceType` L15534 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.UserData` L15535 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.ImageId` L15632 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.InstanceType` L15633 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.UserData` L15634 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.ImageId` L15731 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.InstanceType` L15732 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.UserData` L15733 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.ImageId` L1574 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.InstanceType` L1575 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.UserData` L1576 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.ImageId` L15830 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.InstanceType` L15831 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.UserData` L15832 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.ImageId` L15929 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.InstanceType` L15930 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.UserData` L15931 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.ImageId` L16028 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.InstanceType` L16029 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.UserData` L16030 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.ImageId` L16127 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.InstanceType` L16128 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.UserData` L16129 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.ImageId` L16226 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.InstanceType` L16227 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.UserData` L16228 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.ImageId` L16325 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.InstanceType` L16326 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.UserData` L16327 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.ImageId` L16424 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.InstanceType` L16425 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.UserData` L16426 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.ImageId` L16523 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.InstanceType` L16524 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.UserData` L16525 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.ImageId` L16622 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.InstanceType` L16623 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.UserData` L16624 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.ImageId` L16721 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.InstanceType` L16722 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.UserData` L16723 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.ImageId` L1673 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.InstanceType` L1674 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.UserData` L1675 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.ImageId` L16820 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.InstanceType` L16821 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.UserData` L16822 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.ImageId` L16919 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.InstanceType` L16920 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.UserData` L16921 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.ImageId` L17018 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.InstanceType` L17019 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.UserData` L17020 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.ImageId` L17117 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.InstanceType` L17118 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.UserData` L17119 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.ImageId` L17216 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.InstanceType` L17217 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.UserData` L17218 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.ImageId` L17315 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.InstanceType` L17316 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.UserData` L17317 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.ImageId` L17414 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.InstanceType` L17415 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.UserData` L17416 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.ImageId` L17513 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.InstanceType` L17514 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.UserData` L17515 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.ImageId` L17612 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.InstanceType` L17613 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.UserData` L17614 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.ImageId` L17711 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.InstanceType` L17712 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.UserData` L17713 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.ImageId` L1772 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.InstanceType` L1773 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.UserData` L1774 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.ImageId` L17810 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.InstanceType` L17811 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.UserData` L17812 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.ImageId` L17909 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.InstanceType` L17910 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.UserData` L17911 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.ImageId` L18008 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.InstanceType` L18009 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.UserData` L18010 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.ImageId` L18107 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.InstanceType` L18108 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.UserData` L18109 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.ImageId` L18206 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.InstanceType` L18207 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.UserData` L18208 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.ImageId` L18305 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.InstanceType` L18306 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.UserData` L18307 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.ImageId` L18404 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.InstanceType` L18405 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.UserData` L18406 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.ImageId` L18503 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.InstanceType` L18504 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.UserData` L18505 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.ImageId` L18602 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.InstanceType` L18603 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.UserData` L18604 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.ImageId` L18701 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.InstanceType` L18702 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.UserData` L18703 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.ImageId` L1871 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.InstanceType` L1872 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.UserData` L1873 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.ImageId` L18800 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.InstanceType` L18801 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.UserData` L18802 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.ImageId` L18899 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.InstanceType` L18900 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.UserData` L18901 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.ImageId` L18998 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.InstanceType` L18999 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.UserData` L19000 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.ImageId` L19097 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.InstanceType` L19098 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.UserData` L19099 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.ImageId` L19196 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.InstanceType` L19197 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.UserData` L19198 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.ImageId` L19295 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.InstanceType` L19296 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.UserData` L19297 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.ImageId` L19394 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.InstanceType` L19395 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.UserData` L19396 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.ImageId` L19493 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.InstanceType` L19494 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.UserData` L19495 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.ImageId` L19592 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.InstanceType` L19593 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.UserData` L19594 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.ImageId` L19691 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.InstanceType` L19692 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.UserData` L19693 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.ImageId` L188 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.InstanceType` L189 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.UserData` L190 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.ImageId` L1970 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.InstanceType` L1971 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.UserData` L1972 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.ImageId` L19790 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.InstanceType` L19791 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.UserData` L19792 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.ImageId` L19889 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.InstanceType` L19890 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.UserData` L19891 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.ImageId` L19988 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.InstanceType` L19989 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.UserData` L19990 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.ImageId` L20087 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.InstanceType` L20088 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.UserData` L20089 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.ImageId` L20186 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.InstanceType` L20187 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.UserData` L20188 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.ImageId` L20285 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.InstanceType` L20286 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.UserData` L20287 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.ImageId` L20384 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.InstanceType` L20385 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.UserData` L20386 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.ImageId` L20483 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.InstanceType` L20484 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.UserData` L20485 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.ImageId` L20582 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.InstanceType` L20583 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.UserData` L20584 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.ImageId` L20681 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.InstanceType` L20682 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.UserData` L20683 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.ImageId` L2069 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.InstanceType` L2070 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.UserData` L2071 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.ImageId` L20780 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.InstanceType` L20781 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.UserData` L20782 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.ImageId` L20879 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.InstanceType` L20880 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.UserData` L20881 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.ImageId` L20978 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.InstanceType` L20979 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.UserData` L20980 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.ImageId` L21077 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.InstanceType` L21078 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.UserData` L21079 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.ImageId` L21176 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.InstanceType` L21177 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.UserData` L21178 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.ImageId` L21275 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.InstanceType` L21276 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.UserData` L21277 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.ImageId` L21374 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.InstanceType` L21375 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.UserData` L21376 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.ImageId` L21473 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.InstanceType` L21474 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.UserData` L21475 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.ImageId` L21572 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.InstanceType` L21573 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.UserData` L21574 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.ImageId` L21671 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.InstanceType` L21672 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.UserData` L21673 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.ImageId` L2168 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.InstanceType` L2169 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.UserData` L2170 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.ImageId` L21770 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.InstanceType` L21771 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.UserData` L21772 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.ImageId` L21869 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.InstanceType` L21870 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.UserData` L21871 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.ImageId` L21968 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.InstanceType` L21969 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.UserData` L21970 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.ImageId` L22067 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.InstanceType` L22068 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.UserData` L22069 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.ImageId` L22166 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.InstanceType` L22167 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.UserData` L22168 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.ImageId` L22265 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.InstanceType` L22266 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.UserData` L22267 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.ImageId` L22364 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.InstanceType` L22365 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.UserData` L22366 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.ImageId` L22463 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.InstanceType` L22464 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.UserData` L22465 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.ImageId` L22562 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.InstanceType` L22563 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.UserData` L22564 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.ImageId` L22661 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.InstanceType` L22662 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.UserData` L22663 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.ImageId` L2267 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.InstanceType` L2268 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.UserData` L2269 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.ImageId` L22760 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.InstanceType` L22761 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.UserData` L22762 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.ImageId` L22859 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.InstanceType` L22860 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.UserData` L22861 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.ImageId` L22958 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.InstanceType` L22959 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.UserData` L22960 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.ImageId` L23057 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.InstanceType` L23058 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.UserData` L23059 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.ImageId` L23156 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.InstanceType` L23157 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.UserData` L23158 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.ImageId` L23255 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.InstanceType` L23256 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.UserData` L23257 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.ImageId` L23354 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.InstanceType` L23355 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.UserData` L23356 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.ImageId` L23453 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.InstanceType` L23454 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.UserData` L23455 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.ImageId` L23552 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.InstanceType` L23553 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.UserData` L23554 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.ImageId` L23651 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.InstanceType` L23652 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.UserData` L23653 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.ImageId` L2366 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.InstanceType` L2367 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.UserData` L2368 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.ImageId` L23750 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.InstanceType` L23751 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.UserData` L23752 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.ImageId` L23849 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.InstanceType` L23850 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.UserData` L23851 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.ImageId` L23948 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.InstanceType` L23949 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.UserData` L23950 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.ImageId` L24047 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.InstanceType` L24048 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.UserData` L24049 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.ImageId` L24146 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.InstanceType` L24147 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.UserData` L24148 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.ImageId` L24245 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.InstanceType` L24246 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.UserData` L24247 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.ImageId` L24344 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.InstanceType` L24345 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.UserData` L24346 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.ImageId` L24443 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.InstanceType` L24444 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.UserData` L24445 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.ImageId` L24542 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.InstanceType` L24543 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.UserData` L24544 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.ImageId` L24641 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.InstanceType` L24642 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.UserData` L24643 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.ImageId` L2465 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.InstanceType` L2466 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.UserData` L2467 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.ImageId` L24740 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.InstanceType` L24741 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.UserData` L24742 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.ImageId` L24839 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.InstanceType` L24840 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.UserData` L24841 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.ImageId` L24938 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.InstanceType` L24939 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.UserData` L24940 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.ImageId` L25037 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.InstanceType` L25038 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.UserData` L25039 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.ImageId` L25136 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.InstanceType` L25137 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.UserData` L25138 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.ImageId` L25235 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.InstanceType` L25236 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.UserData` L25237 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.ImageId` L25334 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.InstanceType` L25335 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.UserData` L25336 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.ImageId` L25433 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.InstanceType` L25434 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.UserData` L25435 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.ImageId` L25532 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.InstanceType` L25533 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.UserData` L25534 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.ImageId` L25631 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.InstanceType` L25632 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.UserData` L25633 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.ImageId` L2564 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.InstanceType` L2565 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.UserData` L2566 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.ImageId` L25730 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.InstanceType` L25731 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.UserData` L25732 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.ImageId` L25829 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.InstanceType` L25830 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.UserData` L25831 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.ImageId` L25928 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.InstanceType` L25929 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.UserData` L25930 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.ImageId` L26027 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.InstanceType` L26028 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.UserData` L26029 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.ImageId` L26126 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.InstanceType` L26127 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.UserData` L26128 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.ImageId` L26225 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.InstanceType` L26226 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.UserData` L26227 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.ImageId` L26324 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.InstanceType` L26325 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.UserData` L26326 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.ImageId` L26423 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.InstanceType` L26424 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.UserData` L26425 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.ImageId` L26522 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.InstanceType` L26523 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.UserData` L26524 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.ImageId` L26621 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.InstanceType` L26622 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.UserData` L26623 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.ImageId` L2663 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.InstanceType` L2664 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.UserData` L2665 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.ImageId` L26720 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.InstanceType` L26721 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.UserData` L26722 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.ImageId` L26819 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.InstanceType` L26820 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.UserData` L26821 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.ImageId` L26918 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.InstanceType` L26919 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.UserData` L26920 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.ImageId` L27017 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.InstanceType` L27018 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.UserData` L27019 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.ImageId` L27116 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.InstanceType` L27117 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.UserData` L27118 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.ImageId` L27215 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.InstanceType` L27216 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.UserData` L27217 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.ImageId` L27314 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.InstanceType` L27315 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.UserData` L27316 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.ImageId` L27413 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.InstanceType` L27414 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.UserData` L27415 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.ImageId` L27512 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.InstanceType` L27513 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.UserData` L27514 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.ImageId` L27611 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.InstanceType` L27612 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.UserData` L27613 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.ImageId` L2762 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.InstanceType` L2763 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.UserData` L2764 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.ImageId` L27710 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.InstanceType` L27711 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.UserData` L27712 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.ImageId` L27809 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.InstanceType` L27810 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.UserData` L27811 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.ImageId` L27908 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.InstanceType` L27909 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.UserData` L27910 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.ImageId` L28007 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.InstanceType` L28008 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.UserData` L28009 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.ImageId` L28106 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.InstanceType` L28107 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.UserData` L28108 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.ImageId` L28205 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.InstanceType` L28206 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.UserData` L28207 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.ImageId` L28304 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.InstanceType` L28305 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.UserData` L28306 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.ImageId` L28403 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.InstanceType` L28404 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.UserData` L28405 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.ImageId` L28502 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.InstanceType` L28503 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.UserData` L28504 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.ImageId` L28601 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.InstanceType` L28602 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.UserData` L28603 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.ImageId` L2861 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.InstanceType` L2862 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.UserData` L2863 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.ImageId` L28700 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.InstanceType` L28701 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.UserData` L28702 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.ImageId` L28799 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.InstanceType` L28800 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.UserData` L28801 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.ImageId` L28898 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.InstanceType` L28899 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.UserData` L28900 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.ImageId` L28997 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.InstanceType` L28998 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.UserData` L28999 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.ImageId` L29096 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.InstanceType` L29097 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.UserData` L29098 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.ImageId` L29195 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.InstanceType` L29196 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.UserData` L29197 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.ImageId` L29294 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.InstanceType` L29295 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.UserData` L29296 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.ImageId` L29393 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.InstanceType` L29394 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.UserData` L29395 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.ImageId` L29492 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.InstanceType` L29493 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.UserData` L29494 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.ImageId` L29591 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.InstanceType` L29592 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.UserData` L29593 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.ImageId` L287 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.InstanceType` L288 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.UserData` L289 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.ImageId` L2960 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.InstanceType` L2961 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.UserData` L2962 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.ImageId` L3059 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.InstanceType` L3060 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.UserData` L3061 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.ImageId` L3158 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.InstanceType` L3159 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.UserData` L3160 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.ImageId` L3257 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.InstanceType` L3258 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.UserData` L3259 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.ImageId` L3356 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.InstanceType` L3357 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.UserData` L3358 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.ImageId` L3455 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.InstanceType` L3456 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.UserData` L3457 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.ImageId` L3554 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.InstanceType` L3555 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.UserData` L3556 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.ImageId` L3653 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.InstanceType` L3654 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.UserData` L3655 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.ImageId` L3752 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.InstanceType` L3753 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.UserData` L3754 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.ImageId` L3851 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.InstanceType` L3852 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.UserData` L3853 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.ImageId` L386 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.InstanceType` L387 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.UserData` L388 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.ImageId` L3950 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.InstanceType` L3951 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.UserData` L3952 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.ImageId` L4049 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.InstanceType` L4050 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.UserData` L4051 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.ImageId` L4148 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.InstanceType` L4149 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.UserData` L4150 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.ImageId` L4247 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.InstanceType` L4248 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.UserData` L4249 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.ImageId` L4346 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.InstanceType` L4347 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.UserData` L4348 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.ImageId` L4445 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.InstanceType` L4446 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.UserData` L4447 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.ImageId` L4544 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.InstanceType` L4545 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.UserData` L4546 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.ImageId` L4643 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.InstanceType` L4644 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.UserData` L4645 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.ImageId` L4742 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.InstanceType` L4743 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.UserData` L4744 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.ImageId` L4841 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.InstanceType` L4842 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.UserData` L4843 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.ImageId` L485 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.InstanceType` L486 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.UserData` L487 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.ImageId` L4940 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.InstanceType` L4941 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.UserData` L4942 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.ImageId` L5039 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.InstanceType` L5040 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.UserData` L5041 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.ImageId` L5138 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.InstanceType` L5139 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.UserData` L5140 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.ImageId` L5237 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.InstanceType` L5238 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.UserData` L5239 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.ImageId` L5336 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.InstanceType` L5337 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.UserData` L5338 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.ImageId` L5435 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.InstanceType` L5436 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.UserData` L5437 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.ImageId` L5534 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.InstanceType` L5535 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.UserData` L5536 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.ImageId` L5633 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.InstanceType` L5634 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.UserData` L5635 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.ImageId` L5732 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.InstanceType` L5733 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.UserData` L5734 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.ImageId` L5831 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.InstanceType` L5832 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.UserData` L5833 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.ImageId` L584 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.InstanceType` L585 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.UserData` L586 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.ImageId` L5930 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.InstanceType` L5931 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.UserData` L5932 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.ImageId` L6029 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.InstanceType` L6030 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.UserData` L6031 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.ImageId` L6128 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.InstanceType` L6129 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.UserData` L6130 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.ImageId` L6227 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.InstanceType` L6228 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.UserData` L6229 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.ImageId` L6326 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.InstanceType` L6327 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.UserData` L6328 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.ImageId` L6425 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.InstanceType` L6426 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.UserData` L6427 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.ImageId` L6524 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.InstanceType` L6525 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.UserData` L6526 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.ImageId` L6623 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.InstanceType` L6624 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.UserData` L6625 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.ImageId` L6722 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.InstanceType` L6723 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.UserData` L6724 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.ImageId` L6821 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.InstanceType` L6822 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.UserData` L6823 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.ImageId` L683 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.InstanceType` L684 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.UserData` L685 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.ImageId` L6920 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.InstanceType` L6921 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.UserData` L6922 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.ImageId` L7019 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.InstanceType` L7020 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.UserData` L7021 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.ImageId` L7118 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.InstanceType` L7119 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.UserData` L7120 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.ImageId` L7217 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.InstanceType` L7218 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.UserData` L7219 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.ImageId` L7316 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.InstanceType` L7317 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.UserData` L7318 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.ImageId` L7415 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.InstanceType` L7416 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.UserData` L7417 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.ImageId` L7514 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.InstanceType` L7515 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.UserData` L7516 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.ImageId` L7613 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.InstanceType` L7614 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.UserData` L7615 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.ImageId` L7712 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.InstanceType` L7713 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.UserData` L7714 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.ImageId` L7811 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.InstanceType` L7812 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.UserData` L7813 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.ImageId` L782 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.InstanceType` L783 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.UserData` L784 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.ImageId` L7910 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.InstanceType` L7911 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.UserData` L7912 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.ImageId` L8009 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.InstanceType` L8010 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.UserData` L8011 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.ImageId` L8108 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.InstanceType` L8109 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.UserData` L8110 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.ImageId` L8207 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.InstanceType` L8208 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.UserData` L8209 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.ImageId` L8306 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.InstanceType` L8307 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.UserData` L8308 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.ImageId` L8405 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.InstanceType` L8406 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.UserData` L8407 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.ImageId` L8504 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.InstanceType` L8505 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.UserData` L8506 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.ImageId` L8603 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.InstanceType` L8604 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.UserData` L8605 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.ImageId` L8702 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.InstanceType` L8703 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.UserData` L8704 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.ImageId` L8801 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.InstanceType` L8802 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.UserData` L8803 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.ImageId` L881 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.InstanceType` L882 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.UserData` L883 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.ImageId` L8900 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.InstanceType` L8901 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.UserData` L8902 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.ImageId` L8999 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.InstanceType` L9000 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.UserData` L9001 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.ImageId` L9098 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.InstanceType` L9099 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.UserData` L9100 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.ImageId` L9197 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.InstanceType` L9198 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.UserData` L9199 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.ImageId` L9296 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.InstanceType` L9297 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.UserData` L9298 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.ImageId` L9395 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.InstanceType` L9396 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.UserData` L9397 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.ImageId` L9494 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.InstanceType` L9495 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.UserData` L9496 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.ImageId` L9593 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.InstanceType` L9594 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.UserData` L9595 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.ImageId` L9692 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.InstanceType` L9693 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.UserData` L9694 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.ImageId` L9791 in `bad_limit_size_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.InstanceType` L9792 in `bad_limit_size_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.UserData` L9793 in `bad_limit_size_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `bad_mappings_used_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `bad_mappings_used_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L18 in `bad_override_complete_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `bad_override_complete_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myS3BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L17 in `bad_override_include_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L9 in `bad_override_include_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `bad_override_include_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L6 in `bad_pipeline_no_source_first_stage_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_previous_gen_instance_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L6 in `bad_previous_gen_instance_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Engine` L17 in `bad_previous_generation_instances_yaml` - > Property 'Engine' is create-only; updating it will cause resource replacement -- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L27 in `bad_previous_generation_instances_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L8 in `bad_previous_generation_instances_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L7 in `bad_previous_generation_instances_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L12 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_properties_ebs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L11 in `bad_properties_ebs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L27 in `bad_properties_ebs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L33 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L45 in `bad_properties_ebs_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L43 in `bad_properties_ebs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L44 in `bad_properties_ebs_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L21 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L22 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Engine` L30 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L31 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L39 in `bad_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L40 in `bad_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L42 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L44 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L72 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L74 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L58 in `bad_properties_rt_association_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L63 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L65 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L33 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L35 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L50 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L52 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L25 in `bad_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L27 in `bad_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L58 in `bad_properties_sg_ingress_yaml` - > Property 'CidrIp' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L56 in `bad_properties_sg_ingress_yaml` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L54 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L55 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L57 in `bad_properties_sg_ingress_yaml` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L79 in `bad_properties_sg_ingress_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L80 in `bad_properties_sg_ingress_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L62 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L63 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L64 in `bad_properties_sg_ingress_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L68 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L69 in `bad_properties_sg_ingress_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L70 in `bad_properties_sg_ingress_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L74 in `bad_properties_sg_ingress_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupName` L75 in `bad_properties_sg_ingress_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_properties_sg_ingress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L31 in `bad_properties_sg_ingress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L32 in `bad_properties_sg_ingress_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L10 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Db` (AWS::RDS::DBInstance) → `Properties.Engine` L8 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L7 in `bad_rds_public_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L8 in `bad_rds_public_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L10 in `bad_rds_public_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L34 in `bad_redshift_internet_accessible_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L33 in `bad_redshift_internet_accessible_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `bad_redshift_internet_accessible_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `bad_redshift_internet_accessible_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `bad_redshift_internet_accessible_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_redshift_internet_accessible_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_redshift_internet_accessible_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_redshift_internet_accessible_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L29 in `bad_refs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_refs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L27 in `bad_refs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L28 in `bad_refs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L37 in `bad_refs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L40 in `bad_refs_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L10 in `bad_refs_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_refs_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L8 in `bad_refs_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L9 in `bad_refs_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L18 in `bad_refs_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_refs_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myBucket` (AWS::S3::Bucket) → `Properties.BucketName` L71 in `bad_resources_circular_dependency_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L75 in `bad_resources_circular_dependency_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L54 in `bad_resources_circular_dependency_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L55 in `bad_resources_circular_dependency_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_resources_circular_dependency_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L149 in `bad_resources_circular_dependency_yaml` - > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L150 in `bad_resources_circular_dependency_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.ImageId` L216 in `bad_resources_circular_dependency_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.UserData` L217 in `bad_resources_circular_dependency_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Path` L110 in `bad_resources_circular_dependency_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.RoleName` L100 in `bad_resources_circular_dependency_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L26 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L27 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L36 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L37 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L44 in `bad_resources_circular_dependency_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L45 in `bad_resources_circular_dependency_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L226 in `bad_resources_circular_dependency_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L223 in `bad_resources_circular_dependency_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Volumes` L258 in `bad_resources_circular_dependency_yaml` - > Property 'Volumes' is create-only; updating it will cause resource replacement -- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `bad_resources_codepipeline_stages_second_stage_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_resources_creation_policy_unsupported_e3055_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_deletionpolicy_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L27 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L43 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L25 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L24 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L84 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L74 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L64 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L53 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L36 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L10 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L206 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L204 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L205 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L203 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L195 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L193 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L194 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L192 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L139 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L137 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L134 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L138 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L136 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L135 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L167 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L165 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L162 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L166 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L164 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L163 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L153 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L151 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Family` L148 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Memory` L152 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L150 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L149 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L125 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L123 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L120 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L124 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L122 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L121 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L182 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L179 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L176 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L180 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L178 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L181 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L177 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L44 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L42 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L38 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L43 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L41 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L39 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L94 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L92 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L93 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L91 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L110 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L107 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L103 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L108 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L106 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L109 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L104 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L62 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L57 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L53 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L58 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L59 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L54 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L77 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Family` L71 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L29 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L23 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L24 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L104 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L102 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Family` L99 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L103 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L101 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L100 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L117 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L115 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Family` L112 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L116 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L114 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L113 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L13 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L65 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L63 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L60 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L64 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L62 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L61 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L78 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L76 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L73 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L77 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L75 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L74 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L91 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L89 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L86 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L90 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L24 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L21 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L25 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L23 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L22 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L39 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L34 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L38 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L36 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L35 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L47 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L51 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L49 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L48 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L41 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L46 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L96 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L100 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L22 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L30 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L14 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L60 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L64 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L79 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L82 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `rIamRole` (AWS::IAM::Role) → `Properties.RoleName` L9 in `bad_resources_iam_iam_policy_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L89 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'InstanceArn' is create-only; updating it will cause resource replacement -- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Name` L90 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyName` L44 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.RoleName` L45 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.GroupName` L76 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.PolicyName` L77 in `bad_resources_iam_identity_policy_e3510_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `bad_resources_iam_managed_policy_description_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `bad_resources_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `bad_resources_iam_ref_with_path_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `bad_resources_iam_ref_with_path_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `bad_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `bad_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L73 in `bad_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `bad_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L9 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `bad_resources_lambda_function_property_value_limits_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Function2` (AWS::Lambda::Function) → `Properties.PackageType` L22 in `bad_resources_lambda_required_properties_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L150 in `bad_resources_primary_identifiers_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Project1` (AWS::CodeBuild::Project) → `Properties.Name` L168 in `bad_resources_primary_identifiers_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Project2` (AWS::CodeBuild::Project) → `Properties.Name` L188 in `bad_resources_primary_identifiers_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.Path` L39 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.RoleName` L40 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L62 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L63 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L85 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L86 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.Path` L108 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.RoleName` L109 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.Path` L130 in `bad_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.RoleName` L131 in `bad_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L27 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L34 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Engine` L53 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Engine` L60 in `bad_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_resources_rds_not_enum_master_username_join_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L9 in `bad_resources_rds_not_enum_master_username_join_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.Engine` L6 in `bad_resources_rds_not_enum_master_username_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyTopic` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `bad_resources_sns_topic_name_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_resources_update_policy_unsupported_e3016_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_updatereplacepolicy_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GroupInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L61 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L105 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMixedInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L89 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupUnresolvedCnameCardinality` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L131 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L26 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L27 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L15 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L16 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L49 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L50 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L37 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L38 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L121 in `bad_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.Name` L122 in `bad_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L45 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.Name` L46 in `bad_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRecordSetsInvalidFirst` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L54 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRecordSetsInvalidSecond` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L68 in `bad_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L50 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L51 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L40 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L41 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L110 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L111 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L64 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L65 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L75 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L76 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L86 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.Name` L87 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyHostedZone` (AWS::Route53::HostedZone) → `Properties.Name` L19 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L99 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L100 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyRecordSetGroup` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L121 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L27 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L28 in `bad_route53_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PoorlyConfiguredRoute53` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L174 in `bad_route53_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.ValidationSpecification` L35 in `bad_sagemaker_instance_types_yaml` - > Property 'ValidationSpecification' is create-only; updating it will cause resource replacement -- **I9001** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.JobResources` L15 in `bad_sagemaker_instance_types_yaml` - > Property 'JobResources' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_additional_props_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Name` L8 in `bad_schema_composition_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L12 in `bad_schema_conditional_type_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_enum_violation_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `bad_schema_format_violation_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L8 in `bad_schema_format_violation_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SubnetId` L7 in `bad_schema_format_violation_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L37 in `bad_schema_lifecycle_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EolLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L26 in `bad_schema_lifecycle_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L19 in `bad_schema_lifecycle_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L20 in `bad_schema_lifecycle_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.MeshName` L13 in `bad_schema_lifecycle_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_schema_numeric_bounds_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Name` L22 in `bad_schema_property_constraints_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PatternBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_property_constraints_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateAuthorityArn` L11 in `bad_schema_property_constraints_yaml` - > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateSigningRequest` L12 in `bad_schema_property_constraints_yaml` - > Property 'CertificateSigningRequest' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.SigningAlgorithm` L13 in `bad_schema_property_constraints_yaml` - > Property 'SigningAlgorithm' is create-only; updating it will cause resource replacement -- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.Validity` L14 in `bad_schema_property_constraints_yaml` - > Property 'Validity' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L14 in `bad_schema_required_xor_conditional_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L17 in `bad_schema_required_xor_conditional_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L18 in `bad_schema_required_xor_conditional_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L16 in `bad_schema_required_xor_conditional_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L19 in `bad_schema_required_xor_conditional_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `Lambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_schema_string_length_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L26 in `bad_schema_structural_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L29 in `bad_schema_structural_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L30 in `bad_schema_structural_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L28 in `bad_schema_structural_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L31 in `bad_schema_structural_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L37 in `bad_schema_structural_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L39 in `bad_schema_structural_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.VpcId` L20 in `bad_schema_structural_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_type_mismatch_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.CertificateAuthorityArn` L7 in `bad_schema_write_only_yaml` - > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement -- **I9001** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_security_issues_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_bad_port_range_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_open_egress_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_simple_sub_param_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `bad_sns_cross_account_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L81 in `bad_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `bad_sqs_fifo_no_suffix_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DLQ` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L11 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.QueueName` L10 in `bad_sqs_fifo_standard_dlq_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `bad_ssm_document_invalid_yaml` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `bad_ssm_document_invalid_yaml` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_sub_needed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_sub_nested_intrinsic_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_outside_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_outside_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_outside_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L17 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L16 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L15 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L23 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L22 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L29 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L28 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.VpcId` L27 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L35 in `bad_subnet_overlap_multi_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.CidrBlock` L34 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.VpcId` L33 in `bad_subnet_overlap_multi_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_multi_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `bad_subnet_overlap_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_overlap_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `bad_subnet_overlap_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `bad_subnet_overlap_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_overlap_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `BadBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_unknown_properties_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L95 in `cdk_DemoStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L80 in `cdk_DemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.TableName` L86 in `cdk_DemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L127 in `cdk_DemoStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Name` L12 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L69 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L24 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'BrokerName' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L25 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'DeploymentMode' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EncryptionOptions` L26 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EncryptionOptions' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L29 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EngineType' is create-only; updating it will cause resource replacement -- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L32 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement -- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L202 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L1077 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.AppId` L17 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Property 'AppId' is create-only; updating it will cause resource replacement -- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.BranchName` L23 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Property 'BranchName' is create-only; updating it will cause resource replacement -- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentFEC31BD04feb54db86e2f8eed94e1b28001143ce` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L738 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L764 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.StageName` L767 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.ParentId` L779 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.PathPart` L785 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L786 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L882 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L910 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L913 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Action` L797 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.FunctionName` L798 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Principal` L804 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.SourceArn` L805 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Action` L841 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.FunctionName` L842 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Principal` L848 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.SourceArn` L849 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1052 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1082 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1085 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Action` L924 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.FunctionName` L925 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Principal` L931 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.SourceArn` L932 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Action` L968 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.FunctionName` L969 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.SourceArn` L976 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1009 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1037 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1040 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1096 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1099 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1100 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1450 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1478 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1481 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Action` L1365 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.FunctionName` L1366 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Principal` L1372 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.SourceArn` L1373 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Action` L1409 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.FunctionName` L1410 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Principal` L1416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.SourceArn` L1417 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1196 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1224 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1227 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Action` L1111 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.FunctionName` L1112 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Principal` L1118 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.SourceArn` L1119 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Action` L1155 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1156 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Principal` L1162 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1163 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1493 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1523 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1526 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1323 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1351 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1354 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Action` L1238 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.FunctionName` L1239 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Principal` L1245 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.SourceArn` L1246 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Action` L1282 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.FunctionName` L1283 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Principal` L1289 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.SourceArn` L1290 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentDA408F9D41ab700bc8db89ed7cb2c6250ab97c0a` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L230 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L269 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.StageName` L272 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.ParentId` L284 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.PathPart` L290 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L291 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L371 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L419 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L422 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Action` L302 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.FunctionName` L303 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Principal` L309 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.SourceArn` L310 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Action` L338 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.FunctionName` L339 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Principal` L345 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.SourceArn` L346 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.ParentId` L433 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.PathPart` L436 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L437 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L449 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L498 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L501 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Action` L305 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.FunctionName` L306 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Principal` L312 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.SourceArn` L313 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `operationalAuthorizer363A7D2B` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L392 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentB29CB257026bd226d852d73169d333911fdd4fa6` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L431 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L473 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.StageName` L476 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.ParentId` L485 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.PathPart` L491 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L492 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L595 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L598 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Action` L539 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.FunctionName` L540 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Principal` L546 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.SourceArn` L547 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Action` L503 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.FunctionName` L504 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Principal` L510 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.SourceArn` L511 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L87 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L95 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L352 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L360 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L807 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L891 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L897 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeployment92F2CB49668bc8f388b84571173cc408b70fc6fa` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L725 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L745 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.StageName` L748 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.ParentId` L908 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.PathPart` L914 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L915 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L927 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.ResourceId` L931 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.RestApiId` L934 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L644 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `nestedstackvpcVPCGWA39BF2BE` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTable5302591F` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableEA03EC80` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTable518786D0` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableF3884194` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L7 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `chatappapideployment` (AWS::ApiGatewayV2::Deployment) → `Properties.ApiId` L675 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L691 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L698 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.TableName` L33 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `connectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L504 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `connectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L603 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `disconnectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L537 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `disconnectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L627 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `messagelambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L570 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `messageroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L651 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L583 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L493 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L500 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L554 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L557 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L569 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `ASGScalingPolicyAModestLoadC5714E5A` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L621 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L704 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L721 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L789 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L802 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L803 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L810 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L811 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L736 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L746 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L758 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L764 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L765 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L771 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L772 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.ApiId` L170 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.Name` L182 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.ApiId` L276 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.Name` L288 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CarApiSchema8E4784D9` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L93 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `CarsFunction7C2F2ED2` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L304 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DefectsFunction929174B7` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L332 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L61 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.TableName` L71 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.ApiId` L360 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.FieldName` L369 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.TypeName` L385 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.ApiId` L397 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.FieldName` L406 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.TypeName` L422 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `AppSync2EventBridgeApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L16 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Action` L237 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.FunctionName` L238 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Principal` L244 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.SourceArn` L245 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L89 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L118 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ItemsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L30 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L134 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L141 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L144 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L139 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L147 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L152 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L89 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L97 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L102 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L64 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L72 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L77 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `PostsApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L16 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L45 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L54 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PostsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L30 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L114 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L122 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L127 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `IncomingDataBucketPolicyCA22042A` (AWS::S3::BucketPolicy) → `Properties.Bucket` L32 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L641 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Domain' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L624 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'ServerId' is create-only; updating it will cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L581 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L424 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L641 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Domain' is create-only; updating it will cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L624 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'ServerId' is create-only; updating it will cause resource replacement -- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L581 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L424 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L244 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L247 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L233 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L192 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L216 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L299 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L310 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L313 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L258 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L282 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L341 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vault23237E5B` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L216 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupVaultName' is create-only; updating it will cause resource replacement -- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L253 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupPlanId' is create-only; updating it will cause resource replacement -- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L259 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'BackupSelection' is create-only; updating it will cause resource replacement -- **I9001** `testBucketPolicy47484917` (AWS::S3::BucketPolicy) → `Properties.Bucket` L40 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L568 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L576 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1084 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceRole` L749 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.InstanceRole' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceTypes` L755 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.InstanceTypes' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.SecurityGroupIds` L764 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L772 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L780 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L789 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L850 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.RepositoryName` L10 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.CidrBlock` L21 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L24 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L317 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.RouteTableId` L321 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTable3DBEEA60` (AWS::EC2::RouteTable) → `Properties.VpcId` L292 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L303 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L306 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L251 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.CidrBlock` L259 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.VpcId` L275 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L398 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.RouteTableId` L402 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTable7EFB668D` (AWS::EC2::RouteTable) → `Properties.VpcId` L373 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L384 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L387 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L332 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.CidrBlock` L340 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.VpcId` L356 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L107 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.RouteTableId` L111 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L140 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L146 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L93 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L96 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1RouteTableDADE381A` (AWS::EC2::RouteTable) → `Properties.VpcId` L82 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L41 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L49 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.VpcId` L65 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L233 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.RouteTableId` L237 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTable29142B7F` (AWS::EC2::RouteTable) → `Properties.VpcId` L208 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L219 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L222 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L167 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L175 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.VpcId` L191 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenMPVPCVPCGWDD05DB82` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L430 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L583 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L493 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L500 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L554 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L557 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L569 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L667 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L682 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L691 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L621 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L631 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L643 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L649 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L650 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L656 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L657 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Name` L394 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Name` L409 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteBucketPolicyE10E3262` (AWS::S3::BucketPolicy) → `Properties.Bucket` L40 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Content` L154 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Description` L160 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1641 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1642 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1643 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1651 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Name` L2309 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipelineArtifactsBucketEncryptionKeyAliasC52C67EF` (AWS::KMS::Alias) → `Properties.AliasName` L2074 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AliasName' is create-only; updating it will cause resource replacement -- **I9001** `BuildDeployPipelineArtifactsBucketPolicyC49383E9` (AWS::S3::BucketPolicy) → `Properties.Bucket` L2122 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.CidrBlock` L1097 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L1100 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1489 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.RouteTableId` L1493 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTable4D91A516` (AWS::EC2::RouteTable) → `Properties.VpcId` L1456 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1474 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1411 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1419 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.VpcId` L1435 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1586 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.RouteTableId` L1590 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTable918A9411` (AWS::EC2::RouteTable) → `Properties.VpcId` L1553 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1568 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1571 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1508 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1516 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.VpcId` L1532 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1197 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.RouteTableId` L1201 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1236 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1242 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableA4D922A0` (AWS::EC2::RouteTable) → `Properties.VpcId` L1164 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1179 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1182 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1127 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.VpcId` L1143 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1343 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.RouteTableId` L1347 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1382 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1388 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTable12CC8384` (AWS::EC2::RouteTable) → `Properties.VpcId` L1310 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1325 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1328 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1273 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.VpcId` L1289 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterVpcVPCGW361426E5` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L1626 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.ApplicationName` L1954 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ApplicationName' is create-only; updating it will cause resource replacement -- **I9001** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.ComputePlatform` L1942 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ComputePlatform' is create-only; updating it will cause resource replacement -- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L1780 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L1792 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L1805 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.ServiceName` L1836 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1853 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1861 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L1879 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L1880 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L1886 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L1887 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L1893 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L181 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L182 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L188 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L189 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L190 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L191 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L194 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1662 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1663 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1664 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1671 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1672 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L1717 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L1734 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L1757 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1683 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1700 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `cfnAuth` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L365 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentCB1FF57464f3e9f368e40968a1aeabdb5bcc9580` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L133 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L152 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.StageName` L155 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.ParentId` L167 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.PathPart` L173 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L174 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L273 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L301 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L304 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.FunctionName` L186 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.SourceArn` L193 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `DemoResource5B5C546C` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L140 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `DemoResourceResource1DB79ECAB` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L166 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.QueueName` L70 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.TopicName` L27 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.KeySchema` L88 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L259 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L270 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.KeySchema` L507 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L480 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L491 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L565 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.ImageId` L576 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.InstanceType` L579 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L580 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SubnetId` L594 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.UserData` L603 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Content` L353 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Description` L359 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `EC2assetBucketPolicy31C0B372` (AWS::S3::BucketPolicy) → `Properties.Bucket` L276 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L541 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.CidrBlock` L7 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L238 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L91 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTable140320E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.CidrBlock` L33 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L175 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2RouteTableD6971BF3` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.CidrBlock` L117 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW3AFA48F6` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L210 in `cdk_ec2-instance--EC2Example.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1RouteTableE62E4ED6` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTable3E531D9B` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L246 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.ImageId` L257 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.InstanceType` L260 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L261 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SubnetId` L269 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.UserData` L278 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L156 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L196 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.AutoScalingGroupProvider.AutoScalingGroupArn` L691 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AutoScalingGroupProvider.AutoScalingGroupArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L678 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L633 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L646 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L480 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L591 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L594 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L597 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L598 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L606 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L200 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L213 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L214 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L221 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L222 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L61 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L122 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L130 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L169 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L176 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L179 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L180 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L146 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L153 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L156 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L47 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L67 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L80 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L81 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L88 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L89 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L61 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L120 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L128 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L167 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L173 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L174 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L178 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L143 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L144 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L150 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L151 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L47 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Cluster` L1112 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.LaunchType` L1125 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1126 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L1027 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L1033 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1034 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1035 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1038 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Cluster` L1079 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.LaunchType` L1092 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1114 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1049 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1068 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Family` L1030 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1031 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1032 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1035 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L638 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L858 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L865 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Endpoint` L876 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.TopicArn` L883 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L486 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L597 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L600 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L612 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L960 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L1041 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L1054 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1070 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L1022 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1023 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1024 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1027 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Cluster` L728 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.LaunchType` L742 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L495 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L563 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L576 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L577 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L584 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L585 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L510 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L520 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L532 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L538 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L539 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L545 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L546 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L789 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L797 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L812 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L813 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L819 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L820 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L826 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L616 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L641 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L642 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Family` L648 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Memory` L649 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L650 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L651 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L654 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L487 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L510 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L523 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L524 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L525 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L526 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Cluster` L669 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.LaunchType` L683 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L730 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L738 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L801 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L803 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ResourceId` L754 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ScalableDimension` L788 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ServiceNamespace` L789 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L557 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L582 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L583 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Family` L589 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Memory` L590 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L591 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L592 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L595 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L598 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L611 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L647 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L655 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L492 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L511 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L512 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L518 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L519 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L520 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L521 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L524 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Action` L140 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L141 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Principal` L147 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L148 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Endpoint` L15 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Protocol` L18 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.TopicArn` L19 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeployment0905F2A51149e52ed55821cdb6db0214e7f00a2c` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L76 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L96 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.StageName` L99 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.ParentId` L111 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.PathPart` L117 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L118 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L129 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L132 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L133 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L145 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.ResourceId` L157 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.RestApiId` L160 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L239 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Components` L50 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Components' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ContainerType` L76 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'ContainerType' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.DockerfileTemplateData` L77 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'DockerfileTemplateData' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Name` L78 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ParentImage` L79 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'ParentImage' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.TargetRepository` L91 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'TargetRepository' is create-only; updating it will cause resource replacement -- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Version` L97 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L30 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L31 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L32 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L33 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L6 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L7 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L8 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L9 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Name` L212 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Name` L188 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L18 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Data' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L19 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L20 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Platform' is create-only; updating it will cause resource replacement -- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L21 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Property 'Version' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Action` L95 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.FunctionName` L96 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Principal` L102 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.SourceArn` L103 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Action` L40 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.FunctionName` L41 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Principal` L47 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.SourceArn` L48 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.DashboardName` L150 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Property 'DashboardName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L85 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L92 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Content` L9 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Description` L15 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L69 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L61 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.FunctionName` L87 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeployment406A9BD66039252bdc49ee37076fc3c8f3a2eed8` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L206 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L228 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.StageName` L231 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L328 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.ResourceId` L359 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.RestApiId` L365 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Action` L243 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.FunctionName` L244 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Principal` L250 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.SourceArn` L251 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Action` L287 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.FunctionName` L288 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Principal` L294 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.SourceArn` L295 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.ParentId` L376 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.PathPart` L382 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L383 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Action` L648 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.FunctionName` L649 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Principal` L655 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.SourceArn` L656 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Action` L692 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L693 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Principal` L699 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L700 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L733 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.ResourceId` L761 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.RestApiId` L764 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L606 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.ResourceId` L634 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.RestApiId` L637 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Action` L521 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.FunctionName` L522 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Principal` L528 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.SourceArn` L529 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Action` L565 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.FunctionName` L566 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Principal` L572 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.SourceArn` L573 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L479 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.ResourceId` L507 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.RestApiId` L510 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Action` L394 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.FunctionName` L395 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Principal` L401 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.SourceArn` L402 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Action` L438 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.FunctionName` L439 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Principal` L445 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.SourceArn` L446 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.QueueName` L87 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Endpoint` L139 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Protocol` L135 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.TopicArn` L136 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.QueueName` L15 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Endpoint` L67 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Protocol` L63 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.TopicArn` L64 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L441 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L295 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeployment0A3D40CC3de72833f42963bffb25d554063d867d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L515 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L533 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.StageName` L548 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.ContentType` L694 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.Name` L695 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.RestApiId` L691 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.ContentType` L671 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.Name` L672 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.RestApiId` L668 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L557 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L563 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L564 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.ResourceId` L576 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.RestApiId` L579 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L176 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteDefaultRouteIntegration9F0AC785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L225 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteF9949FE6` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L244 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.FunctionName` L186 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.SourceArn` L193 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L267 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L270 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Name` L6 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Action` L173 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.FunctionName` L174 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Principal` L180 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.SourceArn` L181 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.FunctionName` L142 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.Qualifier` L145 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Qualifier' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Endpoint` L196 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Protocol` L192 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.TopicArn` L193 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.EventBusName` L462 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Action` L494 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.FunctionName` L495 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Principal` L501 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.SourceArn` L502 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Action` L345 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.FunctionName` L346 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Principal` L352 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.SourceArn` L353 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.EventBusName` L305 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentC364859Eae40584f53d9b7bb31907a57bb781ad3` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L576 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L594 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.StageName` L609 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.ContentType` L755 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.Name` L756 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.RestApiId` L752 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.ContentType` L732 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.Name` L733 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.RestApiId` L729 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L618 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L624 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L625 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L636 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.ResourceId` L637 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.RestApiId` L640 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeployment8F20C3E380de34421a04eed5e7cc4a28266c5690` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L246 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L264 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.StageName` L279 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.ContentType` L422 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.Name` L423 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.RestApiId` L419 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.ParentId` L288 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.PathPart` L294 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L295 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L306 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L307 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L310 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.ContentType` L399 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.Name` L400 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.RestApiId` L396 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L171 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L177 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Property 'StartingPosition' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L894 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L895 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L901 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Action` L854 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.FunctionName` L855 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Principal` L861 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.SourceArn` L862 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Action` L810 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.FunctionName` L811 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Principal` L817 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.SourceArn` L818 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeployment318525DA98cf1fe46f6a8379cb8241a5e412a297` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L633 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L650 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L656 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L665 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L671 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L672 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Action` L727 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.FunctionName` L728 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Principal` L734 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.SourceArn` L735 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Action` L683 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.FunctionName` L684 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Principal` L690 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.SourceArn` L691 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L767 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L768 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L771 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Action` L251 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.FunctionName` L252 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Principal` L258 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.SourceArn` L259 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Action` L401 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.FunctionName` L402 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Principal` L408 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.SourceArn` L409 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Action` L551 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.FunctionName` L552 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Principal` L558 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.SourceArn` L559 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Action` L718 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L719 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Principal` L725 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L726 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Action` L674 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.FunctionName` L675 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Principal` L681 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.SourceArn` L682 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L758 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L759 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L765 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeployment9F2A82FA10260421dc831e654354d72baa60bfb0` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L497 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L514 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.StageName` L520 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L529 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L535 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L536 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L631 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.ResourceId` L632 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.RestApiId` L635 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Action` L591 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.FunctionName` L592 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Principal` L598 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.SourceArn` L599 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Action` L547 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.FunctionName` L548 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Principal` L554 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.SourceArn` L555 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Action` L415 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.FunctionName` L416 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Principal` L422 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.SourceArn` L423 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L745 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L794 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L795 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Family` L801 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Memory` L802 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L803 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L804 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L807 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L213 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L216 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L544 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L541 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L527 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L530 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L510 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L479 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L475 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L476 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L625 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L622 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L591 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L608 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L611 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L560 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L556 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L557 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L297 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L330 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L336 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L266 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L283 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L286 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L235 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L231 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L232 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L422 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L419 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L452 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L458 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L388 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L405 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L408 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L353 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L354 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L651 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L1107 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Action` L1484 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.FunctionName` L1485 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Principal` L1491 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.SourceArn` L1492 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Action` L1626 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1627 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Principal` L1633 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1634 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Action` L1275 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.FunctionName` L1276 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Principal` L1282 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.SourceArn` L1283 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteCB8326BD` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L247 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteDefaultRouteIntegrationF55AEBDB` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L228 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.FunctionName` L189 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.SourceArn` L196 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L270 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Action` L1836 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L1837 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Principal` L1843 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L1844 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Action` L1792 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.FunctionName` L1793 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Principal` L1799 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.SourceArn` L1800 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1876 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1877 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1883 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeployment96972FE77ef5b9d25f9d7a35316435e48684bb49` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L1615 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L1632 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.StageName` L1638 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1647 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1653 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1654 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1749 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1750 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1753 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Action` L1709 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.FunctionName` L1710 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Principal` L1716 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.SourceArn` L1717 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Action` L1665 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.FunctionName` L1666 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Principal` L1672 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.SourceArn` L1673 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L679 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L680 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L686 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Action` L639 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.FunctionName` L640 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Principal` L646 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.SourceArn` L647 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Action` L595 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.FunctionName` L596 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Principal` L602 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.SourceArn` L603 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeployment318525DAd36b722f04bf6c9ce03a896415e5529d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L418 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L435 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L441 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L450 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L456 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L457 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Action` L512 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.FunctionName` L513 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Principal` L519 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.SourceArn` L520 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Action` L468 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.FunctionName` L469 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Principal` L475 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.SourceArn` L476 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L552 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L553 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L556 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L344 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Action` L193 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.FunctionName` L194 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Principal` L200 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.SourceArn` L201 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.ApiId` L156 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.Name` L162 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ApiDefaultApiKeyF991C37B` (AWS::AppSync::ApiKey) → `Properties.ApiId` L74 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.ApiId` L379 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.Name` L385 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.ApiId` L234 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.FieldName` L240 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.TypeName` L241 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.ApiId` L306 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.FieldName` L312 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.TypeName` L313 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.ApiId` L258 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.FieldName` L264 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.TypeName` L265 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.ApiId` L282 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.FieldName` L288 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.TypeName` L289 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.ApiId` L210 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.FieldName` L216 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.TypeName` L217 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.ApiId` L186 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.FieldName` L192 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.TypeName` L193 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.ApiId` L409 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.FieldName` L415 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'FieldName' is create-only; updating it will cause resource replacement -- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.TypeName` L416 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'TypeName' is create-only; updating it will cause resource replacement -- **I9001** `ApiSchema510EECD7` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L59 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.KeySchema` L447 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `thesimplegraphqlserviceapikey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L433 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteB7B22F2B` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L247 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteDefaultRouteIntegration4584A785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L228 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.FunctionName` L189 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.SourceArn` L196 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L270 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultRoute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L294 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `Integ` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L266 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L190 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L244 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ProtocolType' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L253 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L256 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentDDF5787C50cd54e1b820c67ddfe6e24991b1dd3f` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L164 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L180 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.StageName` L201 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.ParentId` L210 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.PathPart` L216 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L217 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L312 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.ResourceId` L313 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.RestApiId` L316 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Action` L228 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.FunctionName` L229 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Principal` L235 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.SourceArn` L236 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Action` L272 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.FunctionName` L273 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Principal` L279 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.SourceArn` L280 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Scope` L9 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'Scope' is create-only; updating it will cause resource replacement -- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.ResourceArn` L105 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'ResourceArn' is create-only; updating it will cause resource replacement -- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.WebACLArn` L124 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Property 'WebACLArn' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Action` L189 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Endpoint` L212 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Protocol` L208 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Region` L218 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.TopicArn` L209 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Action` L130 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.FunctionName` L131 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Principal` L137 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.SourceArn` L138 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Endpoint` L153 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Protocol` L149 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Region` L159 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.TopicArn` L150 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Action` L160 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.FunctionName` L161 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Principal` L167 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.SourceArn` L168 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Endpoint` L183 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Protocol` L179 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Region` L189 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.TopicArn` L180 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L353 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Action` L153 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.FunctionName` L154 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Principal` L160 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.SourceArn` L161 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Endpoint` L176 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Protocol` L172 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Region` L182 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.TopicArn` L173 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Action` L327 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.FunctionName` L328 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Principal` L334 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.SourceArn` L335 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Endpoint` L350 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Protocol` L346 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.TopicArn` L347 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentB3CB89A0a689bf68bef2302d0715c2d1a50794fc` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L75 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L94 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.StageName` L109 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.ContentType` L352 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.Name` L353 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.RestApiId` L349 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L119 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.ResourceId` L120 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.RestApiId` L126 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.ContentType` L329 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ContentType' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.Name` L330 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.RestApiId` L326 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.ParentId` L215 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.PathPart` L221 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L222 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L233 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.ResourceId` L234 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.RestApiId` L237 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeployment248C0700a88c9b4f7fb5eae343fa3265f3ea5ffe` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L133 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L153 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.StageName` L156 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L168 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L174 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L175 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Action` L273 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.FunctionName` L274 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Principal` L280 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.SourceArn` L281 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L314 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.ResourceId` L358 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.RestApiId` L361 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L188 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.ResourceId` L215 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.RestApiId` L218 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentD1A021868a8af37caaafdc0f762b784f7555ad86` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L551 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L570 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.StageName` L573 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.ParentId` L585 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.PathPart` L591 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L592 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Action` L603 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.FunctionName` L604 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Principal` L610 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.SourceArn` L611 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Action` L647 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.FunctionName` L648 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Principal` L654 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.SourceArn` L655 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L688 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.ResourceId` L716 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.RestApiId` L719 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Action` L181 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.FunctionName` L182 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Principal` L188 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.SourceArn` L189 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Action` L291 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.FunctionName` L292 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Principal` L298 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.SourceArn` L299 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L149 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.ResourceId` L153 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.RestApiId` L159 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeployment621CA0B04c89657aa92ebebc2018c4cd4a761ecd` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L113 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L133 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.StageName` L136 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L170 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L176 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L177 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L189 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.ResourceId` L246 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.RestApiId` L249 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L358 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Database` L681 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Name` L682 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L683 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L684 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `gluecrawlerroleB13EEB29` (AWS::IAM::Role) → `Properties.RoleName` L555 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `logauditingworkgroup` (AWS::Athena::WorkGroup) → `Properties.Name` L618 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `logsbucketE18563D9` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `logsbucketPolicy6C60198C` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `logscrawler` (AWS::Glue::Crawler) → `Properties.Name` L571 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L651 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L652 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L653 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L654 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `queryoutputbucket3DDDB997` (AWS::S3::Bucket) → `Properties.BucketName` L184 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `queryoutputbucketPolicy2BC02580` (AWS::S3::BucketPolicy) → `Properties.Bucket` L215 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Content` L292 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Description` L298 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L666 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Database' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L667 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L668 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'QueryString' is create-only; updating it will cause resource replacement -- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L669 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Property 'WorkGroup' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.RoleName` L19 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.RoleName` L83 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Description` L55 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Path` L56 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L11 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'S3BucketArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L26 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'S3BucketArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.DestinationLocationArn` L37 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'DestinationLocationArn' is create-only; updating it will cause resource replacement -- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.SourceLocationArn` L43 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Property 'SourceLocationArn' is create-only; updating it will cause resource replacement -- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L256 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L273 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L290 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L303 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L304 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L311 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L312 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L130 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L147 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L20 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L32 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L33 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L39 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L40 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L46 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L94 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L97 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L100 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L101 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L102 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L116 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L222 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L168 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L169 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L186 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L198 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L199 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L205 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L206 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L212 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.RouteTableId` L304 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L286 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L289 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1RouteTableF6513BC2` (AWS::EC2::RouteTable) → `Properties.VpcId` L275 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L234 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.VpcId` L258 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L381 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.RouteTableId` L385 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTable9AC81FAC` (AWS::EC2::RouteTable) → `Properties.VpcId` L356 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L367 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L370 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L315 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.CidrBlock` L323 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.VpcId` L339 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTable17DA183D` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTable3609F42C` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TheVPCVPCGWC9B93E30` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L413 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L97 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Engine` L100 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L114 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `RDSSecretAttachment39FC3A79` (AWS::SecretsManager::SecretTargetAttachment) → `Properties.SecretId` L79 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'SecretId' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L7 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `efsstorage` (AWS::EFS::FileSystem) → `Properties.Encrypted` L6 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'Encrypted' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L15 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L16 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L33 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Action` L314 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.FunctionName` L315 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Principal` L321 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.SourceArn` L322 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Action` L292 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.FunctionName` L293 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Principal` L299 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.SourceArn` L300 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L1011 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupPlanId' is create-only; updating it will cause resource replacement -- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L1017 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupSelection' is create-only; updating it will cause resource replacement -- **I9001** `BackupVault3A9C5852` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L939 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BackupVaultName' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L605 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.ImageId` L616 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.InstanceType` L619 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L620 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SubnetId` L628 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.UserData` L637 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L504 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L527 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Action` L828 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.FunctionName` L829 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Principal` L835 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.SourceArn` L836 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L652 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L653 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L684 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1RouteTableB5578A45` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTable5CB16C6C` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTable0BDD81D8` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2RouteTableF7A722BD` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L474 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L492 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L493 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcFromCDKVPCGW6C4E6589` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L734 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L742 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.ImageId` L755 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.InstanceType` L758 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.KeyName` L759 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L760 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SubnetId` L768 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.UserData` L777 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTable3887499F` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTable30EC1F5C` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableC0F77754` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTable5A43F858` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ServiceConnectVPCVPCGW60A84FEA` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.RepositoryName` L17 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.RepositoryName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Property 'RepositoryName' is create-only; updating it will cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Cluster` L473 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.LaunchType` L482 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.ServiceName` L518 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L337 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L366 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L367 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Family` L373 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Memory` L374 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L375 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L376 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L379 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.ClusterName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Name` L29 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Vpc` L30 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Vpc' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L219 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L238 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'FromPort' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L251 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L257 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L258 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L264 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ToPort' is create-only; updating it will cause resource replacement -- **I9001** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L41 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L602 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L619 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L636 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Cluster` L401 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.LaunchType` L411 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.ServiceName` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L273 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L302 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L303 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Family` L309 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Memory` L310 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L311 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L312 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L315 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.ListenerArn` L667 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'ListenerArn' is create-only; updating it will cause resource replacement -- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L550 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L566 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L567 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L568 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'TargetType' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L581 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Applications` L317 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Applications' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Configurations` L322 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Configurations' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.JobFlowRole` L365 in `cdk_py-emr--emr-cluster.template_json` - > Property 'JobFlowRole' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.LogUri` L366 in `cdk_py-emr--emr-cluster.template_json` - > Property 'LogUri' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Name` L378 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ReleaseLabel` L379 in `cdk_py-emr--emr-cluster.template_json` - > Property 'ReleaseLabel' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ServiceRole` L380 in `cdk_py-emr--emr-cluster.template_json` - > Property 'ServiceRole' is create-only; updating it will cause resource replacement -- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Steps` L383 in `cdk_py-emr--emr-cluster.template_json` - > Property 'Steps' is create-only; updating it will cause resource replacement -- **I9001** `emrjobflowprofile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L303 in `cdk_py-emr--emr-cluster.template_json` - > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement -- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-emr--emr-cluster.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `vpcVPCGW7984C166` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L209 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-emr--emr-cluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableA38152FE` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_py-emr--emr-cluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_py-emr--emr-cluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_py-emr--emr-cluster.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.RouteTableId` L178 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableA6135437` (AWS::EC2::RouteTable) → `Properties.VpcId` L149 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L160 in `cdk_py-emr--emr-cluster.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L163 in `cdk_py-emr--emr-cluster.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L108 in `cdk_py-emr--emr-cluster.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_py-emr--emr-cluster.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.VpcId` L132 in `cdk_py-emr--emr-cluster.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.PolicyName` L416 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.Principal` L417 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.Principal` L447 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.ThingName` L469 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ThingName' is create-only; updating it will cause resource replacement -- **I9001** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.FunctionName` L76 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L519 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `CfnPolicy` (AWS::IoT::Policy) → `Properties.PolicyName` L407 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `CfnRole` (AWS::IAM::Role) → `Properties.RoleName` L510 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `IoTCertCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L338 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MyCdkThing` (AWS::IoT::Thing) → `Properties.ThingName` L6 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Property 'ThingName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L85 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L92 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.FunctionName` L51 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.PackageType` L53 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Content` L11 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Description` L17 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L452 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.ResourceId` L476 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.RestApiId` L482 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Action` L419 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.FunctionName` L420 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Principal` L426 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.SourceArn` L427 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Action` L383 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.FunctionName` L384 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Principal` L390 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.SourceArn` L391 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeployment97FF782966d8a7a27285a49d048d420aab9f3106` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L223 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L243 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.StageName` L246 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.DomainName` L493 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiDomainMapurlshortappUrlShortenerApiB1BAB0CD7C6BCC1C` (AWS::ApiGateway::BasePathMapping) → `Properties.DomainName` L508 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L258 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L264 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L265 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L345 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L369 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L372 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Action` L312 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.FunctionName` L313 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.SourceArn` L320 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Action` L276 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.FunctionName` L277 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Principal` L283 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.SourceArn` L284 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L539 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.Name` L540 in `cdk_py-url-shortener--urlshort-app.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L47 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L48 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Family` L54 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Memory` L55 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L60 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L185 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L193 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Cluster` L138 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.LaunchType` L152 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L316 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement -- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L323 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L471 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'Direction' is create-only; updating it will cause resource replacement -- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L484 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement -- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L407 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'Direction' is create-only; updating it will cause resource replacement -- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L420 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTable6E169019` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTable0899A697` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L436 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L460 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L334 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L396 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Action` L103 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.FunctionName` L104 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Principal` L110 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceAccount` L111 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceArn` L114 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.KeySchema` L134 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L432 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L444 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L336 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L350 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L400 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L403 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L406 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L407 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L415 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L83 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L86 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L293 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L297 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L279 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L282 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L268 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L227 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L235 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L251 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L167 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L171 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L200 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L206 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L153 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L156 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L142 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L101 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L109 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L125 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L325 in `cdk_resource-overrides--resource-overrides.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L510 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L523 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L466 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResolverQueryLogConfigId` L493 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'ResolverQueryLogConfigId' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResourceId` L496 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.DestinationArn` L478 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationArn' is create-only; updating it will cause resource replacement -- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Name` L484 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Name` L549 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L558 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement -- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L563 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L346 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L328 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L331 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L317 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L276 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L427 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L398 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L409 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L412 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L357 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L381 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L94 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L123 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L129 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L65 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L24 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L48 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L220 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L249 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L255 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L150 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L455 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Bucket` L192 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Name` L195 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `examplebucketPolicyE09B485E` (AWS::S3::BucketPolicy) → `Properties.Bucket` L32 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Action` L171 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.FunctionName` L172 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Principal` L178 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.SourceAccount` L181 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `s3ObjectLambdaAP` (AWS::S3ObjectLambda::AccessPoint) → `Properties.Name` L238 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.CidrBlock` L71 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L74 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMDocumentTestVpcVPCGW7C58FC59` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L190 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L155 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.RouteTableId` L159 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTable4C0F352E` (AWS::EC2::RouteTable) → `Properties.VpcId` L130 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L141 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L144 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L89 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L97 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.VpcId` L113 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L404 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.ImageId` L415 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.InstanceType` L418 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L419 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SubnetId` L427 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.UserData` L440 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L362 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L380 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Content` L6 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.DocumentType` L36 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Name` L37 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Content` L133 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Description` L139 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `StaticSiteBasicWebsiteBucketPolicy8E799A1F` (AWS::S3::BucketPolicy) → `Properties.Bucket` L35 in `cdk_static-site-basic--MyStaticSite.template_json` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L107 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'StateMachineType' is create-only; updating it will cause resource replacement -- **I9001** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L6 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeployment77C863276f473a57d5bd4cb772b382f83651c7a2` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L138 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L157 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.StageName` L160 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.ParentId` L169 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'ParentId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.PathPart` L175 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'PathPart' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L176 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L234 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L318 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L321 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Name` L11 in `gh-issues_issue-144_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Source.Name` L13 in `gh-issues_issue-144_yaml` - > Property 'Source.Name' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Action` L32 in `gh-issues_issue-183_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L33 in `gh-issues_issue-183_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L34 in `gh-issues_issue-183_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L35 in `gh-issues_issue-183_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Action` L22 in `gh-issues_issue-183_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L23 in `gh-issues_issue-183_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L24 in `gh-issues_issue-183_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L25 in `gh-issues_issue-183_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L15 in `gh-issues_issue-186-clb_json` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L19 in `gh-issues_issue-186-clb_json` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ImagePipeline7DDDE57F` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L24 in `gh-issues_issue-186-imagebuilder_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L24 in `gh-issues_issue-226_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `gh-issues_issue-226_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L68 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L69 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Engine` L143 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Engine` L138 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L190 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceAutomatedBackupsArn` L191 in `gh-issues_issue-235_yaml` - > Property 'SourceDBInstanceAutomatedBackupsArn' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L27 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.StorageEncrypted` L28 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L149 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Engine` L148 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBClusterSnapshotIdentifier` L167 in `gh-issues_issue-235_yaml` - > Property 'DBClusterSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L166 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L80 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L79 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L56 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L57 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L62 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L63 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L227 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L226 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L228 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L109 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L110 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L220 in `gh-issues_issue-235_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L219 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L221 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L85 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L86 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L202 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L91 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L92 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L207 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L208 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L115 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L116 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Engine` L133 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L121 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L122 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L161 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Engine` L160 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Engine` L172 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L173 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L74 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L44 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L45 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L127 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L128 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.KmsKeyId` L39 in `gh-issues_issue-235_yaml` - > Property 'KmsKeyId' is create-only; updating it will cause resource replacement -- **I9001** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Engine` L213 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L155 in `gh-issues_issue-235_yaml` - > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L154 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L196 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBClusterIdentifier` L197 in `gh-issues_issue-235_yaml` - > Property 'SourceDBClusterIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L178 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceIdentifier` L179 in `gh-issues_issue-235_yaml` - > Property 'SourceDBInstanceIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L184 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.SourceDbiResourceId` L185 in `gh-issues_issue-235_yaml` - > Property 'SourceDbiResourceId' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L50 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L51 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L103 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L104 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L97 in `gh-issues_issue-235_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L98 in `gh-issues_issue-235_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L20 in `gh-issues_issue-246_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.Name` L21 in `gh-issues_issue-246_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L6 in `gh-issues_issue-247_json` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L12 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L21 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.Name` L22 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L30 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L57 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L58 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L66 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.Name` L67 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L75 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L48 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L49 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L39 in `gh-issues_issue-264_yaml` - > Property 'HostedZoneId' is create-only; updating it will cause resource replacement -- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L40 in `gh-issues_issue-264_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-34_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-34_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `gh-issues_issue-34_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `gh-issues_issue-34_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L11 in `gh-issues_issue-36_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `gh-issues_issue-37_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L6 in `gh-issues_issue-37_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L7 in `gh-issues_issue-37_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Name` L6 in `gh-issues_issue-38_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-39_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L12 in `gh-issues_issue-39_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L34 in `gh-issues_issue-39_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L16 in `gh-issues_issue-40_yaml` - > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement -- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.NodeType` L17 in `gh-issues_issue-40_yaml` - > Property 'NodeType' is create-only; updating it will cause resource replacement -- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L28 in `gh-issues_issue-40_yaml` - > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement -- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.NodeType` L29 in `gh-issues_issue-40_yaml` - > Property 'NodeType' is create-only; updating it will cause resource replacement -- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.Name` L5 in `gh-issues_issue-40_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.RoleArn` L6 in `gh-issues_issue-40_yaml` - > Property 'RoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-41_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L35 in `gh-issues_issue-42-if_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L28 in `gh-issues_issue-42-if_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L29 in `gh-issues_issue-42-if_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L30 in `gh-issues_issue-42-if_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `gh-issues_issue-42-if_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L18 in `gh-issues_issue-42-if_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L30 in `gh-issues_issue-42-ref_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L23 in `gh-issues_issue-42-ref_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L24 in `gh-issues_issue-42-ref_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L25 in `gh-issues_issue-42-ref_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `gh-issues_issue-42-ref_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `gh-issues_issue-42-ref_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L23 in `gh-issues_issue-42_yaml` - > Property 'Cluster' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L16 in `gh-issues_issue-42_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L17 in `gh-issues_issue-42_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L18 in `gh-issues_issue-42_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `gh-issues_issue-42_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `gh-issues_issue-42_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L7 in `gh-issues_issue-45_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L6 in `gh-issues_issue-45_json` - > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement -- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L8 in `gh-issues_issue-45_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.RoleArn` L7 in `gh-issues_issue-46_json` - > Property 'RoleArn' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-47_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.DBClusterIdentifier` L11 in `gh-issues_issue-49_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-49_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-49_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L6 in `gh-issues_issue-52_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L7 in `gh-issues_issue-52_json` - > Property 'NodeRole' is create-only; updating it will cause resource replacement -- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Subnets` L8 in `gh-issues_issue-52_json` - > Property 'Subnets' is create-only; updating it will cause resource replacement -- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L596 in `gh-issues_issue-53_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L604 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.AmiType` L957 in `gh-issues_issue-53_json` - > Property 'AmiType' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L958 in `gh-issues_issue-53_json` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.InstanceTypes` L962 in `gh-issues_issue-53_json` - > Property 'InstanceTypes' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L965 in `gh-issues_issue-53_json` - > Property 'NodeRole' is create-only; updating it will cause resource replacement -- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Subnets` L976 in `gh-issues_issue-53_json` - > Property 'Subnets' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Content` L462 in `gh-issues_issue-53_json` - > Property 'Content' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Description` L468 in `gh-issues_issue-53_json` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.LicenseInfo` L469 in `gh-issues_issue-53_json` - > Property 'LicenseInfo' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `gh-issues_issue-53_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L334 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.RouteTableId` L338 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTable886260DA` (AWS::EC2::RouteTable) → `Properties.VpcId` L315 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L323 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L326 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L269 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.VpcId` L297 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L411 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.RouteTableId` L415 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTable1EDE83AC` (AWS::EC2::RouteTable) → `Properties.VpcId` L392 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L400 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L403 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L346 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.CidrBlock` L354 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.VpcId` L374 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L86 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.RouteTableId` L90 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.AllocationId` L117 in `gh-issues_issue-53_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.SubnetId` L123 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTable5F0A6273` (AWS::EC2::RouteTable) → `Properties.VpcId` L67 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L75 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L78 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L210 in `gh-issues_issue-53_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.RouteTableId` L214 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.AllocationId` L241 in `gh-issues_issue-53_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.SubnetId` L247 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L199 in `gh-issues_issue-53_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L202 in `gh-issues_issue-53_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2RouteTableEC6A2C2A` (AWS::EC2::RouteTable) → `Properties.VpcId` L191 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L145 in `gh-issues_issue-53_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L153 in `gh-issues_issue-53_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.VpcId` L173 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `UserVpcVPCGWEFD8AF3B` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L437 in `gh-issues_issue-53_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `WeakConsumer` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `gh-issues_issue-56_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `Canary` (AWS::Synthetics::Canary) → `Properties.Name` L6 in `gh-issues_issue-62_json` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-65_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Action` L18 in `gh-issues_issue-65_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.FunctionName` L19 in `gh-issues_issue-65_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Principal` L20 in `gh-issues_issue-65_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.SourceAccount` L21 in `gh-issues_issue-65_json` - > Property 'SourceAccount' is create-only; updating it will cause resource replacement -- **I9001** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L6 in `gh-issues_issue-67_json` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `gh-issues_issue-68_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MyFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L7 in `gh-issues_issue-68_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CompoundSub` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRight` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `good_E3019_identity_no_false_positive_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `good_E3022_multi_element_join_distinct_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `good_E9001_aws_cdk_metadata_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L8 in `good_W3010_getazs_not_flagged_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_W3010_getazs_not_flagged_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_W3010_getazs_not_flagged_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_W3010_getazs_not_flagged_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Authorizer1` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L19 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Deployment1` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L36 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L27 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L26 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L25 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L40 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.StageName` L42 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L9 in `good_aurora_dbinstance_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `good_aurora_dbinstance_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `good_aurora_dbinstance_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BucketLong` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `good_both_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketShort` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_both_forms_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_complex_conditions_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L41 in `good_complex_conditions_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_complex_conditions_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L37 in `good_complex_conditions_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L39 in `good_complex_conditions_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DevBucket` (AWS::S3::Bucket) → `Properties.BucketName` L46 in `good_complex_conditions_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `good_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L96 in `good_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L91 in `good_core_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `good_core_conditions_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L36 in `good_core_conditions_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L67 in `good_core_conditions_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L68 in `good_core_conditions_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `good_core_conditions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `good_core_conditions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_core_config_default_e3012_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `good_core_config_default_e3012_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L63 in `good_core_resource_attributes_yaml` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.BucketName` L82 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DependsOnList` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `good_core_resource_attributes_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_is-defined_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_custom_is-not-defined_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-large_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-small_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L14 in `good_deletion_policies_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.Engine` L10 in `good_deletion_policies_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L11 in `good_deletion_policies_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `good_dynamodb_provisioned_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_provisioned_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_dynamodb_valid_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_valid_attributes_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `good_ecs_awsvpc_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `good_ecs_awsvpc_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L203 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L201 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L202 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L200 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L199 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L155 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L153 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L154 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L152 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L151 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L191 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L189 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L190 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L188 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L187 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L143 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L141 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L142 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L140 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L139 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L177 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.KeySchema` L166 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L112 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L108 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L129 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L127 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L123 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L128 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L126 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L124 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L70 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L67 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L63 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L68 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L66 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L69 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L64 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Family` L48 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L51 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L49 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L81 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.TableName` L79 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L97 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.TableName` L92 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L17 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L15 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L16 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L14 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L37 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L35 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Family` L31 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Memory` L36 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L34 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L32 in `good_ecs_fargate_ddb_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L114 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L108 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Family` L105 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Memory` L109 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L110 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L106 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L24 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L25 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L16 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L48 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L43 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L40 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L44 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L42 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L41 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L80 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L72 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L73 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L64 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L56 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L60 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L58 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L96 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L90 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `good_ecs_fargate_units_and_sizes_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_valid_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `good_ecs_fargate_valid_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_valid_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `good_ecs_fargate_valid_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_valid_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `good_ecs_fargate_valid_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L19 in `good_ecs_fargate_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L10 in `good_ecs_fargate_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L11 in `good_ecs_fargate_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L7 in `good_ecs_fargate_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L16 in `good_enum_case_insensitive_casing_yaml` - > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L18 in `good_enum_case_insensitive_casing_yaml` - > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L20 in `good_enum_case_insensitive_casing_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `good_enum_case_insensitive_casing_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L27 in `good_enum_case_insensitive_casing_yaml` - > Property 'Tags' is create-only; updating it will cause resource replacement -- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L25 in `good_enum_case_insensitive_casing_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L19 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L35 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L12 in `good_functions_dynamic_reference_embedded_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster0` (AWS::ECS::Cluster) → `Properties.ClusterName` L14 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster1` (AWS::ECS::Cluster) → `Properties.ClusterName` L22 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L30 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L38 in `good_functions_findinmap_default_value_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.MeshName` L46 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.MeshName` L62 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L73 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.MeshName` L84 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.MeshName` L96 in `good_functions_findinmap_default_value_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L49 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L81 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L103 in `good_functions_findinmap_enhanced_yaml` - > Property 'ClusterName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh` (AWS::AppMesh::Mesh) → `Properties.MeshName` L23 in `good_functions_findinmap_enhanced_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L36 in `good_functions_findinmap_enhanced_yaml` - > Property 'MeshName' is create-only; updating it will cause resource replacement -- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L62 in `good_functions_findinmap_enhanced_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L18 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `good_functions_findinmap_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.ApplicationId` L31 in `good_functions_relationship_conditions_sam_yaml` - > Property 'ApplicationId' is create-only; updating it will cause resource replacement -- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L31 in `good_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `good_functions_relationship_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_functions_select_string_index_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_functions_select_string_index_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_functions_select_string_index_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_functions_select_string_index_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L28 in `good_functions_select_string_index_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `TestRole` (AWS::IAM::Role) → `Properties.RoleName` L10 in `good_functions_sub_needed_custom_excludes_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L90 in `good_functions_sub_needed_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.ResourceId` L114 in `good_functions_sub_needed_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.RestApiId` L115 in `good_functions_sub_needed_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `IOTPolicies` (AWS::IoT::Policy) → `Properties.PolicyName` L121 in `good_functions_sub_needed_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L57 in `good_functions_sub_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L58 in `good_functions_sub_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L59 in `good_functions_sub_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Name` L52 in `good_functions_sub_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L33 in `good_functions_sub_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L34 in `good_functions_sub_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVPc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L72 in `good_functions_sub_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L124 in `good_generic_yaml` - > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L133 in `good_generic_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L79 in `good_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L75 in `good_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L76 in `good_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L77 in `good_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L86 in `good_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L88 in `good_generic_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L98 in `good_generic_yaml` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L95 in `good_generic_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `good_generic_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.KeyName` L97 in `good_generic_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L106 in `good_generic_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.UserData` L113 in `good_generic_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L69 in `good_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L45 in `good_generic_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_getazs_resolves_current_regions_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_getazs_resolves_current_regions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_getazs_resolves_current_regions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_getazs_resolves_current_regions_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_getazs_resolves_current_regions_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_getazs_resolves_current_regions_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.PolicyName` L66 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.UserName` L65 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.RoleName` L17 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L76 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'InstanceArn' is create-only; updating it will cause resource replacement -- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Name` L77 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `good_lambda_permission_source_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `good_lambda_permission_source_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `good_lambda_permission_source_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `good_lambda_permission_source_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L12 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L13 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L14 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L15 in `good_lambda_permission_sourcearn_ref_no_account_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_snapstart_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_zipfile_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `good_mappings_used_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `good_mappings_used_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `good_no_value_yaml` - > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `good_no_value_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `good_no_value_yaml` - > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `good_no_value_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `good_no_value_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `good_no_value_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L145 in `good_no_value_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L148 in `good_no_value_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `good_no_value_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `good_no_value_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.AvailabilityZones` L12 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'AvailabilityZones' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.DBClusterIdentifier` L9 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.MasterUsername` L10 in `good_no_w3010_on_unlisted_type_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `good_override_complete_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_complete_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L13 in `good_override_complete_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_required_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L20 in `good_parameters_not_used_parameters_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L21 in `good_parameters_not_used_parameters_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L22 in `good_parameters_not_used_parameters_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L23 in `good_parameters_used_transforms_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L24 in `good_parameters_used_transforms_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L25 in `good_parameters_used_transforms_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.CidrBlock` L57 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.VpcId` L61 in `good_properties_ec2_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.CidrBlock` L65 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `good_properties_ec2_vpc_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L32 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L33 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L38 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L37 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.CidrBlock` L43 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L42 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.CidrBlock` L48 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L47 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.CidrBlock` L53 in `good_properties_ec2_vpc_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L52 in `good_properties_ec2_vpc_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L40 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L42 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L31 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L33 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L64 in `good_properties_rt_association_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L69 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L71 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L48 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L50 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L56 in `good_properties_rt_association_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L58 in `good_properties_rt_association_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NatGW` (AWS::EC2::NatGateway) → `Properties.SubnetId` L30 in `good_redshift_private_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L35 in `good_redshift_private_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L34 in `good_redshift_private_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `good_redshift_private_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `good_redshift_private_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `good_redshift_private_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `good_redshift_private_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `good_redshift_private_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `good_redshift_private_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.DBName` L9 in `good_redshift_valid_nodetype_yaml` - > Property 'DBName' is create-only; updating it will cause resource replacement -- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.MasterUsername` L7 in `good_redshift_valid_nodetype_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.ProjectArn` L14 in `good_region_conditional_resource_type_yaml` - > Property 'ProjectArn' is create-only; updating it will cause resource replacement -- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `good_resources_codepipeline_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_deletionpolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `good_resources_dynamodb_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L47 in `good_resources_dynamodb_attributes_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CorrelatedIndex` (AWS::DynamoDB::Table) → `Properties.KeySchema` L31 in `good_resources_dynamodb_conditional_scenarios_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L55 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L60 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L126 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L130 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L109 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L113 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L27 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L35 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L44 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L19 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L74 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L80 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L143 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement -- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L147 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L93 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L99 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Property 'Port' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `good_resources_iam_managed_policy_description_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `good_resources_iam_policy_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `good_resources_iam_ref_with_path_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `good_resources_iam_ref_with_path_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `good_resources_iam_ref_with_path_yaml` - > Property 'GroupName' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `good_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `good_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L73 in `good_resources_iam_ref_with_path_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `good_resources_iam_ref_with_path_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Function3` (AWS::Lambda::Function) → `Properties.PackageType` L29 in `good_resources_lambda_required_properties_yaml` - > Property 'PackageType' is create-only; updating it will cause resource replacement -- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `good_resources_name_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Action` L92 in `good_resources_primary_identifiers_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.FunctionName` L91 in `good_resources_primary_identifiers_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Principal` L93 in `good_resources_primary_identifiers_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Action` L98 in `good_resources_primary_identifiers_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `good_resources_primary_identifiers_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Principal` L99 in `good_resources_primary_identifiers_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L40 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L41 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L63 in `good_resources_primary_identifiers_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L64 in `good_resources_primary_identifiers_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.Path` L9 in `good_resources_properties_allowed_pattern_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.RoleName` L8 in `good_resources_properties_allowed_pattern_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L8 in `good_resources_properties_az_cdk_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.VpcId` L7 in `good_resources_properties_az_cdk_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L12 in `good_resources_properties_exclusive_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L6 in `good_resources_properties_exclusive_yaml` - > Property 'CidrIp' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L8 in `good_resources_properties_exclusive_yaml` - > Property 'GroupId' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L7 in `good_resources_properties_exclusive_yaml` - > Property 'IpProtocol' is create-only; updating it will cause resource replacement -- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L5 in `good_resources_properties_exclusive_yaml` - > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L39 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.PipelineName` L89 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'PipelineName' is create-only; updating it will cause resource replacement -- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L41 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `Authorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L6 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L21 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L45 in `good_resources_properties_password_yaml` - > Property 'UserName' is create-only; updating it will cause resource replacement -- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Engine` L29 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L30 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `good_resources_properties_password_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L39 in `good_resources_properties_password_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `AppSyncSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L10 in `good_resources_properties_templated_code_yaml` - > Property 'ApiId' is create-only; updating it will cause resource replacement -- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L26 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `good_resources_rds_instance_sizes_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L12 in `good_resources_rds_not_enum_master_username_parameter_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L13 in `good_resources_rds_not_enum_master_username_parameter_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_resources_s3_access-control-obsolete_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L13 in `good_resources_s3_access-control-obsolete_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L15 in `good_resources_update_policy_supported_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L16 in `good_resources_update_policy_supported_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `good_resources_update_policy_supported_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.FunctionName` L23 in `good_resources_update_policy_supported_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.Name` L25 in `good_resources_update_policy_supported_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `good_resources_update_policy_supported_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_updatereplacepolicy_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `GroupBothBranchesValid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L36 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupMutuallyExclusiveCnameItems` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `GroupUnreachableInvalid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L51 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L13 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.Name` L14 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L65 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.Name` L66 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L25 in `good_route53_conditional_record_arrays_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.Name` L26 in `good_route53_conditional_record_arrays_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `good_route53_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `good_route53_conditional_record_items_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `good_route53_conditional_record_items_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L14 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.Name` L15 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L61 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.Name` L62 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L30 in `good_route53_conditional_scenarios_yaml` - > Property 'HostedZoneName' is create-only; updating it will cause resource replacement -- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `good_route53_conditional_scenarios_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L16 in `good_schema_required_xor_resource_condition_yaml` - > Property 'PolicyName' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L19 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L20 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ScalableDimension' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L18 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement -- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L21 in `good_schema_required_xor_resource_condition_yaml` - > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `good_schema_valid_resources_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_simple_sub_prefix_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L76 in `good_some_logs_stream_lambda_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `good_sqs_fifo_valid_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `good_sqs_fifo_valid_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `good_ssm_document_valid_yaml` - > Property 'Content' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `good_ssm_document_valid_yaml` - > Property 'DocumentType' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `good_ssm_parameter_name_type_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `good_stackset_conditional_template_source_yaml` - > Property 'PermissionModel' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `good_stackset_conditional_template_source_yaml` - > Property 'StackSetName' is create-only; updating it will cause resource replacement -- **I9001** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L24 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.BucketName` L44 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L38 in `good_string_length_unknowable_values_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_sub_not_needed_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L99 in `good_transform_language_extension_yaml` - > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `good_transform_language_extension_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L97 in `good_transform_language_extension_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L58 in `good_transform_language_extension_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L91 in `good_transform_language_extension_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L92 in `good_transform_language_extension_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `MyVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L25 in `good_vpc_subnets_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L26 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `good_vpc_subnets_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_vpc_subnets_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_vpc_subnets_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_vpc_subnets_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L6 in `integration_availability-zones_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L5 in `integration_availability-zones_yaml` - > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `integration_availability-zones_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L11 in `integration_availability-zones_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.TableName` L12 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L35 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.TableName` L31 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.KeySchema` L59 in `integration_aws-dynamodb-table_yaml` - > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.TableName` L50 in `integration_aws-dynamodb-table_yaml` - > Property 'TableName' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `integration_aws-ec2-instance_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L12 in `integration_aws-ec2-instance_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L13 in `integration_aws-ec2-instance_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L7 in `integration_aws-ec2-instance_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L14 in `integration_aws-ec2-launchtemplate_yaml` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L14 in `integration_aws-ec2-networkinterface_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L10 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L8 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L14 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L19 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L24 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.Ipv6CidrBlock` L25 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv6CidrBlock' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L23 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L30 in `integration_aws-ec2-subnet_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L31 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L32 in `integration_aws-ec2-subnet_yaml` - > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement -- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.VpcId` L29 in `integration_aws-ec2-subnet_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L112 in `integration_cfn-gather_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L113 in `integration_cfn-gather_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `integration_cfn-gather_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L27 in `integration_cfn-gather_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L118 in `integration_cfn-gather_yaml` - > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L120 in `integration_cfn-gather_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `CognitoAuthorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L57 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `Deployment` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L78 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `FargateService` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `integration_cfn-gather_yaml` - > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L105 in `integration_cfn-gather_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `FifoProcessor` (AWS::Lambda::Function) → `Properties.FunctionName` L94 in `integration_cfn-gather_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L40 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L41 in `integration_cfn-gather_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L67 in `integration_cfn-gather_yaml` - > Property 'HttpMethod' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.ResourceId` L66 in `integration_cfn-gather_yaml` - > Property 'ResourceId' is create-only; updating it will cause resource replacement -- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.RestApiId` L65 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L89 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L90 in `integration_cfn-gather_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L82 in `integration_cfn-gather_yaml` - > Property 'RestApiId' is create-only; updating it will cause resource replacement -- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.StageName` L84 in `integration_cfn-gather_yaml` - > Property 'StageName' is create-only; updating it will cause resource replacement -- **I9001** `StandardDLQ` (AWS::SQS::Queue) → `Properties.FifoQueue` L48 in `integration_cfn-gather_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `integration_cfn-gather_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `integration_cfn-gather_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L8 in `integration_cfn-gather_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L11 in `integration_custom-resources_yaml` - > Property 'ServiceToken' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Affinity` L34 in `integration_deployment-file-template_yaml` - > Property 'Affinity' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `integration_deployment-file-template_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L36 in `integration_deployment-file-template_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L37 in `integration_deployment-file-template_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Tenancy` L38 in `integration_deployment-file-template_yaml` - > Property 'Tenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L28 in `integration_deployment-file-template_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `integration_deployment-file-template_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L30 in `integration_deployment-file-template_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L24 in `integration_deployment-file-template_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L30 in `integration_dynamic-references_yaml` - > Property 'BrokerName' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L24 in `integration_dynamic-references_yaml` - > Property 'DeploymentMode' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L25 in `integration_dynamic-references_yaml` - > Property 'EngineType' is create-only; updating it will cause resource replacement -- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L31 in `integration_dynamic-references_yaml` - > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L9 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L16 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L37 in `integration_dynamic-references_yaml` - > Property 'EventSourceArn' is create-only; updating it will cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `integration_formats_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L29 in `integration_formats_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L30 in `integration_formats_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `integration_formats_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L22 in `integration_formats_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `integration_formats_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `integration_formats_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `integration_formats_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.AvailabilityZone` L10 in `integration_getatt-types_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstancePlatform` L13 in `integration_getatt-types_yaml` - > Property 'InstancePlatform' is create-only; updating it will cause resource replacement -- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstanceType` L12 in `integration_getatt-types_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L57 in `integration_getatt-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L68 in `integration_getatt-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L69 in `integration_getatt-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Memory` L70 in `integration_getatt-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L71 in `integration_getatt-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `integration_getatt-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L74 in `integration_getatt-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L116 in `integration_ref-types_yaml` - > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L114 in `integration_ref-types_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L115 in `integration_ref-types_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L117 in `integration_ref-types_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L59 in `integration_ref-types_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L58 in `integration_ref-types_yaml` - > Property 'Type' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L49 in `integration_ref-types_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L50 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L54 in `integration_ref-types_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L39 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L40 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L44 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L45 in `integration_ref-types_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `integration_ref-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L104 in `integration_ref-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L105 in `integration_ref-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Memory` L106 in `integration_ref-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `integration_ref-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L108 in `integration_ref-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L110 in `integration_ref-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L72 in `integration_ref-types_yaml` - > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L83 in `integration_ref-types_yaml` - > Property 'Cpu' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L84 in `integration_ref-types_yaml` - > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Memory` L85 in `integration_ref-types_yaml` - > Property 'Memory' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L86 in `integration_ref-types_yaml` - > Property 'NetworkMode' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `integration_ref-types_yaml` - > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement -- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L89 in `integration_ref-types_yaml` - > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement -- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L35 in `integration_ref-types_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L94 in `integration_resources-cloudformation-init_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L118 in `issues_sam_w_conditions_yaml` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `issues_sam_w_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L345 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L343 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L334 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L332 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L391 in `issues_sam_w_conditions_yaml` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L390 in `issues_sam_w_conditions_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L392 in `issues_sam_w_conditions_yaml` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L393 in `issues_sam_w_conditions_yaml` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L139 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L138 in `issues_sam_w_conditions_yaml` - > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement -- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Path` L140 in `issues_sam_w_conditions_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `TenantInfoReadPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L154 in `issues_sam_w_conditions_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L220 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L218 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L209 in `issues_sam_w_conditions_yaml` - > Property 'FifoQueue' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L207 in `issues_sam_w_conditions_yaml` - > Property 'QueueName' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L266 in `issues_sam_w_conditions_yaml` - > Property 'Endpoint' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L265 in `issues_sam_w_conditions_yaml` - > Property 'Protocol' is create-only; updating it will cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L267 in `issues_sam_w_conditions_yaml` - > Property 'Region' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L268 in `issues_sam_w_conditions_yaml` - > Property 'TopicArn' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L566 in `lsp_comprehensive_json` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L569 in `lsp_comprehensive_json` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L583 in `lsp_comprehensive_json` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L492 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L493 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L673 in `lsp_comprehensive_json` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L635 in `lsp_comprehensive_json` - > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L647 in `lsp_comprehensive_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L664 in `lsp_comprehensive_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L680 in `lsp_comprehensive_json` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L657 in `lsp_comprehensive_json` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L847 in `lsp_comprehensive_json` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L718 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L736 in `lsp_comprehensive_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L803 in `lsp_comprehensive_json` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L509 in `lsp_comprehensive_json` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L402 in `lsp_comprehensive_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L394 in `lsp_comprehensive_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L391 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L878 in `lsp_comprehensive_json` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L363 in `lsp_comprehensive_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L444 in `lsp_comprehensive_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L445 in `lsp_comprehensive_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L238 in `lsp_comprehensive_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L239 in `lsp_comprehensive_yaml` - > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L243 in `lsp_comprehensive_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L205 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L206 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L280 in `lsp_comprehensive_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L269 in `lsp_comprehensive_yaml` - > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L271 in `lsp_comprehensive_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L276 in `lsp_comprehensive_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L281 in `lsp_comprehensive_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L370 in `lsp_comprehensive_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L294 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L295 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L306 in `lsp_comprehensive_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L344 in `lsp_comprehensive_yaml` - > Property 'RoleName' is create-only; updating it will cause resource replacement -- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L217 in `lsp_comprehensive_yaml` - > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L161 in `lsp_comprehensive_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L160 in `lsp_comprehensive_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L159 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L391 in `lsp_comprehensive_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L143 in `lsp_comprehensive_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L177 in `lsp_comprehensive_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L178 in `lsp_comprehensive_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L105 in `lsp_condition-usage_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L95 in `lsp_condition-usage_json` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L96 in `lsp_condition-usage_json` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L87 in `lsp_condition-usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_condition-usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L107 in `lsp_condition-usage_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.SecurityGroups` L109 in `lsp_condition-usage_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L96 in `lsp_condition-usage_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L97 in `lsp_condition-usage_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L143 in `lsp_condition-usage_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L89 in `lsp_condition-usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L171 in `lsp_condition-usage_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `NestedConditionResource` (AWS::S3::BucketPolicy) → `Properties.Bucket` L149 in `lsp_condition-usage_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_condition-usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L137 in `lsp_condition-usage_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `lsp_constants_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L43 in `lsp_constants_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `lsp_constants_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `lsp_constants_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L41 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L49 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L65 in `lsp_parameter_usage_json` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L35 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L48 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L53 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket6` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `Bucket7` (AWS::S3::Bucket) → `Properties.BucketName` L64 in `lsp_parameter_usage_yaml` - > Property 'BucketName' is create-only; updating it will cause resource replacement -- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L133 in `public_lambda-poller_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L192 in `public_lambda-poller_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L193 in `public_lambda-poller_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `public_lambda-poller_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `public_lambda-poller_json` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L37 in `public_lambda-poller_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L172 in `public_lambda-poller_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L197 in `public_lambda-poller_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L198 in `public_lambda-poller_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L199 in `public_lambda-poller_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L200 in `public_lambda-poller_yaml` - > Property 'SourceArn' is create-only; updating it will cause resource replacement -- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L27 in `public_lambda-poller_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.DatabaseName` L23 in `public_rds-cluster_yaml` - > Property 'DatabaseName' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L24 in `public_rds-cluster_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.EngineMode` L25 in `public_rds-cluster_yaml` - > Property 'EngineMode' is create-only; updating it will cause resource replacement -- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L21 in `public_rds-cluster_yaml` - > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L1342 in `public_watchmaker_json` - > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.ImageId` L1398 in `public_watchmaker_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L1401 in `public_watchmaker_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.KeyName` L1404 in `public_watchmaker_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1407 in `public_watchmaker_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.UserData` L1451 in `public_watchmaker_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1690 in `public_watchmaker_json` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2046 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L2202 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L2187 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1985 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Action` L1090 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1089 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1091 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Action` L974 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L973 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Action` L1187 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1186 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1188 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Action` L1366 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1365 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1367 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Action` L768 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L767 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L769 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Action` L858 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L857 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L859 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Action` L1269 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1268 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1270 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Action` L674 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L673 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Principal` L675 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Action` L559 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L558 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L560 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Action` L489 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L488 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Principal` L490 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Action` L1558 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1557 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1559 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEncryptedVolumes` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L373 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L983 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrailBucket` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1099 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateCloudTrailLogIntegrity` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1197 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateConfigInAllRegions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1481 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateKeyRotations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1376 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluatePolicyPermissions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L777 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateRootAccount` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L328 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForEvaluateUserPolicyAssociations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L867 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForIamPasswordPolicy` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L202 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForInstanceRoleUses` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1279 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForMfaForUsers` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L681 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L342 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForRestrictedSsh` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L389 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L405 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcDefaultSecurityGroupss` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L569 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcFlowLogs` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L588 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConfigRuleForVpcPeeringRouteTabless` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1568 in `quickstart_cis_benchmark_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1775 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleLoginFailureCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1761 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1738 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `ConsoleSigninWithoutMfaCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1722 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Name` L1938 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Name` L1907 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2070 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L1473 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L1472 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L1474 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L318 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L317 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1003 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1120 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.FunctionName` L890 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1398 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1302 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L703 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.FunctionName` L231 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L799 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1217 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.FunctionName` L610 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L501 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.FunctionName` L425 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1503 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.FunctionName` L2255 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.FunctionName` L1860 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.FunctionName` L124 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.FunctionName` L1603 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1700 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `IAMRootActivityCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1685 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2008 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1812 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `KMSCustomerKeyDeletionCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1798 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1963 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Action` L1898 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.FunctionName` L1897 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Principal` L1899 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Action` L2343 in `quickstart_cis_benchmark_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.FunctionName` L2342 in `quickstart_cis_benchmark_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Principal` L2344 in `quickstart_cis_benchmark_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2121 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2151 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Name` L2349 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2093 in `quickstart_cis_benchmark_yaml` - > Property 'Name' is create-only; updating it will cause resource replacement -- **I9001** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.TopicName` L1589 in `quickstart_cis_benchmark_yaml` - > Property 'TopicName' is create-only; updating it will cause resource replacement -- **I9001** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1662 in `quickstart_cis_benchmark_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `UnauthorizedAttemptsCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1651 in `quickstart_cis_benchmark_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L233 in `quickstart_config-rules_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `quickstart_config-rules_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L234 in `quickstart_config-rules_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L325 in `quickstart_config-rules_json` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L322 in `quickstart_config-rules_json` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L326 in `quickstart_config-rules_json` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L301 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L63 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L48 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L83 in `quickstart_config-rules_json` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L133 in `quickstart_config-rules_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L110 in `quickstart_config-rules_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L141 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L213 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L326 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L47 in `quickstart_iam_json` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L143 in `quickstart_nat-instance_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L149 in `quickstart_nat-instance_json` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.ImageId` L129 in `quickstart_nat-instance_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `quickstart_nat-instance_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.KeyName` L100 in `quickstart_nat-instance_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L132 in `quickstart_nat-instance_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.UserData` L111 in `quickstart_nat-instance_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNatInstanceEni` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L78 in `quickstart_nat-instance_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L157 in `quickstart_nat-instance_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.RouteTableId` L158 in `quickstart_nat-instance_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L378 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L380 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L382 in `quickstart_nist_application_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L384 in `quickstart_nist_application_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L386 in `quickstart_nist_application_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L509 in `quickstart_nist_application_yaml` - > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L510 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L512 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L514 in `quickstart_nist_application_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L516 in `quickstart_nist_application_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L518 in `quickstart_nist_application_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingDownApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L563 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingDownWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L571 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `quickstart_nist_application_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L598 in `quickstart_nist_application_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L610 in `quickstart_nist_application_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L624 in `quickstart_nist_application_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rAutoScalingUpApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L631 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rAutoScalingUpWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L639 in `quickstart_nist_application_yaml` - > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L734 in `quickstart_nist_application_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L745 in `quickstart_nist_application_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L748 in `quickstart_nist_application_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L770 in `quickstart_nist_application_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L783 in `quickstart_nist_application_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.ImageId` L800 in `quickstart_nist_application_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L802 in `quickstart_nist_application_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L804 in `quickstart_nist_application_yaml` - > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L806 in `quickstart_nist_application_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.UserData` L811 in `quickstart_nist_application_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rPostProcInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L955 in `quickstart_nist_application_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Path` L970 in `quickstart_nist_application_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L1022 in `quickstart_nist_application_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBName` L1011 in `quickstart_nist_application_yaml` - > Property 'DBName' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L1013 in `quickstart_nist_application_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Engine` L1015 in `quickstart_nist_application_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L1018 in `quickstart_nist_application_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L1020 in `quickstart_nist_application_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L1021 in `quickstart_nist_application_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rS3AccessLogsPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1029 in `quickstart_nist_application_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1067 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1089 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1094 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1117 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1122 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1135 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1140 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1146 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1151 in `quickstart_nist_application_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1174 in `quickstart_nist_application_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rWebContentS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1200 in `quickstart_nist_application_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L165 in `quickstart_nist_config_rules_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L166 in `quickstart_nist_config_rules_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L170 in `quickstart_nist_config_rules_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L174 in `quickstart_nist_config_rules_yaml` - > Property 'Action' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L175 in `quickstart_nist_config_rules_yaml` - > Property 'FunctionName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `quickstart_nist_config_rules_yaml` - > Property 'Principal' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L185 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L223 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L238 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L251 in `quickstart_nist_config_rules_yaml` - > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L277 in `quickstart_nist_config_rules_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L292 in `quickstart_nist_config_rules_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L59 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L139 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L238 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L314 in `quickstart_nist_iam_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rArchiveLogsBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L63 in `quickstart_nist_logging_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailChange` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L135 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L149 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L182 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Path` L196 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rCloudTrailS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L234 in `quickstart_nist_logging_yaml` - > Property 'Bucket' is create-only; updating it will cause resource replacement -- **I9001** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Path` L334 in `quickstart_nist_logging_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rIAMCreateAccessKey` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L383 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L397 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L412 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMPolicyChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L424 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rIAMRootActivity` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L435 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L448 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rNetworkAclChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L463 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L476 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L499 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L514 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L527 in `quickstart_nist_logging_yaml` - > Property 'AlarmName' is create-only; updating it will cause resource replacement -- **I9001** `rUnauthorizedAttempts` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L539 in `quickstart_nist_logging_yaml` - > Property 'LogGroupName' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L305 in `quickstart_nist_vpc_management_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L309 in `quickstart_nist_vpc_management_yaml` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L314 in `quickstart_nist_vpc_management_yaml` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L316 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L321 in `quickstart_nist_vpc_management_yaml` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L326 in `quickstart_nist_vpc_management_yaml` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L410 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L421 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L432 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L434 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L439 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L444 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L446 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L451 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L456 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L458 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L463 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L468 in `quickstart_nist_vpc_management_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L470 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L475 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L512 in `quickstart_nist_vpc_management_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L514 in `quickstart_nist_vpc_management_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L516 in `quickstart_nist_vpc_management_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L518 in `quickstart_nist_vpc_management_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L525 in `quickstart_nist_vpc_management_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L549 in `quickstart_nist_vpc_management_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L553 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L588 in `quickstart_nist_vpc_management_yaml` - > Property 'PeerVpcId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L593 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L598 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L600 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L605 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L607 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L612 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L614 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L619 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L622 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L628 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L630 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L638 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L640 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L648 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L650 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L658 in `quickstart_nist_vpc_management_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L660 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L670 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L678 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L683 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L698 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L703 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L712 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L727 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L732 in `quickstart_nist_vpc_management_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `quickstart_nist_vpc_management_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L752 in `quickstart_nist_vpc_management_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L756 in `quickstart_nist_vpc_management_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L764 in `quickstart_nist_vpc_management_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L766 in `quickstart_nist_vpc_management_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L180 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L182 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L190 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L195 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L197 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L202 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L204 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L209 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L211 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L219 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L224 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L226 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L234 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L239 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L241 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L249 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L254 in `quickstart_nist_vpc_production_yaml` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L256 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L261 in `quickstart_nist_vpc_production_yaml` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L263 in `quickstart_nist_vpc_production_yaml` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L274 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L276 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L284 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L289 in `quickstart_nist_vpc_production_yaml` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L291 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L299 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentProdIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L312 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L326 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L328 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L333 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L335 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L340 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L342 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L347 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L349 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L354 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L356 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L361 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L363 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L368 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L373 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L379 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L380 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L387 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L392 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L393 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L400 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L405 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L412 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L418 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L425 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L430 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L431 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L438 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L443 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L450 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L455 in `quickstart_nist_vpc_production_yaml` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L456 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L463 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L468 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L475 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L481 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L488 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L494 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L501 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L506 in `quickstart_nist_vpc_production_yaml` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L513 in `quickstart_nist_vpc_production_yaml` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L519 in `quickstart_nist_vpc_production_yaml` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L523 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L557 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L559 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L564 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L566 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L571 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L573 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L578 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L580 in `quickstart_nist_vpc_production_yaml` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L586 in `quickstart_nist_vpc_production_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L589 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L595 in `quickstart_nist_vpc_production_yaml` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.RouteTableId` L598 in `quickstart_nist_vpc_production_yaml` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMain` (AWS::EC2::RouteTable) → `Properties.VpcId` L606 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableProdPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L614 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L619 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L632 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L637 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L650 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L655 in `quickstart_nist_vpc_production_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L673 in `quickstart_nist_vpc_production_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.CidrBlock` L678 in `quickstart_nist_vpc_production_yaml` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L682 in `quickstart_nist_vpc_production_yaml` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L355 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.InstanceType` L360 in `quickstart_openshift_yaml` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.KeyName` L362 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L364 in `quickstart_openshift_yaml` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.UserData` L375 in `quickstart_openshift_yaml` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L751 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L768 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L824 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L846 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L855 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L902 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L906 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L908 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L914 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L916 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L918 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L920 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1056 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1060 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1068 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1079 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1127 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1131 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1133 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1139 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1141 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1143 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1145 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1286 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1311 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1321 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1340 in `quickstart_openshift_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1343 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1353 in `quickstart_openshift_yaml` - > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1364 in `quickstart_openshift_yaml` - > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1371 in `quickstart_openshift_yaml` - > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1386 in `quickstart_openshift_yaml` - > Property 'Scheme' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1389 in `quickstart_openshift_yaml` - > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement -- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1396 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1411 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1456 in `quickstart_openshift_yaml` - > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1465 in `quickstart_openshift_yaml` - > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1467 in `quickstart_openshift_yaml` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` - > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1473 in `quickstart_openshift_yaml` - > Property 'InstanceType' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1475 in `quickstart_openshift_yaml` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1477 in `quickstart_openshift_yaml` - > Property 'SecurityGroups' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1479 in `quickstart_openshift_yaml` - > Property 'UserData' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1638 in `quickstart_openshift_yaml` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1653 in `quickstart_openshift_yaml` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `SetupRole` (AWS::IAM::Role) → `Properties.Path` L1666 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `SetupRoleProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L1689 in `quickstart_openshift_yaml` - > Property 'Path' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `quickstart_test_yaml` - > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `quickstart_test_yaml` - > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `quickstart_test_yaml` - > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `quickstart_test_yaml` - > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `quickstart_test_yaml` - > Property 'Engine' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `quickstart_test_yaml` - > Property 'MasterUsername' is create-only; updating it will cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L141 in `quickstart_test_yaml` - > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L144 in `quickstart_test_yaml` - > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `quickstart_test_yaml` - > Property 'Description' is create-only; updating it will cause resource replacement -- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `quickstart_test_yaml` - > Property 'Family' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L731 in `quickstart_vpc-management_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L737 in `quickstart_vpc-management_json` - > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L834 in `quickstart_vpc-management_json` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L831 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L541 in `quickstart_vpc-management_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L546 in `quickstart_vpc-management_json` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L788 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L369 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L471 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L468 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L474 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L489 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L486 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L492 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L507 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L504 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L510 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L525 in `quickstart_vpc-management_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L522 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L528 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L649 in `quickstart_vpc-management_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L639 in `quickstart_vpc-management_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L642 in `quickstart_vpc-management_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L652 in `quickstart_vpc-management_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L658 in `quickstart_vpc-management_json` - > Property 'UserData' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L776 in `quickstart_vpc-management_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L779 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L843 in `quickstart_vpc-management_json` - > Property 'PeerVpcId' is create-only; updating it will cause resource replacement -- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L846 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L594 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L597 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L616 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L619 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L627 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L630 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L588 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L582 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L910 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L904 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L865 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L859 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L880 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L874 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L895 in `quickstart_vpc-management_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L889 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L570 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L558 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L804 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L805 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L421 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L422 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L745 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L746 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L440 in `quickstart_vpc-management_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L441 in `quickstart_vpc-management_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L342 in `quickstart_vpc-management_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L345 in `quickstart_vpc-management_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L605 in `quickstart_vpc-management_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L608 in `quickstart_vpc-management_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L484 in `quickstart_vpc_json` - > Property 'DomainName' is create-only; updating it will cause resource replacement -- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L501 in `quickstart_vpc_json` - > Property 'DomainNameServers' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1826 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1832 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1842 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1848 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1858 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1864 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1874 in `quickstart_vpc_json` - > Property 'AllocationId' is create-only; updating it will cause resource replacement -- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1880 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L1890 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.InstanceType` L1899 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.KeyName` L1923 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1908 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L1942 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.InstanceType` L1951 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.KeyName` L1975 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1960 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L1994 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.InstanceType` L2003 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.KeyName` L2027 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2012 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L2046 in `quickstart_vpc_json` - > Property 'ImageId' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L2055 in `quickstart_vpc_json` - > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.KeyName` L2079 in `quickstart_vpc_json` - > Property 'KeyName' is create-only; updating it will cause resource replacement -- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2064 in `quickstart_vpc_json` - > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement -- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L2097 in `quickstart_vpc_json` - > Property 'GroupDescription' is create-only; updating it will cause resource replacement -- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L2098 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L576 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L573 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.VpcId` L570 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L954 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L951 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L932 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L986 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L983 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L606 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L603 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.VpcId` L600 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1247 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1297 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1294 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1267 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1268 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1273 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1281 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1282 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1287 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1206 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1203 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1184 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1238 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1235 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L636 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L633 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.VpcId` L630 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1017 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1014 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L995 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1049 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1046 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L666 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L663 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.VpcId` L660 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1369 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1419 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1416 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1389 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1390 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1395 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1403 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1404 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1409 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1328 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1325 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1306 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1360 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1357 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L696 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L693 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.VpcId` L690 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1080 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1077 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1058 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1112 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1109 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L726 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L723 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.VpcId` L720 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1491 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1541 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1538 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1511 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1512 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1517 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1525 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1526 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1531 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1450 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1447 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1428 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1482 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1479 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L756 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L753 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.VpcId` L750 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1143 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1140 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1121 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1175 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1172 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L786 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L783 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.VpcId` L780 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1613 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1663 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1660 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1633 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1634 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1639 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1647 in `quickstart_vpc_json` - > Property 'Egress' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1648 in `quickstart_vpc_json` - > Property 'NetworkAclId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1653 in `quickstart_vpc_json` - > Property 'RuleNumber' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1572 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1569 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1550 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1604 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1601 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L815 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L812 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L809 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1705 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1702 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L845 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L842 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L839 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1716 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1713 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L876 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L873 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L870 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1728 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1725 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L907 in `quickstart_vpc_json` - > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L904 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L901 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1740 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1737 in `quickstart_vpc_json` - > Property 'SubnetId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1693 in `quickstart_vpc_json` - > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1690 in `quickstart_vpc_json` - > Property 'RouteTableId' is create-only; updating it will cause resource replacement -- **I9001** `PublicSubnetRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1671 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L2202 in `quickstart_vpc_json` - > Property 'ServiceName' is create-only; updating it will cause resource replacement -- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L2214 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L509 in `quickstart_vpc_json` - > Property 'CidrBlock' is create-only; updating it will cause resource replacement -- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L512 in `quickstart_vpc_json` - > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement -- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L533 in `quickstart_vpc_json` - > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement -- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L530 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement -- **I9001** `VPCGatewayAttachment` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L558 in `quickstart_vpc_json` - > Property 'VpcId' is create-only; updating it will cause resource replacement - -### I9040 - 2297 findings - -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_E1150_network_interfaces_groupset_multi_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `A` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_E3019_four_way_group_yaml` - > Resource 'A' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `B` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_E3019_four_way_group_yaml` - > Resource 'B' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `C` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E3019_four_way_group_yaml` - > Resource 'C' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `D` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_E3019_four_way_group_yaml` - > Resource 'D' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'ExplicitSubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `JoinBucket` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'JoinBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LiteralA` (AWS::S3::Bucket) → `Properties.Tags` L25 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'LiteralA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LiteralB` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'LiteralB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RefBucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'RefBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubBucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_E3019_identity_reference_forms_yaml` - > Resource 'SubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` - > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApiA` (AWS::ApiGateway::RestApi) → `Properties.Tags` L10 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Resource 'RestApiA' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApiB` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` - > Resource 'RestApiB' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E8007_condition_undefined_in_expr_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `bad_E9106_condition_cycle_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_F2002_ssm_parameter_type_invalid_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `GoodFunction` (AWS::Serverless::Function) → `Properties.Tags` L27 in `bad_F3006_invalid_aws_namespaces_yaml` - > Resource 'GoodFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.Tags` L7 in `bad_F3018_conditional_required_novalue_yaml` - > Resource 'MissingTemplateSourceInOneWorld' of type 'AWS::CloudFormation::StackSet' supports Tags but none are configured -- **I9040** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.Tags` L7 in `bad_F3031_log_group_name_dollar_brace_yaml` - > Resource 'InvalidLiteralName' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1019_sub_unused_key_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_W1028_allowedvalues_excludes_literal_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyConnection` (AWS::DMS::Endpoint) → `Properties.Tags` L5 in `bad_W1051_secretsmanager_at_arn_yaml` - > Resource 'MyConnection' of type 'AWS::DMS::Endpoint' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1053_dynref_spaces_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_W1054_raw_pseudo_param_yaml` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_W3010_full_coverage_yaml` - > Resource 'Asg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L44 in `bad_W3010_full_coverage_yaml` - > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L16 in `bad_W3010_full_coverage_yaml` - > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L21 in `bad_W3010_full_coverage_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Rds` (AWS::RDS::DBInstance) → `Properties.Tags` L62 in `bad_W3010_full_coverage_yaml` - > Resource 'Rds' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L33 in `bad_W3010_full_coverage_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L53 in `bad_W3010_full_coverage_yaml` - > Resource 'Tg' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `Volume` (AWS::EC2::Volume) → `Properties.Tags` L39 in `bad_W3010_full_coverage_yaml` - > Resource 'Volume' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_W9006_every_allowed_value_too_long_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_W9007_duplicate_objects_different_key_order_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_W9053_equivalent_conditions_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_aurora_with_allocated_storage_yaml` - > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Dist` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_alias_yaml` - > Resource 'Dist' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_origin_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifact_counts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifacts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `DummyBucket` (AWS::S3::Bucket) → `Properties.Tags` L35 in `bad_conditions_condition_functions_json` - > Resource 'DummyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `bad_conditions_properties_fn_if_json` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L85 in `bad_conditions_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `NewVolume` (AWS::EC2::Volume) → `Properties.Tags` L79 in `bad_conditions_yaml` - > Resource 'NewVolume' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `BadConditionType` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_core_E3001_resource_shape_yaml` - > Resource 'BadConditionType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_core_E3001_resource_shape_yaml` - > Resource 'BadDependsOnType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_E3001_resource_shape_yaml` - > Resource 'UnknownAttribute' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ValidResource` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_core_E3001_resource_shape_yaml` - > Resource 'ValidResource' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L97 in `bad_core_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_core_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `bad_core_conditions_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `bad_core_conditions_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L51 in `bad_core_conditions_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L64 in `bad_core_conditions_yaml` - > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `bad_core_conditions_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `bad_core_config_configure_e3012_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_directives_yaml` - > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L34 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_core_directives_yaml` - > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_directives_yaml` - > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L29 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L22 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_mandatory_checks_yaml` - > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ScalarCreationPolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L6 in `bad_core_resource_attributes_yaml` - > Resource 'ScalarCreationPolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `ScalarUpdatePolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L9 in `bad_core_resource_attributes_yaml` - > Resource 'ScalarUpdatePolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `StandardVersion` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_core_resource_attributes_yaml` - > Resource 'StandardVersion' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `UnsupportedAttributes` (AWS::S3::Bucket) → `Properties.Tags` L18 in `bad_core_resource_attributes_yaml` - > Resource 'UnsupportedAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L28 in `bad_cross_resource_task10_yaml` - > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_cross_resource_task10_yaml` - > Resource 'BadASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.Tags` L41 in `bad_cross_resource_task10_yaml` - > Resource 'BadEnvLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BadFargateService` (AWS::ECS::Service) → `Properties.Tags` L75 in `bad_cross_resource_task10_yaml` - > Resource 'BadFargateService' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BadImageLambda` (AWS::Lambda::Function) → `Properties.Tags` L54 in `bad_cross_resource_task10_yaml` - > Resource 'BadImageLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L19 in `bad_cross_resource_task10_yaml` - > Resource 'BadListener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `BadRestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L64 in `bad_cross_resource_task10_yaml` - > Resource 'BadRestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `bad_cross_resource_task10_yaml` - > Resource 'BadValkey' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L34 in `bad_cross_resource_task10_yaml` - > Resource 'TG' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_cross_resource_task10_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyEipNat` (AWS::EC2::EIP) → `Properties.Tags` L13 in `bad_duplicate_json` - > Resource 'MyEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `MySNSTopic` (AWS::SNS::Topic) → `Properties.Tags` L25 in `bad_duplicate_json` - > Resource 'MySNSTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_duplicate_primary_id_multi_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_duplicate_primary_id_multi_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_duplicate_primary_id_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_duplicate_primary_id_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_duplicate_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_duplicate_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BadTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_attribute_mismatch_yaml` - > Resource 'BadTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` - > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Repo` (AWS::ECR::Repository) → `Properties.Tags` L5 in `bad_ecr_policy_no_statement_yaml` - > Resource 'Repo' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_awsvpc_port_mismatch_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L21 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L14 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_dynamic_port_no_traffic_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L16 in `bad_ecs_fargate_mismatch_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_fargate_mismatch_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ExecRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `bad_ecs_role_no_boundary_yaml` - > Resource 'ExecRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `bad_ecs_role_no_boundary_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_ecs_role_no_boundary_yaml` - > Resource 'TaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L5 in `bad_elb_http_443_yaml` - > Resource 'Listener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_equals_wrong_arity_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_fargate_bad_cpu_memory_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L23 in `bad_fargate_daemon_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateDaemon` (AWS::ECS::Service) → `Properties.Tags` L5 in `bad_fargate_daemon_yaml` - > Resource 'FargateDaemon' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `bad_fargate_daemon_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `bad_formatters_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_base64_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_findinmap_default_value_no_transform_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L10 in `bad_functions_findinmap_enhanced_invalid_key_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_json` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_functions_get_stack_output_json` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_json` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_functions_get_stack_output_json` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L20 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic5` (AWS::SQS::Queue) → `Properties.Tags` L35 in `bad_functions_get_stack_output_yaml` - > Resource 'Topic5' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `mySubnet1` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `bad_functions_getaz_yaml` - > Resource 'mySubnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet2` (AWS::EC2::Subnet) → `Properties.Tags` L21 in `bad_functions_getaz_yaml` - > Resource 'mySubnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet3` (AWS::EC2::Subnet) → `Properties.Tags` L30 in `bad_functions_getaz_yaml` - > Resource 'mySubnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `subnet` (AWS::EC2::Subnet) → `Properties.Tags` L8 in `bad_functions_import_value_yaml` - > Resource 'subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_join_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L18 in `bad_functions_join_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L12 in `bad_functions_length_no_transform_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L50 in `bad_functions_ref_yaml` - > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_functions_ref_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `bad_functions_ref_yaml` - > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_functions_ref_yaml` - > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L35 in `bad_functions_relationship_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `bad_functions_relationship_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SubCondGetAttParam` (AWS::SSM::Parameter) → `Properties.Tags` L57 in `bad_functions_relationship_conditions_yaml` - > Resource 'SubCondGetAttParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `SubCondRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L51 in `bad_functions_relationship_conditions_yaml` - > Resource 'SubCondRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_select_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L16 in `bad_functions_select_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_functions_select_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L33 in `bad_functions_select_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `TestBadStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L37 in `bad_functions_sub_needed_yaml` - > Resource 'TestBadStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `TestBadStateMachine2` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L58 in `bad_functions_sub_needed_yaml` - > Resource 'TestBadStateMachine2' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L10 in `bad_functions_sub_needed_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L32 in `bad_functions_sub_needed_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_functions_tojsonstring_no_transform_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L112 in `bad_generic_yaml` - > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L42 in `bad_generic_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L62 in `bad_generic_yaml` - > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.Tags` L218 in `bad_generic_yaml` - > Resource 'MyEc2BlockDevice' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L71 in `bad_generic_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L195 in `bad_generic_yaml` - > Resource 'lambdaMap1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L203 in `bad_generic_yaml` - > Resource 'lambdaMap2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `myEc2Instance4` (AWS::EC2::Instance) → `Properties.Tags` L67 in `bad_generic_yaml` - > Resource 'myEc2Instance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myIamProfile` (AWS::IAM::Role) → `Properties.Tags` L25 in `bad_generic_yaml` - > Resource 'myIamProfile' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myIamProfile2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_generic_yaml` - > Resource 'myIamProfile2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myIamProfile3` (AWS::IAM::Role) → `Properties.Tags` L32 in `bad_generic_yaml` - > Resource 'myIamProfile3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myLambdaTwo` (AWS::Lambda::Function) → `Properties.Tags` L146 in `bad_generic_yaml` - > Resource 'myLambdaTwo' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_getatt_object_attribute_member_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Param` (AWS::SSM::Parameter) → `Properties.Tags` L13 in `bad_getatt_object_attribute_member_yaml` - > Resource 'Param' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hard_coded_arn_properties_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L26 in `bad_hard_coded_arn_properties_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hardcoded_partition_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_hardcoded_partition_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Project` (AWS::CodeBuild::Project) → `Properties.Tags` L16 in `bad_iam_ref_with_path_yaml` - > Resource 'Project' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_iam_ref_with_path_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `NotActionUser` (AWS::IAM::User) → `Properties.Tags` L36 in `bad_iam_wildcard_all_types_yaml` - > Resource 'NotActionUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `WildcardUser` (AWS::IAM::User) → `Properties.Tags` L5 in `bad_iam_wildcard_all_types_yaml` - > Resource 'WildcardUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_if_wrong_arity_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_deletion_policy_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L6 in `bad_invalid_mapping_structure_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_update_replace_policy_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.Tags` L5 in `bad_issues_yaml` - > Resource 'RDSOptionGroup' of type 'AWS::RDS::OptionGroup' supports Tags but none are configured -- **I9040** `Fn` (AWS::Lambda::Function) → `Properties.Tags` L10 in `bad_lambda_image_handler_intrinsic_yaml` - > Resource 'Fn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_no_snapstart_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_bad_runtime_yaml` - > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_no_version_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L19 in `bad_lambda_sqs_timeout_yaml` - > Resource 'ESM' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L9 in `bad_lambda_sqs_timeout_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_lambda_sqs_timeout_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zip_no_handler_yaml` - > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zipfile_java_yaml` - > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BothBranchesInvalid` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'BothBranchesInvalid' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalInvalidDeletion` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalInvalidDeletion' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalInvalidUpdate` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalInvalidUpdate' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'ConditionalNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DirectNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'DirectNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DynamicObjectPolicy` (AWS::S3::Bucket) → `Properties.Tags` L38 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Resource 'DynamicObjectPolicy' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'CreationNoValueOnUnsupportedType' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ListPolicies` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'ListPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `Properties.Tags` L36 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'NoValuePoliciesWithoutTransform' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `ObjectPolicies` (AWS::S3::Bucket) → `Properties.Tags` L13 in `bad_lifecycle_policy_shapes_yaml` - > Resource 'ObjectPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Resource1` (AWS::SNS::Topic) → `Properties.Tags` L405 in `bad_limit_numbers_yaml` - > Resource 'Resource1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource10` (AWS::SNS::Topic) → `Properties.Tags` L423 in `bad_limit_numbers_yaml` - > Resource 'Resource10' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource100` (AWS::SNS::Topic) → `Properties.Tags` L603 in `bad_limit_numbers_yaml` - > Resource 'Resource100' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource101` (AWS::SNS::Topic) → `Properties.Tags` L605 in `bad_limit_numbers_yaml` - > Resource 'Resource101' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource102` (AWS::SNS::Topic) → `Properties.Tags` L607 in `bad_limit_numbers_yaml` - > Resource 'Resource102' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource103` (AWS::SNS::Topic) → `Properties.Tags` L609 in `bad_limit_numbers_yaml` - > Resource 'Resource103' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource104` (AWS::SNS::Topic) → `Properties.Tags` L611 in `bad_limit_numbers_yaml` - > Resource 'Resource104' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource105` (AWS::SNS::Topic) → `Properties.Tags` L613 in `bad_limit_numbers_yaml` - > Resource 'Resource105' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource106` (AWS::SNS::Topic) → `Properties.Tags` L615 in `bad_limit_numbers_yaml` - > Resource 'Resource106' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource107` (AWS::SNS::Topic) → `Properties.Tags` L617 in `bad_limit_numbers_yaml` - > Resource 'Resource107' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource108` (AWS::SNS::Topic) → `Properties.Tags` L619 in `bad_limit_numbers_yaml` - > Resource 'Resource108' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource109` (AWS::SNS::Topic) → `Properties.Tags` L621 in `bad_limit_numbers_yaml` - > Resource 'Resource109' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource11` (AWS::SNS::Topic) → `Properties.Tags` L425 in `bad_limit_numbers_yaml` - > Resource 'Resource11' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource110` (AWS::SNS::Topic) → `Properties.Tags` L623 in `bad_limit_numbers_yaml` - > Resource 'Resource110' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource111` (AWS::SNS::Topic) → `Properties.Tags` L625 in `bad_limit_numbers_yaml` - > Resource 'Resource111' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource112` (AWS::SNS::Topic) → `Properties.Tags` L627 in `bad_limit_numbers_yaml` - > Resource 'Resource112' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource113` (AWS::SNS::Topic) → `Properties.Tags` L629 in `bad_limit_numbers_yaml` - > Resource 'Resource113' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource114` (AWS::SNS::Topic) → `Properties.Tags` L631 in `bad_limit_numbers_yaml` - > Resource 'Resource114' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource115` (AWS::SNS::Topic) → `Properties.Tags` L633 in `bad_limit_numbers_yaml` - > Resource 'Resource115' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource116` (AWS::SNS::Topic) → `Properties.Tags` L635 in `bad_limit_numbers_yaml` - > Resource 'Resource116' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource117` (AWS::SNS::Topic) → `Properties.Tags` L637 in `bad_limit_numbers_yaml` - > Resource 'Resource117' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource118` (AWS::SNS::Topic) → `Properties.Tags` L639 in `bad_limit_numbers_yaml` - > Resource 'Resource118' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource119` (AWS::SNS::Topic) → `Properties.Tags` L641 in `bad_limit_numbers_yaml` - > Resource 'Resource119' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource12` (AWS::SNS::Topic) → `Properties.Tags` L427 in `bad_limit_numbers_yaml` - > Resource 'Resource12' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource120` (AWS::SNS::Topic) → `Properties.Tags` L643 in `bad_limit_numbers_yaml` - > Resource 'Resource120' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource121` (AWS::SNS::Topic) → `Properties.Tags` L645 in `bad_limit_numbers_yaml` - > Resource 'Resource121' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource122` (AWS::SNS::Topic) → `Properties.Tags` L647 in `bad_limit_numbers_yaml` - > Resource 'Resource122' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource123` (AWS::SNS::Topic) → `Properties.Tags` L649 in `bad_limit_numbers_yaml` - > Resource 'Resource123' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource124` (AWS::SNS::Topic) → `Properties.Tags` L651 in `bad_limit_numbers_yaml` - > Resource 'Resource124' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource125` (AWS::SNS::Topic) → `Properties.Tags` L653 in `bad_limit_numbers_yaml` - > Resource 'Resource125' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource126` (AWS::SNS::Topic) → `Properties.Tags` L655 in `bad_limit_numbers_yaml` - > Resource 'Resource126' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource127` (AWS::SNS::Topic) → `Properties.Tags` L657 in `bad_limit_numbers_yaml` - > Resource 'Resource127' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource128` (AWS::SNS::Topic) → `Properties.Tags` L659 in `bad_limit_numbers_yaml` - > Resource 'Resource128' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource129` (AWS::SNS::Topic) → `Properties.Tags` L661 in `bad_limit_numbers_yaml` - > Resource 'Resource129' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource13` (AWS::SNS::Topic) → `Properties.Tags` L429 in `bad_limit_numbers_yaml` - > Resource 'Resource13' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource130` (AWS::SNS::Topic) → `Properties.Tags` L663 in `bad_limit_numbers_yaml` - > Resource 'Resource130' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource131` (AWS::SNS::Topic) → `Properties.Tags` L665 in `bad_limit_numbers_yaml` - > Resource 'Resource131' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource132` (AWS::SNS::Topic) → `Properties.Tags` L667 in `bad_limit_numbers_yaml` - > Resource 'Resource132' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource133` (AWS::SNS::Topic) → `Properties.Tags` L669 in `bad_limit_numbers_yaml` - > Resource 'Resource133' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource134` (AWS::SNS::Topic) → `Properties.Tags` L671 in `bad_limit_numbers_yaml` - > Resource 'Resource134' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource135` (AWS::SNS::Topic) → `Properties.Tags` L673 in `bad_limit_numbers_yaml` - > Resource 'Resource135' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource136` (AWS::SNS::Topic) → `Properties.Tags` L675 in `bad_limit_numbers_yaml` - > Resource 'Resource136' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource137` (AWS::SNS::Topic) → `Properties.Tags` L677 in `bad_limit_numbers_yaml` - > Resource 'Resource137' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource138` (AWS::SNS::Topic) → `Properties.Tags` L679 in `bad_limit_numbers_yaml` - > Resource 'Resource138' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource139` (AWS::SNS::Topic) → `Properties.Tags` L681 in `bad_limit_numbers_yaml` - > Resource 'Resource139' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource14` (AWS::SNS::Topic) → `Properties.Tags` L431 in `bad_limit_numbers_yaml` - > Resource 'Resource14' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource140` (AWS::SNS::Topic) → `Properties.Tags` L683 in `bad_limit_numbers_yaml` - > Resource 'Resource140' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource141` (AWS::SNS::Topic) → `Properties.Tags` L685 in `bad_limit_numbers_yaml` - > Resource 'Resource141' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource142` (AWS::SNS::Topic) → `Properties.Tags` L687 in `bad_limit_numbers_yaml` - > Resource 'Resource142' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource143` (AWS::SNS::Topic) → `Properties.Tags` L689 in `bad_limit_numbers_yaml` - > Resource 'Resource143' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource144` (AWS::SNS::Topic) → `Properties.Tags` L691 in `bad_limit_numbers_yaml` - > Resource 'Resource144' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource145` (AWS::SNS::Topic) → `Properties.Tags` L693 in `bad_limit_numbers_yaml` - > Resource 'Resource145' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource146` (AWS::SNS::Topic) → `Properties.Tags` L695 in `bad_limit_numbers_yaml` - > Resource 'Resource146' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource147` (AWS::SNS::Topic) → `Properties.Tags` L697 in `bad_limit_numbers_yaml` - > Resource 'Resource147' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource148` (AWS::SNS::Topic) → `Properties.Tags` L699 in `bad_limit_numbers_yaml` - > Resource 'Resource148' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource149` (AWS::SNS::Topic) → `Properties.Tags` L701 in `bad_limit_numbers_yaml` - > Resource 'Resource149' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource15` (AWS::SNS::Topic) → `Properties.Tags` L433 in `bad_limit_numbers_yaml` - > Resource 'Resource15' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource150` (AWS::SNS::Topic) → `Properties.Tags` L703 in `bad_limit_numbers_yaml` - > Resource 'Resource150' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource151` (AWS::SNS::Topic) → `Properties.Tags` L705 in `bad_limit_numbers_yaml` - > Resource 'Resource151' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource152` (AWS::SNS::Topic) → `Properties.Tags` L707 in `bad_limit_numbers_yaml` - > Resource 'Resource152' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource153` (AWS::SNS::Topic) → `Properties.Tags` L709 in `bad_limit_numbers_yaml` - > Resource 'Resource153' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource154` (AWS::SNS::Topic) → `Properties.Tags` L711 in `bad_limit_numbers_yaml` - > Resource 'Resource154' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource155` (AWS::SNS::Topic) → `Properties.Tags` L713 in `bad_limit_numbers_yaml` - > Resource 'Resource155' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource156` (AWS::SNS::Topic) → `Properties.Tags` L715 in `bad_limit_numbers_yaml` - > Resource 'Resource156' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource157` (AWS::SNS::Topic) → `Properties.Tags` L717 in `bad_limit_numbers_yaml` - > Resource 'Resource157' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource158` (AWS::SNS::Topic) → `Properties.Tags` L719 in `bad_limit_numbers_yaml` - > Resource 'Resource158' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource159` (AWS::SNS::Topic) → `Properties.Tags` L721 in `bad_limit_numbers_yaml` - > Resource 'Resource159' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource16` (AWS::SNS::Topic) → `Properties.Tags` L435 in `bad_limit_numbers_yaml` - > Resource 'Resource16' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource160` (AWS::SNS::Topic) → `Properties.Tags` L723 in `bad_limit_numbers_yaml` - > Resource 'Resource160' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource161` (AWS::SNS::Topic) → `Properties.Tags` L725 in `bad_limit_numbers_yaml` - > Resource 'Resource161' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource162` (AWS::SNS::Topic) → `Properties.Tags` L727 in `bad_limit_numbers_yaml` - > Resource 'Resource162' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource163` (AWS::SNS::Topic) → `Properties.Tags` L729 in `bad_limit_numbers_yaml` - > Resource 'Resource163' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource164` (AWS::SNS::Topic) → `Properties.Tags` L731 in `bad_limit_numbers_yaml` - > Resource 'Resource164' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource165` (AWS::SNS::Topic) → `Properties.Tags` L733 in `bad_limit_numbers_yaml` - > Resource 'Resource165' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource166` (AWS::SNS::Topic) → `Properties.Tags` L735 in `bad_limit_numbers_yaml` - > Resource 'Resource166' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource167` (AWS::SNS::Topic) → `Properties.Tags` L737 in `bad_limit_numbers_yaml` - > Resource 'Resource167' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource168` (AWS::SNS::Topic) → `Properties.Tags` L739 in `bad_limit_numbers_yaml` - > Resource 'Resource168' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource169` (AWS::SNS::Topic) → `Properties.Tags` L741 in `bad_limit_numbers_yaml` - > Resource 'Resource169' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource17` (AWS::SNS::Topic) → `Properties.Tags` L437 in `bad_limit_numbers_yaml` - > Resource 'Resource17' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource170` (AWS::SNS::Topic) → `Properties.Tags` L743 in `bad_limit_numbers_yaml` - > Resource 'Resource170' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource171` (AWS::SNS::Topic) → `Properties.Tags` L745 in `bad_limit_numbers_yaml` - > Resource 'Resource171' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource172` (AWS::SNS::Topic) → `Properties.Tags` L747 in `bad_limit_numbers_yaml` - > Resource 'Resource172' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource173` (AWS::SNS::Topic) → `Properties.Tags` L749 in `bad_limit_numbers_yaml` - > Resource 'Resource173' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource174` (AWS::SNS::Topic) → `Properties.Tags` L751 in `bad_limit_numbers_yaml` - > Resource 'Resource174' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource175` (AWS::SNS::Topic) → `Properties.Tags` L753 in `bad_limit_numbers_yaml` - > Resource 'Resource175' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource176` (AWS::SNS::Topic) → `Properties.Tags` L755 in `bad_limit_numbers_yaml` - > Resource 'Resource176' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource177` (AWS::SNS::Topic) → `Properties.Tags` L757 in `bad_limit_numbers_yaml` - > Resource 'Resource177' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource178` (AWS::SNS::Topic) → `Properties.Tags` L759 in `bad_limit_numbers_yaml` - > Resource 'Resource178' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource179` (AWS::SNS::Topic) → `Properties.Tags` L761 in `bad_limit_numbers_yaml` - > Resource 'Resource179' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource18` (AWS::SNS::Topic) → `Properties.Tags` L439 in `bad_limit_numbers_yaml` - > Resource 'Resource18' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource180` (AWS::SNS::Topic) → `Properties.Tags` L763 in `bad_limit_numbers_yaml` - > Resource 'Resource180' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource181` (AWS::SNS::Topic) → `Properties.Tags` L765 in `bad_limit_numbers_yaml` - > Resource 'Resource181' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource182` (AWS::SNS::Topic) → `Properties.Tags` L767 in `bad_limit_numbers_yaml` - > Resource 'Resource182' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource183` (AWS::SNS::Topic) → `Properties.Tags` L769 in `bad_limit_numbers_yaml` - > Resource 'Resource183' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource184` (AWS::SNS::Topic) → `Properties.Tags` L771 in `bad_limit_numbers_yaml` - > Resource 'Resource184' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource185` (AWS::SNS::Topic) → `Properties.Tags` L773 in `bad_limit_numbers_yaml` - > Resource 'Resource185' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource186` (AWS::SNS::Topic) → `Properties.Tags` L775 in `bad_limit_numbers_yaml` - > Resource 'Resource186' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource187` (AWS::SNS::Topic) → `Properties.Tags` L777 in `bad_limit_numbers_yaml` - > Resource 'Resource187' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource188` (AWS::SNS::Topic) → `Properties.Tags` L779 in `bad_limit_numbers_yaml` - > Resource 'Resource188' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource189` (AWS::SNS::Topic) → `Properties.Tags` L781 in `bad_limit_numbers_yaml` - > Resource 'Resource189' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource19` (AWS::SNS::Topic) → `Properties.Tags` L441 in `bad_limit_numbers_yaml` - > Resource 'Resource19' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource190` (AWS::SNS::Topic) → `Properties.Tags` L783 in `bad_limit_numbers_yaml` - > Resource 'Resource190' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource191` (AWS::SNS::Topic) → `Properties.Tags` L785 in `bad_limit_numbers_yaml` - > Resource 'Resource191' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource192` (AWS::SNS::Topic) → `Properties.Tags` L787 in `bad_limit_numbers_yaml` - > Resource 'Resource192' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource193` (AWS::SNS::Topic) → `Properties.Tags` L789 in `bad_limit_numbers_yaml` - > Resource 'Resource193' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource194` (AWS::SNS::Topic) → `Properties.Tags` L791 in `bad_limit_numbers_yaml` - > Resource 'Resource194' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource195` (AWS::SNS::Topic) → `Properties.Tags` L793 in `bad_limit_numbers_yaml` - > Resource 'Resource195' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource196` (AWS::SNS::Topic) → `Properties.Tags` L795 in `bad_limit_numbers_yaml` - > Resource 'Resource196' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource197` (AWS::SNS::Topic) → `Properties.Tags` L797 in `bad_limit_numbers_yaml` - > Resource 'Resource197' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource198` (AWS::SNS::Topic) → `Properties.Tags` L799 in `bad_limit_numbers_yaml` - > Resource 'Resource198' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource199` (AWS::SNS::Topic) → `Properties.Tags` L801 in `bad_limit_numbers_yaml` - > Resource 'Resource199' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L407 in `bad_limit_numbers_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource20` (AWS::SNS::Topic) → `Properties.Tags` L443 in `bad_limit_numbers_yaml` - > Resource 'Resource20' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource200` (AWS::SNS::Topic) → `Properties.Tags` L803 in `bad_limit_numbers_yaml` - > Resource 'Resource200' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource201` (AWS::SNS::Topic) → `Properties.Tags` L805 in `bad_limit_numbers_yaml` - > Resource 'Resource201' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource202` (AWS::SNS::Topic) → `Properties.Tags` L807 in `bad_limit_numbers_yaml` - > Resource 'Resource202' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource203` (AWS::SNS::Topic) → `Properties.Tags` L809 in `bad_limit_numbers_yaml` - > Resource 'Resource203' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource204` (AWS::SNS::Topic) → `Properties.Tags` L811 in `bad_limit_numbers_yaml` - > Resource 'Resource204' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource205` (AWS::SNS::Topic) → `Properties.Tags` L813 in `bad_limit_numbers_yaml` - > Resource 'Resource205' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource206` (AWS::SNS::Topic) → `Properties.Tags` L815 in `bad_limit_numbers_yaml` - > Resource 'Resource206' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource207` (AWS::SNS::Topic) → `Properties.Tags` L817 in `bad_limit_numbers_yaml` - > Resource 'Resource207' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource208` (AWS::SNS::Topic) → `Properties.Tags` L819 in `bad_limit_numbers_yaml` - > Resource 'Resource208' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource209` (AWS::SNS::Topic) → `Properties.Tags` L821 in `bad_limit_numbers_yaml` - > Resource 'Resource209' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource21` (AWS::SNS::Topic) → `Properties.Tags` L445 in `bad_limit_numbers_yaml` - > Resource 'Resource21' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource210` (AWS::SNS::Topic) → `Properties.Tags` L823 in `bad_limit_numbers_yaml` - > Resource 'Resource210' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource211` (AWS::SNS::Topic) → `Properties.Tags` L825 in `bad_limit_numbers_yaml` - > Resource 'Resource211' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource212` (AWS::SNS::Topic) → `Properties.Tags` L827 in `bad_limit_numbers_yaml` - > Resource 'Resource212' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource213` (AWS::SNS::Topic) → `Properties.Tags` L829 in `bad_limit_numbers_yaml` - > Resource 'Resource213' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource214` (AWS::SNS::Topic) → `Properties.Tags` L831 in `bad_limit_numbers_yaml` - > Resource 'Resource214' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource215` (AWS::SNS::Topic) → `Properties.Tags` L833 in `bad_limit_numbers_yaml` - > Resource 'Resource215' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource216` (AWS::SNS::Topic) → `Properties.Tags` L835 in `bad_limit_numbers_yaml` - > Resource 'Resource216' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource217` (AWS::SNS::Topic) → `Properties.Tags` L837 in `bad_limit_numbers_yaml` - > Resource 'Resource217' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource218` (AWS::SNS::Topic) → `Properties.Tags` L839 in `bad_limit_numbers_yaml` - > Resource 'Resource218' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource219` (AWS::SNS::Topic) → `Properties.Tags` L841 in `bad_limit_numbers_yaml` - > Resource 'Resource219' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource22` (AWS::SNS::Topic) → `Properties.Tags` L447 in `bad_limit_numbers_yaml` - > Resource 'Resource22' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource220` (AWS::SNS::Topic) → `Properties.Tags` L843 in `bad_limit_numbers_yaml` - > Resource 'Resource220' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource221` (AWS::SNS::Topic) → `Properties.Tags` L845 in `bad_limit_numbers_yaml` - > Resource 'Resource221' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource222` (AWS::SNS::Topic) → `Properties.Tags` L847 in `bad_limit_numbers_yaml` - > Resource 'Resource222' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource223` (AWS::SNS::Topic) → `Properties.Tags` L849 in `bad_limit_numbers_yaml` - > Resource 'Resource223' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource224` (AWS::SNS::Topic) → `Properties.Tags` L851 in `bad_limit_numbers_yaml` - > Resource 'Resource224' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource225` (AWS::SNS::Topic) → `Properties.Tags` L853 in `bad_limit_numbers_yaml` - > Resource 'Resource225' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource226` (AWS::SNS::Topic) → `Properties.Tags` L855 in `bad_limit_numbers_yaml` - > Resource 'Resource226' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource227` (AWS::SNS::Topic) → `Properties.Tags` L857 in `bad_limit_numbers_yaml` - > Resource 'Resource227' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource228` (AWS::SNS::Topic) → `Properties.Tags` L859 in `bad_limit_numbers_yaml` - > Resource 'Resource228' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource229` (AWS::SNS::Topic) → `Properties.Tags` L861 in `bad_limit_numbers_yaml` - > Resource 'Resource229' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource23` (AWS::SNS::Topic) → `Properties.Tags` L449 in `bad_limit_numbers_yaml` - > Resource 'Resource23' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource230` (AWS::SNS::Topic) → `Properties.Tags` L863 in `bad_limit_numbers_yaml` - > Resource 'Resource230' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource231` (AWS::SNS::Topic) → `Properties.Tags` L865 in `bad_limit_numbers_yaml` - > Resource 'Resource231' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource232` (AWS::SNS::Topic) → `Properties.Tags` L867 in `bad_limit_numbers_yaml` - > Resource 'Resource232' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource233` (AWS::SNS::Topic) → `Properties.Tags` L869 in `bad_limit_numbers_yaml` - > Resource 'Resource233' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource234` (AWS::SNS::Topic) → `Properties.Tags` L871 in `bad_limit_numbers_yaml` - > Resource 'Resource234' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource235` (AWS::SNS::Topic) → `Properties.Tags` L873 in `bad_limit_numbers_yaml` - > Resource 'Resource235' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource236` (AWS::SNS::Topic) → `Properties.Tags` L875 in `bad_limit_numbers_yaml` - > Resource 'Resource236' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource237` (AWS::SNS::Topic) → `Properties.Tags` L877 in `bad_limit_numbers_yaml` - > Resource 'Resource237' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource238` (AWS::SNS::Topic) → `Properties.Tags` L879 in `bad_limit_numbers_yaml` - > Resource 'Resource238' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource239` (AWS::SNS::Topic) → `Properties.Tags` L881 in `bad_limit_numbers_yaml` - > Resource 'Resource239' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource24` (AWS::SNS::Topic) → `Properties.Tags` L451 in `bad_limit_numbers_yaml` - > Resource 'Resource24' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource240` (AWS::SNS::Topic) → `Properties.Tags` L883 in `bad_limit_numbers_yaml` - > Resource 'Resource240' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource241` (AWS::SNS::Topic) → `Properties.Tags` L885 in `bad_limit_numbers_yaml` - > Resource 'Resource241' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource242` (AWS::SNS::Topic) → `Properties.Tags` L887 in `bad_limit_numbers_yaml` - > Resource 'Resource242' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource243` (AWS::SNS::Topic) → `Properties.Tags` L889 in `bad_limit_numbers_yaml` - > Resource 'Resource243' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource244` (AWS::SNS::Topic) → `Properties.Tags` L891 in `bad_limit_numbers_yaml` - > Resource 'Resource244' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource245` (AWS::SNS::Topic) → `Properties.Tags` L893 in `bad_limit_numbers_yaml` - > Resource 'Resource245' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource246` (AWS::SNS::Topic) → `Properties.Tags` L895 in `bad_limit_numbers_yaml` - > Resource 'Resource246' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource247` (AWS::SNS::Topic) → `Properties.Tags` L897 in `bad_limit_numbers_yaml` - > Resource 'Resource247' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource248` (AWS::SNS::Topic) → `Properties.Tags` L899 in `bad_limit_numbers_yaml` - > Resource 'Resource248' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource249` (AWS::SNS::Topic) → `Properties.Tags` L901 in `bad_limit_numbers_yaml` - > Resource 'Resource249' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource25` (AWS::SNS::Topic) → `Properties.Tags` L453 in `bad_limit_numbers_yaml` - > Resource 'Resource25' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource250` (AWS::SNS::Topic) → `Properties.Tags` L903 in `bad_limit_numbers_yaml` - > Resource 'Resource250' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource251` (AWS::SNS::Topic) → `Properties.Tags` L905 in `bad_limit_numbers_yaml` - > Resource 'Resource251' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource252` (AWS::SNS::Topic) → `Properties.Tags` L907 in `bad_limit_numbers_yaml` - > Resource 'Resource252' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource253` (AWS::SNS::Topic) → `Properties.Tags` L909 in `bad_limit_numbers_yaml` - > Resource 'Resource253' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource254` (AWS::SNS::Topic) → `Properties.Tags` L911 in `bad_limit_numbers_yaml` - > Resource 'Resource254' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource255` (AWS::SNS::Topic) → `Properties.Tags` L913 in `bad_limit_numbers_yaml` - > Resource 'Resource255' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource256` (AWS::SNS::Topic) → `Properties.Tags` L915 in `bad_limit_numbers_yaml` - > Resource 'Resource256' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource257` (AWS::SNS::Topic) → `Properties.Tags` L917 in `bad_limit_numbers_yaml` - > Resource 'Resource257' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource258` (AWS::SNS::Topic) → `Properties.Tags` L919 in `bad_limit_numbers_yaml` - > Resource 'Resource258' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource259` (AWS::SNS::Topic) → `Properties.Tags` L921 in `bad_limit_numbers_yaml` - > Resource 'Resource259' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource26` (AWS::SNS::Topic) → `Properties.Tags` L455 in `bad_limit_numbers_yaml` - > Resource 'Resource26' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource260` (AWS::SNS::Topic) → `Properties.Tags` L923 in `bad_limit_numbers_yaml` - > Resource 'Resource260' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource261` (AWS::SNS::Topic) → `Properties.Tags` L925 in `bad_limit_numbers_yaml` - > Resource 'Resource261' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource262` (AWS::SNS::Topic) → `Properties.Tags` L927 in `bad_limit_numbers_yaml` - > Resource 'Resource262' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource263` (AWS::SNS::Topic) → `Properties.Tags` L929 in `bad_limit_numbers_yaml` - > Resource 'Resource263' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource264` (AWS::SNS::Topic) → `Properties.Tags` L931 in `bad_limit_numbers_yaml` - > Resource 'Resource264' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource265` (AWS::SNS::Topic) → `Properties.Tags` L933 in `bad_limit_numbers_yaml` - > Resource 'Resource265' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource266` (AWS::SNS::Topic) → `Properties.Tags` L935 in `bad_limit_numbers_yaml` - > Resource 'Resource266' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource267` (AWS::SNS::Topic) → `Properties.Tags` L937 in `bad_limit_numbers_yaml` - > Resource 'Resource267' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource268` (AWS::SNS::Topic) → `Properties.Tags` L939 in `bad_limit_numbers_yaml` - > Resource 'Resource268' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource269` (AWS::SNS::Topic) → `Properties.Tags` L941 in `bad_limit_numbers_yaml` - > Resource 'Resource269' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource27` (AWS::SNS::Topic) → `Properties.Tags` L457 in `bad_limit_numbers_yaml` - > Resource 'Resource27' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource270` (AWS::SNS::Topic) → `Properties.Tags` L943 in `bad_limit_numbers_yaml` - > Resource 'Resource270' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource271` (AWS::SNS::Topic) → `Properties.Tags` L945 in `bad_limit_numbers_yaml` - > Resource 'Resource271' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource272` (AWS::SNS::Topic) → `Properties.Tags` L947 in `bad_limit_numbers_yaml` - > Resource 'Resource272' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource273` (AWS::SNS::Topic) → `Properties.Tags` L949 in `bad_limit_numbers_yaml` - > Resource 'Resource273' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource274` (AWS::SNS::Topic) → `Properties.Tags` L951 in `bad_limit_numbers_yaml` - > Resource 'Resource274' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource275` (AWS::SNS::Topic) → `Properties.Tags` L953 in `bad_limit_numbers_yaml` - > Resource 'Resource275' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource276` (AWS::SNS::Topic) → `Properties.Tags` L955 in `bad_limit_numbers_yaml` - > Resource 'Resource276' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource277` (AWS::SNS::Topic) → `Properties.Tags` L957 in `bad_limit_numbers_yaml` - > Resource 'Resource277' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource278` (AWS::SNS::Topic) → `Properties.Tags` L959 in `bad_limit_numbers_yaml` - > Resource 'Resource278' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource279` (AWS::SNS::Topic) → `Properties.Tags` L961 in `bad_limit_numbers_yaml` - > Resource 'Resource279' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource28` (AWS::SNS::Topic) → `Properties.Tags` L459 in `bad_limit_numbers_yaml` - > Resource 'Resource28' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource280` (AWS::SNS::Topic) → `Properties.Tags` L963 in `bad_limit_numbers_yaml` - > Resource 'Resource280' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource281` (AWS::SNS::Topic) → `Properties.Tags` L965 in `bad_limit_numbers_yaml` - > Resource 'Resource281' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource282` (AWS::SNS::Topic) → `Properties.Tags` L967 in `bad_limit_numbers_yaml` - > Resource 'Resource282' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource283` (AWS::SNS::Topic) → `Properties.Tags` L969 in `bad_limit_numbers_yaml` - > Resource 'Resource283' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource284` (AWS::SNS::Topic) → `Properties.Tags` L971 in `bad_limit_numbers_yaml` - > Resource 'Resource284' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource285` (AWS::SNS::Topic) → `Properties.Tags` L973 in `bad_limit_numbers_yaml` - > Resource 'Resource285' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource286` (AWS::SNS::Topic) → `Properties.Tags` L975 in `bad_limit_numbers_yaml` - > Resource 'Resource286' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource287` (AWS::SNS::Topic) → `Properties.Tags` L977 in `bad_limit_numbers_yaml` - > Resource 'Resource287' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource288` (AWS::SNS::Topic) → `Properties.Tags` L979 in `bad_limit_numbers_yaml` - > Resource 'Resource288' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource289` (AWS::SNS::Topic) → `Properties.Tags` L981 in `bad_limit_numbers_yaml` - > Resource 'Resource289' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource29` (AWS::SNS::Topic) → `Properties.Tags` L461 in `bad_limit_numbers_yaml` - > Resource 'Resource29' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource290` (AWS::SNS::Topic) → `Properties.Tags` L983 in `bad_limit_numbers_yaml` - > Resource 'Resource290' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource291` (AWS::SNS::Topic) → `Properties.Tags` L985 in `bad_limit_numbers_yaml` - > Resource 'Resource291' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource292` (AWS::SNS::Topic) → `Properties.Tags` L987 in `bad_limit_numbers_yaml` - > Resource 'Resource292' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource293` (AWS::SNS::Topic) → `Properties.Tags` L989 in `bad_limit_numbers_yaml` - > Resource 'Resource293' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource294` (AWS::SNS::Topic) → `Properties.Tags` L991 in `bad_limit_numbers_yaml` - > Resource 'Resource294' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource295` (AWS::SNS::Topic) → `Properties.Tags` L993 in `bad_limit_numbers_yaml` - > Resource 'Resource295' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource296` (AWS::SNS::Topic) → `Properties.Tags` L995 in `bad_limit_numbers_yaml` - > Resource 'Resource296' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource297` (AWS::SNS::Topic) → `Properties.Tags` L997 in `bad_limit_numbers_yaml` - > Resource 'Resource297' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource298` (AWS::SNS::Topic) → `Properties.Tags` L999 in `bad_limit_numbers_yaml` - > Resource 'Resource298' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource299` (AWS::SNS::Topic) → `Properties.Tags` L1001 in `bad_limit_numbers_yaml` - > Resource 'Resource299' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L409 in `bad_limit_numbers_yaml` - > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource30` (AWS::SNS::Topic) → `Properties.Tags` L463 in `bad_limit_numbers_yaml` - > Resource 'Resource30' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource300` (AWS::SNS::Topic) → `Properties.Tags` L1003 in `bad_limit_numbers_yaml` - > Resource 'Resource300' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource301` (AWS::SNS::Topic) → `Properties.Tags` L1005 in `bad_limit_numbers_yaml` - > Resource 'Resource301' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource302` (AWS::SNS::Topic) → `Properties.Tags` L1007 in `bad_limit_numbers_yaml` - > Resource 'Resource302' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource303` (AWS::SNS::Topic) → `Properties.Tags` L1009 in `bad_limit_numbers_yaml` - > Resource 'Resource303' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource304` (AWS::SNS::Topic) → `Properties.Tags` L1011 in `bad_limit_numbers_yaml` - > Resource 'Resource304' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource305` (AWS::SNS::Topic) → `Properties.Tags` L1013 in `bad_limit_numbers_yaml` - > Resource 'Resource305' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource306` (AWS::SNS::Topic) → `Properties.Tags` L1015 in `bad_limit_numbers_yaml` - > Resource 'Resource306' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource307` (AWS::SNS::Topic) → `Properties.Tags` L1017 in `bad_limit_numbers_yaml` - > Resource 'Resource307' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource308` (AWS::SNS::Topic) → `Properties.Tags` L1019 in `bad_limit_numbers_yaml` - > Resource 'Resource308' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource309` (AWS::SNS::Topic) → `Properties.Tags` L1021 in `bad_limit_numbers_yaml` - > Resource 'Resource309' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource31` (AWS::SNS::Topic) → `Properties.Tags` L465 in `bad_limit_numbers_yaml` - > Resource 'Resource31' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource310` (AWS::SNS::Topic) → `Properties.Tags` L1023 in `bad_limit_numbers_yaml` - > Resource 'Resource310' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource311` (AWS::SNS::Topic) → `Properties.Tags` L1025 in `bad_limit_numbers_yaml` - > Resource 'Resource311' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource312` (AWS::SNS::Topic) → `Properties.Tags` L1027 in `bad_limit_numbers_yaml` - > Resource 'Resource312' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource313` (AWS::SNS::Topic) → `Properties.Tags` L1029 in `bad_limit_numbers_yaml` - > Resource 'Resource313' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource314` (AWS::SNS::Topic) → `Properties.Tags` L1031 in `bad_limit_numbers_yaml` - > Resource 'Resource314' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource315` (AWS::SNS::Topic) → `Properties.Tags` L1033 in `bad_limit_numbers_yaml` - > Resource 'Resource315' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource316` (AWS::SNS::Topic) → `Properties.Tags` L1035 in `bad_limit_numbers_yaml` - > Resource 'Resource316' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource317` (AWS::SNS::Topic) → `Properties.Tags` L1037 in `bad_limit_numbers_yaml` - > Resource 'Resource317' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource318` (AWS::SNS::Topic) → `Properties.Tags` L1039 in `bad_limit_numbers_yaml` - > Resource 'Resource318' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource319` (AWS::SNS::Topic) → `Properties.Tags` L1041 in `bad_limit_numbers_yaml` - > Resource 'Resource319' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource32` (AWS::SNS::Topic) → `Properties.Tags` L467 in `bad_limit_numbers_yaml` - > Resource 'Resource32' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource320` (AWS::SNS::Topic) → `Properties.Tags` L1043 in `bad_limit_numbers_yaml` - > Resource 'Resource320' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource321` (AWS::SNS::Topic) → `Properties.Tags` L1045 in `bad_limit_numbers_yaml` - > Resource 'Resource321' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource322` (AWS::SNS::Topic) → `Properties.Tags` L1047 in `bad_limit_numbers_yaml` - > Resource 'Resource322' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource323` (AWS::SNS::Topic) → `Properties.Tags` L1049 in `bad_limit_numbers_yaml` - > Resource 'Resource323' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource324` (AWS::SNS::Topic) → `Properties.Tags` L1051 in `bad_limit_numbers_yaml` - > Resource 'Resource324' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource325` (AWS::SNS::Topic) → `Properties.Tags` L1053 in `bad_limit_numbers_yaml` - > Resource 'Resource325' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource326` (AWS::SNS::Topic) → `Properties.Tags` L1055 in `bad_limit_numbers_yaml` - > Resource 'Resource326' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource327` (AWS::SNS::Topic) → `Properties.Tags` L1057 in `bad_limit_numbers_yaml` - > Resource 'Resource327' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource328` (AWS::SNS::Topic) → `Properties.Tags` L1059 in `bad_limit_numbers_yaml` - > Resource 'Resource328' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource329` (AWS::SNS::Topic) → `Properties.Tags` L1061 in `bad_limit_numbers_yaml` - > Resource 'Resource329' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource33` (AWS::SNS::Topic) → `Properties.Tags` L469 in `bad_limit_numbers_yaml` - > Resource 'Resource33' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource330` (AWS::SNS::Topic) → `Properties.Tags` L1063 in `bad_limit_numbers_yaml` - > Resource 'Resource330' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource331` (AWS::SNS::Topic) → `Properties.Tags` L1065 in `bad_limit_numbers_yaml` - > Resource 'Resource331' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource332` (AWS::SNS::Topic) → `Properties.Tags` L1067 in `bad_limit_numbers_yaml` - > Resource 'Resource332' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource333` (AWS::SNS::Topic) → `Properties.Tags` L1069 in `bad_limit_numbers_yaml` - > Resource 'Resource333' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource334` (AWS::SNS::Topic) → `Properties.Tags` L1071 in `bad_limit_numbers_yaml` - > Resource 'Resource334' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource335` (AWS::SNS::Topic) → `Properties.Tags` L1073 in `bad_limit_numbers_yaml` - > Resource 'Resource335' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource336` (AWS::SNS::Topic) → `Properties.Tags` L1075 in `bad_limit_numbers_yaml` - > Resource 'Resource336' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource337` (AWS::SNS::Topic) → `Properties.Tags` L1077 in `bad_limit_numbers_yaml` - > Resource 'Resource337' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource338` (AWS::SNS::Topic) → `Properties.Tags` L1079 in `bad_limit_numbers_yaml` - > Resource 'Resource338' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource339` (AWS::SNS::Topic) → `Properties.Tags` L1081 in `bad_limit_numbers_yaml` - > Resource 'Resource339' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource34` (AWS::SNS::Topic) → `Properties.Tags` L471 in `bad_limit_numbers_yaml` - > Resource 'Resource34' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource340` (AWS::SNS::Topic) → `Properties.Tags` L1083 in `bad_limit_numbers_yaml` - > Resource 'Resource340' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource341` (AWS::SNS::Topic) → `Properties.Tags` L1085 in `bad_limit_numbers_yaml` - > Resource 'Resource341' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource342` (AWS::SNS::Topic) → `Properties.Tags` L1087 in `bad_limit_numbers_yaml` - > Resource 'Resource342' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource343` (AWS::SNS::Topic) → `Properties.Tags` L1089 in `bad_limit_numbers_yaml` - > Resource 'Resource343' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource344` (AWS::SNS::Topic) → `Properties.Tags` L1091 in `bad_limit_numbers_yaml` - > Resource 'Resource344' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource345` (AWS::SNS::Topic) → `Properties.Tags` L1093 in `bad_limit_numbers_yaml` - > Resource 'Resource345' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource346` (AWS::SNS::Topic) → `Properties.Tags` L1095 in `bad_limit_numbers_yaml` - > Resource 'Resource346' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource347` (AWS::SNS::Topic) → `Properties.Tags` L1097 in `bad_limit_numbers_yaml` - > Resource 'Resource347' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource348` (AWS::SNS::Topic) → `Properties.Tags` L1099 in `bad_limit_numbers_yaml` - > Resource 'Resource348' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource349` (AWS::SNS::Topic) → `Properties.Tags` L1101 in `bad_limit_numbers_yaml` - > Resource 'Resource349' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource35` (AWS::SNS::Topic) → `Properties.Tags` L473 in `bad_limit_numbers_yaml` - > Resource 'Resource35' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource350` (AWS::SNS::Topic) → `Properties.Tags` L1103 in `bad_limit_numbers_yaml` - > Resource 'Resource350' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource351` (AWS::SNS::Topic) → `Properties.Tags` L1105 in `bad_limit_numbers_yaml` - > Resource 'Resource351' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource352` (AWS::SNS::Topic) → `Properties.Tags` L1107 in `bad_limit_numbers_yaml` - > Resource 'Resource352' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource353` (AWS::SNS::Topic) → `Properties.Tags` L1109 in `bad_limit_numbers_yaml` - > Resource 'Resource353' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource354` (AWS::SNS::Topic) → `Properties.Tags` L1111 in `bad_limit_numbers_yaml` - > Resource 'Resource354' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource355` (AWS::SNS::Topic) → `Properties.Tags` L1113 in `bad_limit_numbers_yaml` - > Resource 'Resource355' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource356` (AWS::SNS::Topic) → `Properties.Tags` L1115 in `bad_limit_numbers_yaml` - > Resource 'Resource356' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource357` (AWS::SNS::Topic) → `Properties.Tags` L1117 in `bad_limit_numbers_yaml` - > Resource 'Resource357' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource358` (AWS::SNS::Topic) → `Properties.Tags` L1119 in `bad_limit_numbers_yaml` - > Resource 'Resource358' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource359` (AWS::SNS::Topic) → `Properties.Tags` L1121 in `bad_limit_numbers_yaml` - > Resource 'Resource359' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource36` (AWS::SNS::Topic) → `Properties.Tags` L475 in `bad_limit_numbers_yaml` - > Resource 'Resource36' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource360` (AWS::SNS::Topic) → `Properties.Tags` L1123 in `bad_limit_numbers_yaml` - > Resource 'Resource360' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource361` (AWS::SNS::Topic) → `Properties.Tags` L1125 in `bad_limit_numbers_yaml` - > Resource 'Resource361' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource362` (AWS::SNS::Topic) → `Properties.Tags` L1127 in `bad_limit_numbers_yaml` - > Resource 'Resource362' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource363` (AWS::SNS::Topic) → `Properties.Tags` L1129 in `bad_limit_numbers_yaml` - > Resource 'Resource363' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource364` (AWS::SNS::Topic) → `Properties.Tags` L1131 in `bad_limit_numbers_yaml` - > Resource 'Resource364' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource365` (AWS::SNS::Topic) → `Properties.Tags` L1133 in `bad_limit_numbers_yaml` - > Resource 'Resource365' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource366` (AWS::SNS::Topic) → `Properties.Tags` L1135 in `bad_limit_numbers_yaml` - > Resource 'Resource366' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource367` (AWS::SNS::Topic) → `Properties.Tags` L1137 in `bad_limit_numbers_yaml` - > Resource 'Resource367' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource368` (AWS::SNS::Topic) → `Properties.Tags` L1139 in `bad_limit_numbers_yaml` - > Resource 'Resource368' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource369` (AWS::SNS::Topic) → `Properties.Tags` L1141 in `bad_limit_numbers_yaml` - > Resource 'Resource369' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource37` (AWS::SNS::Topic) → `Properties.Tags` L477 in `bad_limit_numbers_yaml` - > Resource 'Resource37' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource370` (AWS::SNS::Topic) → `Properties.Tags` L1143 in `bad_limit_numbers_yaml` - > Resource 'Resource370' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource371` (AWS::SNS::Topic) → `Properties.Tags` L1145 in `bad_limit_numbers_yaml` - > Resource 'Resource371' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource372` (AWS::SNS::Topic) → `Properties.Tags` L1147 in `bad_limit_numbers_yaml` - > Resource 'Resource372' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource373` (AWS::SNS::Topic) → `Properties.Tags` L1149 in `bad_limit_numbers_yaml` - > Resource 'Resource373' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource374` (AWS::SNS::Topic) → `Properties.Tags` L1151 in `bad_limit_numbers_yaml` - > Resource 'Resource374' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource375` (AWS::SNS::Topic) → `Properties.Tags` L1153 in `bad_limit_numbers_yaml` - > Resource 'Resource375' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource376` (AWS::SNS::Topic) → `Properties.Tags` L1155 in `bad_limit_numbers_yaml` - > Resource 'Resource376' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource377` (AWS::SNS::Topic) → `Properties.Tags` L1157 in `bad_limit_numbers_yaml` - > Resource 'Resource377' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource378` (AWS::SNS::Topic) → `Properties.Tags` L1159 in `bad_limit_numbers_yaml` - > Resource 'Resource378' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource379` (AWS::SNS::Topic) → `Properties.Tags` L1161 in `bad_limit_numbers_yaml` - > Resource 'Resource379' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource38` (AWS::SNS::Topic) → `Properties.Tags` L479 in `bad_limit_numbers_yaml` - > Resource 'Resource38' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource380` (AWS::SNS::Topic) → `Properties.Tags` L1163 in `bad_limit_numbers_yaml` - > Resource 'Resource380' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource381` (AWS::SNS::Topic) → `Properties.Tags` L1165 in `bad_limit_numbers_yaml` - > Resource 'Resource381' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource382` (AWS::SNS::Topic) → `Properties.Tags` L1167 in `bad_limit_numbers_yaml` - > Resource 'Resource382' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource383` (AWS::SNS::Topic) → `Properties.Tags` L1169 in `bad_limit_numbers_yaml` - > Resource 'Resource383' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource384` (AWS::SNS::Topic) → `Properties.Tags` L1171 in `bad_limit_numbers_yaml` - > Resource 'Resource384' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource385` (AWS::SNS::Topic) → `Properties.Tags` L1173 in `bad_limit_numbers_yaml` - > Resource 'Resource385' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource386` (AWS::SNS::Topic) → `Properties.Tags` L1175 in `bad_limit_numbers_yaml` - > Resource 'Resource386' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource387` (AWS::SNS::Topic) → `Properties.Tags` L1177 in `bad_limit_numbers_yaml` - > Resource 'Resource387' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource388` (AWS::SNS::Topic) → `Properties.Tags` L1179 in `bad_limit_numbers_yaml` - > Resource 'Resource388' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource389` (AWS::SNS::Topic) → `Properties.Tags` L1181 in `bad_limit_numbers_yaml` - > Resource 'Resource389' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource39` (AWS::SNS::Topic) → `Properties.Tags` L481 in `bad_limit_numbers_yaml` - > Resource 'Resource39' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource390` (AWS::SNS::Topic) → `Properties.Tags` L1183 in `bad_limit_numbers_yaml` - > Resource 'Resource390' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource391` (AWS::SNS::Topic) → `Properties.Tags` L1185 in `bad_limit_numbers_yaml` - > Resource 'Resource391' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource392` (AWS::SNS::Topic) → `Properties.Tags` L1187 in `bad_limit_numbers_yaml` - > Resource 'Resource392' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource393` (AWS::SNS::Topic) → `Properties.Tags` L1189 in `bad_limit_numbers_yaml` - > Resource 'Resource393' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource394` (AWS::SNS::Topic) → `Properties.Tags` L1191 in `bad_limit_numbers_yaml` - > Resource 'Resource394' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource395` (AWS::SNS::Topic) → `Properties.Tags` L1193 in `bad_limit_numbers_yaml` - > Resource 'Resource395' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource396` (AWS::SNS::Topic) → `Properties.Tags` L1195 in `bad_limit_numbers_yaml` - > Resource 'Resource396' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource397` (AWS::SNS::Topic) → `Properties.Tags` L1197 in `bad_limit_numbers_yaml` - > Resource 'Resource397' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource398` (AWS::SNS::Topic) → `Properties.Tags` L1199 in `bad_limit_numbers_yaml` - > Resource 'Resource398' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource399` (AWS::SNS::Topic) → `Properties.Tags` L1201 in `bad_limit_numbers_yaml` - > Resource 'Resource399' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L411 in `bad_limit_numbers_yaml` - > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource40` (AWS::SNS::Topic) → `Properties.Tags` L483 in `bad_limit_numbers_yaml` - > Resource 'Resource40' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource400` (AWS::SNS::Topic) → `Properties.Tags` L1203 in `bad_limit_numbers_yaml` - > Resource 'Resource400' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource401` (AWS::SNS::Topic) → `Properties.Tags` L1205 in `bad_limit_numbers_yaml` - > Resource 'Resource401' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource402` (AWS::SNS::Topic) → `Properties.Tags` L1207 in `bad_limit_numbers_yaml` - > Resource 'Resource402' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource403` (AWS::SNS::Topic) → `Properties.Tags` L1209 in `bad_limit_numbers_yaml` - > Resource 'Resource403' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource404` (AWS::SNS::Topic) → `Properties.Tags` L1211 in `bad_limit_numbers_yaml` - > Resource 'Resource404' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource405` (AWS::SNS::Topic) → `Properties.Tags` L1213 in `bad_limit_numbers_yaml` - > Resource 'Resource405' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource406` (AWS::SNS::Topic) → `Properties.Tags` L1215 in `bad_limit_numbers_yaml` - > Resource 'Resource406' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource407` (AWS::SNS::Topic) → `Properties.Tags` L1217 in `bad_limit_numbers_yaml` - > Resource 'Resource407' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource408` (AWS::SNS::Topic) → `Properties.Tags` L1219 in `bad_limit_numbers_yaml` - > Resource 'Resource408' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource409` (AWS::SNS::Topic) → `Properties.Tags` L1221 in `bad_limit_numbers_yaml` - > Resource 'Resource409' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource41` (AWS::SNS::Topic) → `Properties.Tags` L485 in `bad_limit_numbers_yaml` - > Resource 'Resource41' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource410` (AWS::SNS::Topic) → `Properties.Tags` L1223 in `bad_limit_numbers_yaml` - > Resource 'Resource410' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource411` (AWS::SNS::Topic) → `Properties.Tags` L1225 in `bad_limit_numbers_yaml` - > Resource 'Resource411' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource412` (AWS::SNS::Topic) → `Properties.Tags` L1227 in `bad_limit_numbers_yaml` - > Resource 'Resource412' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource413` (AWS::SNS::Topic) → `Properties.Tags` L1229 in `bad_limit_numbers_yaml` - > Resource 'Resource413' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource414` (AWS::SNS::Topic) → `Properties.Tags` L1231 in `bad_limit_numbers_yaml` - > Resource 'Resource414' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource415` (AWS::SNS::Topic) → `Properties.Tags` L1233 in `bad_limit_numbers_yaml` - > Resource 'Resource415' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource416` (AWS::SNS::Topic) → `Properties.Tags` L1235 in `bad_limit_numbers_yaml` - > Resource 'Resource416' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource417` (AWS::SNS::Topic) → `Properties.Tags` L1237 in `bad_limit_numbers_yaml` - > Resource 'Resource417' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource418` (AWS::SNS::Topic) → `Properties.Tags` L1239 in `bad_limit_numbers_yaml` - > Resource 'Resource418' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource419` (AWS::SNS::Topic) → `Properties.Tags` L1241 in `bad_limit_numbers_yaml` - > Resource 'Resource419' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource42` (AWS::SNS::Topic) → `Properties.Tags` L487 in `bad_limit_numbers_yaml` - > Resource 'Resource42' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource420` (AWS::SNS::Topic) → `Properties.Tags` L1243 in `bad_limit_numbers_yaml` - > Resource 'Resource420' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource421` (AWS::SNS::Topic) → `Properties.Tags` L1245 in `bad_limit_numbers_yaml` - > Resource 'Resource421' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource422` (AWS::SNS::Topic) → `Properties.Tags` L1247 in `bad_limit_numbers_yaml` - > Resource 'Resource422' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource423` (AWS::SNS::Topic) → `Properties.Tags` L1249 in `bad_limit_numbers_yaml` - > Resource 'Resource423' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource424` (AWS::SNS::Topic) → `Properties.Tags` L1251 in `bad_limit_numbers_yaml` - > Resource 'Resource424' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource425` (AWS::SNS::Topic) → `Properties.Tags` L1253 in `bad_limit_numbers_yaml` - > Resource 'Resource425' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource426` (AWS::SNS::Topic) → `Properties.Tags` L1255 in `bad_limit_numbers_yaml` - > Resource 'Resource426' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource427` (AWS::SNS::Topic) → `Properties.Tags` L1257 in `bad_limit_numbers_yaml` - > Resource 'Resource427' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource428` (AWS::SNS::Topic) → `Properties.Tags` L1259 in `bad_limit_numbers_yaml` - > Resource 'Resource428' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource429` (AWS::SNS::Topic) → `Properties.Tags` L1261 in `bad_limit_numbers_yaml` - > Resource 'Resource429' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource43` (AWS::SNS::Topic) → `Properties.Tags` L489 in `bad_limit_numbers_yaml` - > Resource 'Resource43' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource430` (AWS::SNS::Topic) → `Properties.Tags` L1263 in `bad_limit_numbers_yaml` - > Resource 'Resource430' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource431` (AWS::SNS::Topic) → `Properties.Tags` L1265 in `bad_limit_numbers_yaml` - > Resource 'Resource431' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource432` (AWS::SNS::Topic) → `Properties.Tags` L1267 in `bad_limit_numbers_yaml` - > Resource 'Resource432' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource433` (AWS::SNS::Topic) → `Properties.Tags` L1269 in `bad_limit_numbers_yaml` - > Resource 'Resource433' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource434` (AWS::SNS::Topic) → `Properties.Tags` L1271 in `bad_limit_numbers_yaml` - > Resource 'Resource434' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource435` (AWS::SNS::Topic) → `Properties.Tags` L1273 in `bad_limit_numbers_yaml` - > Resource 'Resource435' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource436` (AWS::SNS::Topic) → `Properties.Tags` L1275 in `bad_limit_numbers_yaml` - > Resource 'Resource436' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource437` (AWS::SNS::Topic) → `Properties.Tags` L1277 in `bad_limit_numbers_yaml` - > Resource 'Resource437' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource438` (AWS::SNS::Topic) → `Properties.Tags` L1279 in `bad_limit_numbers_yaml` - > Resource 'Resource438' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource439` (AWS::SNS::Topic) → `Properties.Tags` L1281 in `bad_limit_numbers_yaml` - > Resource 'Resource439' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource44` (AWS::SNS::Topic) → `Properties.Tags` L491 in `bad_limit_numbers_yaml` - > Resource 'Resource44' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource440` (AWS::SNS::Topic) → `Properties.Tags` L1283 in `bad_limit_numbers_yaml` - > Resource 'Resource440' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource441` (AWS::SNS::Topic) → `Properties.Tags` L1285 in `bad_limit_numbers_yaml` - > Resource 'Resource441' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource442` (AWS::SNS::Topic) → `Properties.Tags` L1287 in `bad_limit_numbers_yaml` - > Resource 'Resource442' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource443` (AWS::SNS::Topic) → `Properties.Tags` L1289 in `bad_limit_numbers_yaml` - > Resource 'Resource443' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource444` (AWS::SNS::Topic) → `Properties.Tags` L1291 in `bad_limit_numbers_yaml` - > Resource 'Resource444' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource445` (AWS::SNS::Topic) → `Properties.Tags` L1293 in `bad_limit_numbers_yaml` - > Resource 'Resource445' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource446` (AWS::SNS::Topic) → `Properties.Tags` L1295 in `bad_limit_numbers_yaml` - > Resource 'Resource446' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource447` (AWS::SNS::Topic) → `Properties.Tags` L1297 in `bad_limit_numbers_yaml` - > Resource 'Resource447' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource448` (AWS::SNS::Topic) → `Properties.Tags` L1299 in `bad_limit_numbers_yaml` - > Resource 'Resource448' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource449` (AWS::SNS::Topic) → `Properties.Tags` L1301 in `bad_limit_numbers_yaml` - > Resource 'Resource449' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource45` (AWS::SNS::Topic) → `Properties.Tags` L493 in `bad_limit_numbers_yaml` - > Resource 'Resource45' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource450` (AWS::SNS::Topic) → `Properties.Tags` L1303 in `bad_limit_numbers_yaml` - > Resource 'Resource450' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource451` (AWS::SNS::Topic) → `Properties.Tags` L1305 in `bad_limit_numbers_yaml` - > Resource 'Resource451' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource452` (AWS::SNS::Topic) → `Properties.Tags` L1307 in `bad_limit_numbers_yaml` - > Resource 'Resource452' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource453` (AWS::SNS::Topic) → `Properties.Tags` L1309 in `bad_limit_numbers_yaml` - > Resource 'Resource453' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource454` (AWS::SNS::Topic) → `Properties.Tags` L1311 in `bad_limit_numbers_yaml` - > Resource 'Resource454' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource455` (AWS::SNS::Topic) → `Properties.Tags` L1313 in `bad_limit_numbers_yaml` - > Resource 'Resource455' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource456` (AWS::SNS::Topic) → `Properties.Tags` L1315 in `bad_limit_numbers_yaml` - > Resource 'Resource456' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource457` (AWS::SNS::Topic) → `Properties.Tags` L1317 in `bad_limit_numbers_yaml` - > Resource 'Resource457' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource458` (AWS::SNS::Topic) → `Properties.Tags` L1319 in `bad_limit_numbers_yaml` - > Resource 'Resource458' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource459` (AWS::SNS::Topic) → `Properties.Tags` L1321 in `bad_limit_numbers_yaml` - > Resource 'Resource459' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource46` (AWS::SNS::Topic) → `Properties.Tags` L495 in `bad_limit_numbers_yaml` - > Resource 'Resource46' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource460` (AWS::SNS::Topic) → `Properties.Tags` L1323 in `bad_limit_numbers_yaml` - > Resource 'Resource460' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource461` (AWS::SNS::Topic) → `Properties.Tags` L1325 in `bad_limit_numbers_yaml` - > Resource 'Resource461' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource462` (AWS::SNS::Topic) → `Properties.Tags` L1327 in `bad_limit_numbers_yaml` - > Resource 'Resource462' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource463` (AWS::SNS::Topic) → `Properties.Tags` L1329 in `bad_limit_numbers_yaml` - > Resource 'Resource463' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource464` (AWS::SNS::Topic) → `Properties.Tags` L1331 in `bad_limit_numbers_yaml` - > Resource 'Resource464' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource465` (AWS::SNS::Topic) → `Properties.Tags` L1333 in `bad_limit_numbers_yaml` - > Resource 'Resource465' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource466` (AWS::SNS::Topic) → `Properties.Tags` L1335 in `bad_limit_numbers_yaml` - > Resource 'Resource466' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource467` (AWS::SNS::Topic) → `Properties.Tags` L1337 in `bad_limit_numbers_yaml` - > Resource 'Resource467' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource468` (AWS::SNS::Topic) → `Properties.Tags` L1339 in `bad_limit_numbers_yaml` - > Resource 'Resource468' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource469` (AWS::SNS::Topic) → `Properties.Tags` L1341 in `bad_limit_numbers_yaml` - > Resource 'Resource469' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource47` (AWS::SNS::Topic) → `Properties.Tags` L497 in `bad_limit_numbers_yaml` - > Resource 'Resource47' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource470` (AWS::SNS::Topic) → `Properties.Tags` L1343 in `bad_limit_numbers_yaml` - > Resource 'Resource470' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource471` (AWS::SNS::Topic) → `Properties.Tags` L1345 in `bad_limit_numbers_yaml` - > Resource 'Resource471' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource472` (AWS::SNS::Topic) → `Properties.Tags` L1347 in `bad_limit_numbers_yaml` - > Resource 'Resource472' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource473` (AWS::SNS::Topic) → `Properties.Tags` L1349 in `bad_limit_numbers_yaml` - > Resource 'Resource473' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource474` (AWS::SNS::Topic) → `Properties.Tags` L1351 in `bad_limit_numbers_yaml` - > Resource 'Resource474' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource475` (AWS::SNS::Topic) → `Properties.Tags` L1353 in `bad_limit_numbers_yaml` - > Resource 'Resource475' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource476` (AWS::SNS::Topic) → `Properties.Tags` L1355 in `bad_limit_numbers_yaml` - > Resource 'Resource476' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource477` (AWS::SNS::Topic) → `Properties.Tags` L1357 in `bad_limit_numbers_yaml` - > Resource 'Resource477' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource478` (AWS::SNS::Topic) → `Properties.Tags` L1359 in `bad_limit_numbers_yaml` - > Resource 'Resource478' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource479` (AWS::SNS::Topic) → `Properties.Tags` L1361 in `bad_limit_numbers_yaml` - > Resource 'Resource479' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource48` (AWS::SNS::Topic) → `Properties.Tags` L499 in `bad_limit_numbers_yaml` - > Resource 'Resource48' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource480` (AWS::SNS::Topic) → `Properties.Tags` L1363 in `bad_limit_numbers_yaml` - > Resource 'Resource480' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource481` (AWS::SNS::Topic) → `Properties.Tags` L1365 in `bad_limit_numbers_yaml` - > Resource 'Resource481' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource482` (AWS::SNS::Topic) → `Properties.Tags` L1367 in `bad_limit_numbers_yaml` - > Resource 'Resource482' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource483` (AWS::SNS::Topic) → `Properties.Tags` L1369 in `bad_limit_numbers_yaml` - > Resource 'Resource483' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource484` (AWS::SNS::Topic) → `Properties.Tags` L1371 in `bad_limit_numbers_yaml` - > Resource 'Resource484' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource485` (AWS::SNS::Topic) → `Properties.Tags` L1373 in `bad_limit_numbers_yaml` - > Resource 'Resource485' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource486` (AWS::SNS::Topic) → `Properties.Tags` L1375 in `bad_limit_numbers_yaml` - > Resource 'Resource486' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource487` (AWS::SNS::Topic) → `Properties.Tags` L1377 in `bad_limit_numbers_yaml` - > Resource 'Resource487' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource488` (AWS::SNS::Topic) → `Properties.Tags` L1379 in `bad_limit_numbers_yaml` - > Resource 'Resource488' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource489` (AWS::SNS::Topic) → `Properties.Tags` L1381 in `bad_limit_numbers_yaml` - > Resource 'Resource489' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource49` (AWS::SNS::Topic) → `Properties.Tags` L501 in `bad_limit_numbers_yaml` - > Resource 'Resource49' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource490` (AWS::SNS::Topic) → `Properties.Tags` L1383 in `bad_limit_numbers_yaml` - > Resource 'Resource490' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource491` (AWS::SNS::Topic) → `Properties.Tags` L1385 in `bad_limit_numbers_yaml` - > Resource 'Resource491' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource492` (AWS::SNS::Topic) → `Properties.Tags` L1387 in `bad_limit_numbers_yaml` - > Resource 'Resource492' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource493` (AWS::SNS::Topic) → `Properties.Tags` L1389 in `bad_limit_numbers_yaml` - > Resource 'Resource493' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource494` (AWS::SNS::Topic) → `Properties.Tags` L1391 in `bad_limit_numbers_yaml` - > Resource 'Resource494' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource495` (AWS::SNS::Topic) → `Properties.Tags` L1393 in `bad_limit_numbers_yaml` - > Resource 'Resource495' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource496` (AWS::SNS::Topic) → `Properties.Tags` L1395 in `bad_limit_numbers_yaml` - > Resource 'Resource496' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource497` (AWS::SNS::Topic) → `Properties.Tags` L1397 in `bad_limit_numbers_yaml` - > Resource 'Resource497' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource498` (AWS::SNS::Topic) → `Properties.Tags` L1399 in `bad_limit_numbers_yaml` - > Resource 'Resource498' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource499` (AWS::SNS::Topic) → `Properties.Tags` L1401 in `bad_limit_numbers_yaml` - > Resource 'Resource499' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L413 in `bad_limit_numbers_yaml` - > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource50` (AWS::SNS::Topic) → `Properties.Tags` L503 in `bad_limit_numbers_yaml` - > Resource 'Resource50' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource500` (AWS::SNS::Topic) → `Properties.Tags` L1403 in `bad_limit_numbers_yaml` - > Resource 'Resource500' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource501` (AWS::SNS::Topic) → `Properties.Tags` L1405 in `bad_limit_numbers_yaml` - > Resource 'Resource501' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource51` (AWS::SNS::Topic) → `Properties.Tags` L505 in `bad_limit_numbers_yaml` - > Resource 'Resource51' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource52` (AWS::SNS::Topic) → `Properties.Tags` L507 in `bad_limit_numbers_yaml` - > Resource 'Resource52' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource53` (AWS::SNS::Topic) → `Properties.Tags` L509 in `bad_limit_numbers_yaml` - > Resource 'Resource53' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource54` (AWS::SNS::Topic) → `Properties.Tags` L511 in `bad_limit_numbers_yaml` - > Resource 'Resource54' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource55` (AWS::SNS::Topic) → `Properties.Tags` L513 in `bad_limit_numbers_yaml` - > Resource 'Resource55' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource56` (AWS::SNS::Topic) → `Properties.Tags` L515 in `bad_limit_numbers_yaml` - > Resource 'Resource56' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource57` (AWS::SNS::Topic) → `Properties.Tags` L517 in `bad_limit_numbers_yaml` - > Resource 'Resource57' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource58` (AWS::SNS::Topic) → `Properties.Tags` L519 in `bad_limit_numbers_yaml` - > Resource 'Resource58' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource59` (AWS::SNS::Topic) → `Properties.Tags` L521 in `bad_limit_numbers_yaml` - > Resource 'Resource59' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L415 in `bad_limit_numbers_yaml` - > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource60` (AWS::SNS::Topic) → `Properties.Tags` L523 in `bad_limit_numbers_yaml` - > Resource 'Resource60' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource61` (AWS::SNS::Topic) → `Properties.Tags` L525 in `bad_limit_numbers_yaml` - > Resource 'Resource61' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource62` (AWS::SNS::Topic) → `Properties.Tags` L527 in `bad_limit_numbers_yaml` - > Resource 'Resource62' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource63` (AWS::SNS::Topic) → `Properties.Tags` L529 in `bad_limit_numbers_yaml` - > Resource 'Resource63' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource64` (AWS::SNS::Topic) → `Properties.Tags` L531 in `bad_limit_numbers_yaml` - > Resource 'Resource64' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource65` (AWS::SNS::Topic) → `Properties.Tags` L533 in `bad_limit_numbers_yaml` - > Resource 'Resource65' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource66` (AWS::SNS::Topic) → `Properties.Tags` L535 in `bad_limit_numbers_yaml` - > Resource 'Resource66' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource67` (AWS::SNS::Topic) → `Properties.Tags` L537 in `bad_limit_numbers_yaml` - > Resource 'Resource67' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource68` (AWS::SNS::Topic) → `Properties.Tags` L539 in `bad_limit_numbers_yaml` - > Resource 'Resource68' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource69` (AWS::SNS::Topic) → `Properties.Tags` L541 in `bad_limit_numbers_yaml` - > Resource 'Resource69' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L417 in `bad_limit_numbers_yaml` - > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource70` (AWS::SNS::Topic) → `Properties.Tags` L543 in `bad_limit_numbers_yaml` - > Resource 'Resource70' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource71` (AWS::SNS::Topic) → `Properties.Tags` L545 in `bad_limit_numbers_yaml` - > Resource 'Resource71' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource72` (AWS::SNS::Topic) → `Properties.Tags` L547 in `bad_limit_numbers_yaml` - > Resource 'Resource72' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource73` (AWS::SNS::Topic) → `Properties.Tags` L549 in `bad_limit_numbers_yaml` - > Resource 'Resource73' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource74` (AWS::SNS::Topic) → `Properties.Tags` L551 in `bad_limit_numbers_yaml` - > Resource 'Resource74' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource75` (AWS::SNS::Topic) → `Properties.Tags` L553 in `bad_limit_numbers_yaml` - > Resource 'Resource75' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource76` (AWS::SNS::Topic) → `Properties.Tags` L555 in `bad_limit_numbers_yaml` - > Resource 'Resource76' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource77` (AWS::SNS::Topic) → `Properties.Tags` L557 in `bad_limit_numbers_yaml` - > Resource 'Resource77' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource78` (AWS::SNS::Topic) → `Properties.Tags` L559 in `bad_limit_numbers_yaml` - > Resource 'Resource78' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource79` (AWS::SNS::Topic) → `Properties.Tags` L561 in `bad_limit_numbers_yaml` - > Resource 'Resource79' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L419 in `bad_limit_numbers_yaml` - > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource80` (AWS::SNS::Topic) → `Properties.Tags` L563 in `bad_limit_numbers_yaml` - > Resource 'Resource80' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource81` (AWS::SNS::Topic) → `Properties.Tags` L565 in `bad_limit_numbers_yaml` - > Resource 'Resource81' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource82` (AWS::SNS::Topic) → `Properties.Tags` L567 in `bad_limit_numbers_yaml` - > Resource 'Resource82' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource83` (AWS::SNS::Topic) → `Properties.Tags` L569 in `bad_limit_numbers_yaml` - > Resource 'Resource83' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource84` (AWS::SNS::Topic) → `Properties.Tags` L571 in `bad_limit_numbers_yaml` - > Resource 'Resource84' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource85` (AWS::SNS::Topic) → `Properties.Tags` L573 in `bad_limit_numbers_yaml` - > Resource 'Resource85' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource86` (AWS::SNS::Topic) → `Properties.Tags` L575 in `bad_limit_numbers_yaml` - > Resource 'Resource86' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource87` (AWS::SNS::Topic) → `Properties.Tags` L577 in `bad_limit_numbers_yaml` - > Resource 'Resource87' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource88` (AWS::SNS::Topic) → `Properties.Tags` L579 in `bad_limit_numbers_yaml` - > Resource 'Resource88' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource89` (AWS::SNS::Topic) → `Properties.Tags` L581 in `bad_limit_numbers_yaml` - > Resource 'Resource89' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L421 in `bad_limit_numbers_yaml` - > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource90` (AWS::SNS::Topic) → `Properties.Tags` L583 in `bad_limit_numbers_yaml` - > Resource 'Resource90' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource91` (AWS::SNS::Topic) → `Properties.Tags` L585 in `bad_limit_numbers_yaml` - > Resource 'Resource91' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource92` (AWS::SNS::Topic) → `Properties.Tags` L587 in `bad_limit_numbers_yaml` - > Resource 'Resource92' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource93` (AWS::SNS::Topic) → `Properties.Tags` L589 in `bad_limit_numbers_yaml` - > Resource 'Resource93' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource94` (AWS::SNS::Topic) → `Properties.Tags` L591 in `bad_limit_numbers_yaml` - > Resource 'Resource94' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource95` (AWS::SNS::Topic) → `Properties.Tags` L593 in `bad_limit_numbers_yaml` - > Resource 'Resource95' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource96` (AWS::SNS::Topic) → `Properties.Tags` L595 in `bad_limit_numbers_yaml` - > Resource 'Resource96' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource97` (AWS::SNS::Topic) → `Properties.Tags` L597 in `bad_limit_numbers_yaml` - > Resource 'Resource97' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource98` (AWS::SNS::Topic) → `Properties.Tags` L599 in `bad_limit_numbers_yaml` - > Resource 'Resource98' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource99` (AWS::SNS::Topic) → `Properties.Tags` L601 in `bad_limit_numbers_yaml` - > Resource 'Resource99' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `bad_mappings_used_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SNSTopicWithSecretNameInRef` (AWS::SNS::Topic) → `Properties.Tags` L10 in `bad_noecho_yaml` - > Resource 'SNSTopicWithSecretNameInRef' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SNSTopicWithSecretNameInSub` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_noecho_yaml` - > Resource 'SNSTopicWithSecretNameInSub' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `BadDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L6 in `bad_opensearch_instance_type_yaml` - > Resource 'BadDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured -- **I9040** `ValidDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L11 in `bad_opensearch_instance_type_yaml` - > Resource 'ValidDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_references_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_targets_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L13 in `bad_output_value_not_string_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L17 in `bad_override_complete_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_complete_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L23 in `bad_override_complete_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `mySpotFleet` (AWS::EC2::SpotFleet) → `Properties.Tags` L20 in `bad_override_complete_yaml` - > Resource 'mySpotFleet' of type 'AWS::EC2::SpotFleet' supports Tags but none are configured -- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L13 in `bad_override_complete_yaml` - > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myGameLift` (AWS::GameLift::Alias) → `Properties.Tags` L8 in `bad_override_exclude_yaml` - > Resource 'myGameLift' of type 'AWS::GameLift::Alias' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_override_exclude_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_override_exclude_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_override_include_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L27 in `bad_override_include_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L8 in `bad_override_include_yaml` - > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_required_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_param_constraints_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L62 in `bad_parameters_configuration_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_pipeline_no_source_first_stage_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_previous_gen_instance_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Tags` L15 in `bad_previous_generation_instances_yaml` - > Resource 'CacheCluster' of type 'AWS::ElastiCache::CacheCluster' supports Tags but none are configured -- **I9040** `DBInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L11 in `bad_previous_generation_instances_yaml` - > Resource 'DBInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Domain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L2 in `bad_previous_generation_instances_yaml` - > Resource 'Domain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `Domain2` (AWS::Elasticsearch::Domain) → `Properties.Tags` L21 in `bad_previous_generation_instances_yaml` - > Resource 'Domain2' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L26 in `bad_previous_generation_instances_yaml` - > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_previous_generation_instances_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_properties_ebs_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_properties_ebs_yaml` - > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_properties_password_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Tags` L27 in `bad_properties_password_yaml` - > Resource 'MyNewDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L36 in `bad_properties_password_yaml` - > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L78 in `bad_properties_sg_ingress_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_properties_sg_ingress_yaml` - > Resource 'mySecurityGroupNonVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L30 in `bad_properties_sg_ingress_yaml` - > Resource 'mySecurityGroupVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `Db` (AWS::RDS::DBInstance) → `Properties.Tags` L7 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` - > Resource 'Db' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_rds_public_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `IGW` (AWS::EC2::InternetGateway) → `Properties.Tags` L29 in `bad_redshift_internet_accessible_yaml` - > Resource 'IGW' of type 'AWS::EC2::InternetGateway' supports Tags but none are configured -- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `bad_redshift_internet_accessible_yaml` - > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured -- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `bad_redshift_internet_accessible_yaml` - > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `bad_redshift_internet_accessible_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_redshift_internet_accessible_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_refs_yaml` - > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_refs_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Policy` (AWS::KMS::Key) → `Properties.Tags` L5 in `bad_resource_policy_no_statement_yaml` - > Resource 'Policy' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L14 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L19 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L24 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L29 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L39 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L42 in `bad_resources_circular_dependency_2_yaml` - > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_dependson_yaml` - > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L7 in `bad_resources_circular_dependency_dependson_yaml` - > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L65 in `bad_resources_circular_dependency_yaml` - > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L52 in `bad_resources_circular_dependency_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstanceSub` (AWS::EC2::Instance) → `Properties.Tags` L215 in `bad_resources_circular_dependency_yaml` - > Resource 'myInstanceSub' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myKms` (AWS::KMS::Key) → `Properties.Tags` L155 in `bad_resources_circular_dependency_yaml` - > Resource 'myKms' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Tags` L99 in `bad_resources_circular_dependency_yaml` - > Resource 'myRoleToWriteToS3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L25 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L35 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L43 in `bad_resources_circular_dependency_yaml` - > Resource 'mySecurityGroupVpc3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Tags` L222 in `bad_resources_circular_dependency_yaml` - > Resource 'taskdefinition' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L16 in `bad_resources_cloudformation_stacks_yaml` - > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `bad_resources_cloudformation_stacks_yaml` - > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_resources_cloudfront_invalid_aliases_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `bad_resources_codepipeline_stages_second_stage_yaml` - > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_resources_creation_policy_unsupported_e3055_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_deletionpolicy_yaml` - > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_deletionpolicy_yaml` - > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_deletionpolicy_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_deletionpolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.Tags` L22 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'ConditionalGSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.Tags` L37 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'ConditionalLSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `MissingDefaultThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L12 in `bad_resources_dynamodb_conditional_scenarios_yaml` - > Resource 'MissingDefaultThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L23 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L82 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'DefaultValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L61 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L50 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'ExplicitValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L35 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > Resource 'NullThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` - > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `InvalidDriverInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L36 in `bad_resources_ecs_fargate_conditional_properties_yaml` - > Resource 'InvalidDriverInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `PlacementInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L15 in `bad_resources_ecs_fargate_conditional_properties_yaml` - > Resource 'PlacementInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L202 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'ConditionalEc2ThenFargateMissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L191 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'ConditionalFargateThenEc2MissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L133 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L161 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Tags` L147 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalMemory' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L175 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateConditionalPlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L37 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateMissingAll' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateNullCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L102 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L52 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargatePlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Tags` L70 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateUnsupportedLogDriver' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L22 in `bad_resources_ecs_fargate_properties_e3048_yaml` - > Resource 'FargateWrongNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L98 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'CpuInvalidThenValid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L111 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'CpuValidThenInvalid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L7 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'EightVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L59 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'MalformedCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L72 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'NonCanonicalCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L85 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'OverflowingMemoryUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L20 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'SixteenVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L33 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'ThirtyTwoVcpuUnsupportedSixtyFourGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L46 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - > Resource 'ThirtyTwoVcpuUnsupportedTwoFortyGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L36 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L91 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FourtReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L20 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L28 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L12 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L55 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L74 in `bad_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `RoleConditionalPolicies` (AWS::IAM::Role) → `Properties.Tags` L18 in `bad_resources_iam_iam_policy_conditional_policies_yaml` - > Resource 'RoleConditionalPolicies' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RoleNotActionConditional` (AWS::IAM::Role) → `Properties.Tags` L53 in `bad_resources_iam_iam_policy_conditional_policies_yaml` - > Resource 'RoleNotActionConditional' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIamRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `bad_resources_iam_iam_policy_yaml` - > Resource 'rIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Tags` L88 in `bad_resources_iam_identity_policy_e3510_yaml` - > Resource 'PermissionSetBadPolicy' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured -- **I9040** `UserInlinePolicy` (AWS::IAM::User) → `Properties.Tags` L101 in `bad_resources_iam_identity_policy_e3510_yaml` - > Resource 'UserInlinePolicy' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `bad_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `ecr1` (AWS::ECR::Repository) → `Properties.Tags` L6 in `bad_resources_iam_resource_policy_yaml` - > Resource 'ecr1' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `ecr2` (AWS::ECR::Repository) → `Properties.Tags` L19 in `bad_resources_iam_resource_policy_yaml` - > Resource 'ecr2' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L8 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.Tags` L18 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.Tags` L28 in `bad_resources_lambda_function_property_value_limits_yaml` - > Resource 'myLambdaFunction3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_resources_lambda_required_properties_yaml` - > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `my.Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_resources_name_yaml` - > Resource 'my.Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `my_Instance` (AWS::EC2::Instance) → `Properties.Tags` L9 in `bad_resources_name_yaml` - > Resource 'my_Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L142 in `bad_resources_primary_identifiers_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L149 in `bad_resources_primary_identifiers_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Project1` (AWS::CodeBuild::Project) → `Properties.Tags` L167 in `bad_resources_primary_identifiers_yaml` - > Resource 'Project1' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `Project2` (AWS::CodeBuild::Project) → `Properties.Tags` L187 in `bad_resources_primary_identifiers_yaml` - > Resource 'Project2' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L52 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole5` (AWS::IAM::Role) → `Properties.Tags` L98 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole6` (AWS::IAM::Role) → `Properties.Tags` L120 in `bad_resources_primary_identifiers_yaml` - > Resource 'RootRole6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ExampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_primitive_types_map_yaml` - > Resource 'ExampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ExampleLambda1` (AWS::Lambda::Function) → `Properties.Tags` L23 in `bad_resources_properties_primitive_types_map_yaml` - > Resource 'ExampleLambda1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L14 in `bad_resources_properties_string_size_yaml` - > Resource 'CloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `bad_resources_properties_string_size_yaml` - > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `myRepository2` (AWS::CodeCommit::Repository) → `Properties.Tags` L10 in `bad_resources_properties_string_size_yaml` - > Resource 'myRepository2' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `SampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_templated_code_yaml` - > Resource 'SampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L25 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance7' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Tags` L51 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance8' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Tags` L58 in `bad_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance9' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBCluster) → `Properties.Tags` L5 in `bad_resources_rds_not_enum_master_username_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_resources_sns_topic_name_yaml` - > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Name` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_resources_uniqueNames_yaml` - > Resource 'Name' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_resources_update_policy_unsupported_e3016_yaml` - > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_updatereplacepolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_s3_tiering_bad_days_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Cluster` (AWS::SageMaker::Cluster) → `Properties.Tags` L44 in `bad_sagemaker_instance_types_yaml` - > Resource 'Cluster' of type 'AWS::SageMaker::Cluster' supports Tags but none are configured -- **I9040** `InferenceExperiment` (AWS::SageMaker::InferenceExperiment) → `Properties.Tags` L22 in `bad_sagemaker_instance_types_yaml` - > Resource 'InferenceExperiment' of type 'AWS::SageMaker::InferenceExperiment' supports Tags but none are configured -- **I9040** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.Tags` L34 in `bad_sagemaker_instance_types_yaml` - > Resource 'ModelPackage' of type 'AWS::SageMaker::ModelPackage' supports Tags but none are configured -- **I9040** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.Tags` L14 in `bad_sagemaker_instance_types_yaml` - > Resource 'ModelQualityJobDefinition' of type 'AWS::SageMaker::ModelQualityJobDefinition' supports Tags but none are configured -- **I9040** `MonitoringSchedule` (AWS::SageMaker::MonitoringSchedule) → `Properties.Tags` L6 in `bad_sagemaker_instance_types_yaml` - > Resource 'MonitoringSchedule' of type 'AWS::SageMaker::MonitoringSchedule' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_bogus_name_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_wrong_date_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_additional_props_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NoAZ` (AWS::EC2::Volume) → `Properties.Tags` L13 in `bad_schema_composition_yaml` - > Resource 'NoAZ' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Tags` L6 in `bad_schema_composition_yaml` - > Resource 'NoImage' of type 'AWS::AppStream::ImageBuilder' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_schema_conditional_type_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_enum_violation_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_schema_format_violation_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.Tags` L36 in `bad_schema_lifecycle_yaml` - > Resource 'DeprecatedLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EolLambda` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_schema_lifecycle_yaml` - > Resource 'EolLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.Tags` L12 in `bad_schema_lifecycle_yaml` - > Resource 'SunsetResource' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_schema_numeric_bounds_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Tags` L21 in `bad_schema_property_constraints_yaml` - > Resource 'DeprecatedProp' of type 'AWS::Athena::WorkGroup' supports Tags but none are configured -- **I9040** `PatternBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_property_constraints_yaml` - > Resource 'PatternBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Lambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_schema_string_length_yaml` - > Resource 'Lambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AlarmBothStats` (AWS::CloudWatch::Alarm) → `Properties.Tags` L6 in `bad_schema_structural_yaml` - > Resource 'AlarmBothStats' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.Tags` L19 in `bad_schema_structural_yaml` - > Resource 'SubnetNoCidr' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_type_mismatch_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_security_issues_yaml` - > Resource 'OpenSSH' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_bad_port_range_yaml` - > Resource 'SG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_open_egress_yaml` - > Resource 'OpenSG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_simple_sub_param_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_sns_cross_account_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `bad_some_logs_stream_lambda_yaml` - > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `bad_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L80 in `bad_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_no_suffix_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DLQ` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_standard_dlq_yaml` - > Resource 'DLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `MainQueue` (AWS::SQS::Queue) → `Properties.Tags` L9 in `bad_sqs_fifo_standard_dlq_yaml` - > Resource 'MainQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `bad_ssm_document_invalid_yaml` - > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_bad_start_at_yaml` - > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachine` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_invalid_state_yaml` - > Resource 'StateMachine' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_sub_needed_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_sub_nested_intrinsic_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `OtherBucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_sub_nested_intrinsic_yaml` - > Resource 'OtherBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_outside_vpc_yaml` - > Resource 'SubnetOutside' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_outside_vpc_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L14 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetC` (AWS::EC2::Subnet) → `Properties.Tags` L26 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetC' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetD` (AWS::EC2::Subnet) → `Properties.Tags` L32 in `bad_subnet_overlap_multi_yaml` - > Resource 'SubnetD' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_subnet_overlap_multi_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_overlap_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `bad_subnet_overlap_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_overlap_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_undefined_condition_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_unknown_properties_yaml` - > Resource 'BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AppFunction` (AWS::Lambda::Function) → `Properties.Tags` L52 in `cdk_DemoStack.template_json` - > Resource 'AppFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AppRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_DemoStack.template_json` - > Resource 'AppRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L94 in `cdk_DemoStack.template_json` - > Resource 'AppSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DataBucket` (AWS::S3::Bucket) → `Properties.Tags` L40 in `cdk_DemoStack.template_json` - > Resource 'DataBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DataTable` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `cdk_DemoStack.template_json` - > Resource 'DataTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L126 in `cdk_DemoStack.template_json` - > Resource 'QueueMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `TaskQueue` (AWS::SQS::Queue) → `Properties.Tags` L117 in `cdk_DemoStack.template_json` - > Resource 'TaskQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Tags` L5 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'AdminSecretB9452750' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured -- **I9040** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.Tags` L68 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'ConsumerLambdaLogGroupD33C6265' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.Tags` L22 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'RabbitMqBrokerE7F26F68' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionBD0C2D50` (AWS::Lambda::Function) → `Properties.Tags` L165 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionBD0C2D50' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L201 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` (AWS::IAM::Role) → `Properties.Tags` L615 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` (AWS::Lambda::Function) → `Properties.Tags` L732 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` (AWS::Lambda::Function) → `Properties.Tags` L561 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` (AWS::IAM::Role) → `Properties.Tags` L437 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` (AWS::Lambda::Function) → `Properties.Tags` L900 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` (AWS::IAM::Role) → `Properties.Tags` L783 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1036 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` (AWS::IAM::Role) → `Properties.Tags` L951 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` (AWS::Lambda::Function) → `Properties.Tags` L402 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A` (AWS::IAM::Role) → `Properties.Tags` L344 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` (AWS::Lambda::Function) → `Properties.Tags` L309 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54` (AWS::IAM::Role) → `Properties.Tags` L229 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `consumerlambdaFunctionServiceRole095C1C28` (AWS::IAM::Role) → `Properties.Tags` L80 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` - > Resource 'consumerlambdaFunctionServiceRole095C1C28' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MasterBranch` (AWS::Amplify::Branch) → `Properties.Tags` L16 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Resource 'MasterBranch' of type 'AWS::Amplify::Branch' supports Tags but none are configured -- **I9040** `testapp` (AWS::Amplify::App) → `Properties.Tags` L5 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` - > Resource 'testapp' of type 'AWS::Amplify::App' supports Tags but none are configured -- **I9040** `createItemFunction8D47E48A` (AWS::Lambda::Function) → `Properties.Tags` L379 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'createItemFunction8D47E48A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `createItemFunctionServiceRole1BBF2178` (AWS::IAM::Role) → `Properties.Tags` L288 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'createItemFunctionServiceRole1BBF2178' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `deleteItemFunction2918B1B0` (AWS::Lambda::Function) → `Properties.Tags` L635 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'deleteItemFunction2918B1B0' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `deleteItemFunctionServiceRole5C201FCC` (AWS::IAM::Role) → `Properties.Tags` L544 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'deleteItemFunctionServiceRole5C201FCC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `getAllItemsFunction0B7A913E` (AWS::Lambda::Function) → `Properties.Tags` L251 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getAllItemsFunction0B7A913E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `getAllItemsFunctionServiceRoleCC084440` (AWS::IAM::Role) → `Properties.Tags` L160 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getAllItemsFunctionServiceRoleCC084440' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `getOneItemFunctionE3257B22` (AWS::Lambda::Function) → `Properties.Tags` L123 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getOneItemFunctionE3257B22' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `getOneItemFunctionServiceRoleCFD54796` (AWS::IAM::Role) → `Properties.Tags` L32 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'getOneItemFunctionServiceRoleCFD54796' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'items07D08F4B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemsApi28111E1C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L672 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApi28111E1C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `itemsApiCloudWatchRoleB5C7B431` (AWS::IAM::Role) → `Properties.Tags` L681 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApiCloudWatchRoleB5C7B431' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.Tags` L760 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'itemsApiDeploymentStageprodE77B897D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `updateItemFunction59415205` (AWS::Lambda::Function) → `Properties.Tags` L507 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'updateItemFunction59415205' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `updateItemFunctionServiceRole40035396` (AWS::IAM::Role) → `Properties.Tags` L416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` - > Resource 'updateItemFunctionServiceRole40035396' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayDynamoRole447127F0` (AWS::IAM::Role) → `Properties.Tags` L511 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'ApiGatewayDynamoRole447127F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigw3449931B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L164 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigw3449931B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwCloudWatchRoleC01BF930` (AWS::IAM::Role) → `Properties.Tags` L173 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwCloudWatchRoleC01BF930' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.Tags` L247 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwDeploymentStageprodAE3424CD' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `apigwasynclambdaapigwloggroup1E36CCD4` (AWS::Logs::LogGroup) → `Properties.Tags` L153 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdaapigwloggroup1E36CCD4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `apigwasynclambdafnAD6250E4` (AWS::Lambda::Function) → `Properties.Tags` L112 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnAD6250E4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `apigwasynclambdafnServiceRole607675A2` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnServiceRole607675A2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `apigwasynclambdafnloggroup3D262524` (AWS::Logs::LogGroup) → `Properties.Tags` L32 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdafnloggroup3D262524' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` - > Resource 'apigwasynclambdatable1075CD30' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L178 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L101 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `authenticationlambdaDD3A2252` (AWS::Lambda::Function) → `Properties.Tags` L242 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'authenticationlambdaDD3A2252' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `authenticationlambdaServiceRole9798A92B` (AWS::IAM::Role) → `Properties.Tags` L208 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'authenticationlambdaServiceRole9798A92B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `operationallambdaFE43E13E` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'operationallambdaFE43E13E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `operationallambdaServiceRole14B56EA5` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'operationallambdaServiceRole14B56EA5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.Tags` L447 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'restapigatewayDeploymentStagedevB80C9CD7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `restapigatewayE22E31C5` (AWS::ApiGateway::RestApi) → `Properties.Tags` L420 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` - > Resource 'restapigatewayE22E31C5' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L272 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L211 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction1A09FC241` (AWS::Lambda::Function) → `Properties.Tags` L111 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1A09FC241' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L86 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1SecurityGroupF7DF9E6F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdafunction1ServiceRoleA9EAFFE5` (AWS::IAM::Role) → `Properties.Tags` L37 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction1ServiceRoleA9EAFFE5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction2F899168D` (AWS::Lambda::Function) → `Properties.Tags` L376 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2F899168D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.Tags` L351 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2SecurityGroup7268045A' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `lambdafunction2ServiceRole380A1BE9` (AWS::IAM::Role) → `Properties.Tags` L302 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'lambdafunction2ServiceRole380A1BE9' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapi4C7BF186` (AWS::ApiGateway::RestApi) → `Properties.Tags` L658 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapi4C7BF186' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `myapiANYStartSyncExecutionRole7935C5BB` (AWS::IAM::Role) → `Properties.Tags` L759 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiANYStartSyncExecutionRole7935C5BB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapiCloudWatchRole095452E5` (AWS::IAM::Role) → `Properties.Tags` L668 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiCloudWatchRole095452E5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.Tags` L741 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'myapiDeploymentStagedevB1704B15' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L592 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'mystatemachine15ECA539' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `mystatemachineRole70AA91FD` (AWS::IAM::Role) → `Properties.Tags` L487 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'mystatemachineRole70AA91FD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `stepfunctionsloggroup6EBF6C71` (AWS::Logs::LogGroup) → `Properties.Tags` L476 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` - > Resource 'stepfunctionsloggroup6EBF6C71' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L5 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapi' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `chatappapiiamrole2977C2A3` (AWS::IAM::Role) → `Properties.Tags` L440 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapiiamrole2977C2A3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L690 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapistage' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'chatappapitable5244EF8B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `connectlambdaFFAE59F3` (AWS::Lambda::Function) → `Properties.Tags` L134 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'connectlambdaFFAE59F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `connectlambdaServiceRole04DCF570` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'connectlambdaServiceRole04DCF570' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `disconnectlambdaAC22A441` (AWS::Lambda::Function) → `Properties.Tags` L261 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'disconnectlambdaAC22A441' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `disconnectlambdaServiceRole2779F08C` (AWS::IAM::Role) → `Properties.Tags` L170 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'disconnectlambdaServiceRole2779F08C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `messagelambda16C1C2A3` (AWS::Lambda::Function) → `Properties.Tags` L404 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'messagelambda16C1C2A3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `messagelambdaServiceRole544EC18A` (AWS::IAM::Role) → `Properties.Tags` L297 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` - > Resource 'messagelambdaServiceRole544EC18A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L697 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L780 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBListener49E825B4' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L801 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBListenerTargetGroupF04FCF6D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L735 in `cdk_application-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CarApiCarsDataSourceServiceRole82F3FC8A` (AWS::IAM::Role) → `Properties.Tags` L107 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiCarsDataSourceServiceRole82F3FC8A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CarApiDefectsDataSourceServiceRole7EDF6907` (AWS::IAM::Role) → `Properties.Tags` L197 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiDefectsDataSourceServiceRole7EDF6907' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CarApiE5E7ACF5` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L81 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarApiE5E7ACF5' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'CarTableA597893A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.Tags` L32 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` - > Resource 'DefectsTable2A57950B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `AppSync2EventBridgeApi` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSync2EventBridgeApi' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `AppSyncEventBridgeRle2A25B9B1` (AWS::Events::Rule) → `Properties.Tags` L211 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSyncEventBridgeRle2A25B9B1' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `AppSyncEventBridgeRoleE2F34FE0` (AWS::IAM::Role) → `Properties.Tags` L44 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'AppSyncEventBridgeRoleE2F34FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `echoFunction5207BE9B` (AWS::Lambda::Function) → `Properties.Tags` L189 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'echoFunction5207BE9B' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `echoFunctionServiceRole1EBD6DF0` (AWS::IAM::Role) → `Properties.Tags` L155 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` - > Resource 'echoFunctionServiceRole1EBD6DF0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PostsApiCdk` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` - > Resource 'PostsApiCdk' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `Construct1FunctionWithReservedCEs6458B719` (AWS::Lambda::Function) → `Properties.Tags` L95 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1FunctionWithReservedCEs6458B719' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct1FunctionWithReservedCEsServiceRole21C8F977` (AWS::IAM::Role) → `Properties.Tags` L61 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1FunctionWithReservedCEsServiceRole21C8F977' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct1StandardFunctionD5361E84` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1StandardFunctionD5361E84' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct1StandardFunctionServiceRole716388BA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct1StandardFunctionServiceRole716388BA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct2FunctionWithReservedCEs89864BB2` (AWS::Lambda::Function) → `Properties.Tags` L209 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2FunctionWithReservedCEs89864BB2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct2FunctionWithReservedCEsServiceRoleB80261C4` (AWS::IAM::Role) → `Properties.Tags` L175 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2FunctionWithReservedCEsServiceRoleB80261C4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Construct2StandardFunction1EBDBFFA` (AWS::Lambda::Function) → `Properties.Tags` L152 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2StandardFunction1EBDBFFA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Construct2StandardFunctionServiceRole450FEF35` (AWS::IAM::Role) → `Properties.Tags` L118 in `cdk_aspects--SampleStack.template_json` - > Resource 'Construct2StandardFunctionServiceRole450FEF35' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` - > Resource 'IncomingDataBucket3554D835' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured -- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured -- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` - > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured -- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured -- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` - > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Role1ABCC5F0` (AWS::IAM::Role) → `Properties.Tags` L89 in `cdk_backup-s3--AwsBackupS3Stack.template_json` - > Resource 'Role1ABCC5F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchInstanceRole8DB66C4C` (AWS::IAM::Role) → `Properties.Tags` L620 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchInstanceRole8DB66C4C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchJobRole37A83758` (AWS::IAM::Role) → `Properties.Tags` L815 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchJobRole37A83758' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L567 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchSecurityGroup77EC865F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `BatchServiceRole57930367` (AWS::IAM::Role) → `Properties.Tags` L586 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'BatchServiceRole57930367' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L537 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L465 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionFAE645C8` (AWS::Lambda::Function) → `Properties.Tags` L1034 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionFAE645C8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.Tags` L1083 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionLogGroupF7938D09' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `JobSubmitterFunctionServiceRole55AD6E92` (AWS::IAM::Role) → `Properties.Tags` L972 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'JobSubmitterFunctionServiceRole55AD6E92' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L747 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPComputeEnvironment' of type 'AWS::Batch::ComputeEnvironment' supports Tags but none are configured -- **I9040** `OpenMPJobDefinition` (AWS::Batch::JobDefinition) → `Properties.Tags` L861 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPJobDefinition' of type 'AWS::Batch::JobDefinition' supports Tags but none are configured -- **I9040** `OpenMPJobQueue` (AWS::Batch::JobQueue) → `Properties.Tags` L797 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPJobQueue' of type 'AWS::Batch::JobQueue' supports Tags but none are configured -- **I9040** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.Tags` L849 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPLogGroup95FEB040' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` - > Resource 'OpenMPRepositoryAB8BB3BC' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L665 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L620 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` - > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L336 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Tags` L387 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'RequestFunction0B9B463A' of type 'AWS::CloudFront::Function' supports Tags but none are configured -- **I9040** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Tags` L402 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'ResponseFunctionB78A69CA' of type 'AWS::CloudFront::Function' supports Tags but none are configured -- **I9040** `SiteDistribution3FF9535D` (AWS::CloudFront::Distribution) → `Properties.Tags` L428 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` - > Resource 'SiteDistribution3FF9535D' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L1066 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2` (AWS::IAM::Role) → `Properties.Tags` L1032 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1640 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BlueTargetGroupF108EB01' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L2293 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipeline5EEC284B' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `BuildDeployPipelineArtifactsBucket5D4A76C1` (AWS::S3::Bucket) → `Properties.Tags` L2090 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineArtifactsBucket5D4A76C1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8` (AWS::KMS::Key) → `Properties.Tags` L2035 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965` (AWS::IAM::Role) → `Properties.Tags` L2708 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB` (AWS::IAM::Role) → `Properties.Tags` L2766 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineEventsRoleDE5B0F8F` (AWS::IAM::Role) → `Properties.Tags` L2584 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineEventsRoleDE5B0F8F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineRole3223E55F` (AWS::IAM::Role) → `Properties.Tags` L2171 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineRole3223E55F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0` (AWS::IAM::Role) → `Properties.Tags` L2471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1` (AWS::IAM::Role) → `Properties.Tags` L2650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildImage74257FD8` (AWS::CodeBuild::Project) → `Properties.Tags` L481 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildImage74257FD8' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `BuildImageRoleA9C72406` (AWS::IAM::Role) → `Properties.Tags` L265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildImageRoleA9C72406' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildLambda72E2A667` (AWS::Lambda::Function) → `Properties.Tags` L919 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildLambda72E2A667' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BuildLambdaServiceRole8FB6C033` (AWS::IAM::Role) → `Properties.Tags` L856 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildLambdaServiceRole8FB6C033' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BuildTestC9659529` (AWS::CodeBuild::Project) → `Properties.Tags` L813 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildTestC9659529' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `BuildTestRoleC332A422` (AWS::IAM::Role) → `Properties.Tags` L627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'BuildTestRoleC332A422' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.Tags` L1950 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroup58220FC8' of type 'AWS::CodeDeploy::DeploymentGroup' supports Tags but none are configured -- **I9040** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.Tags` L1941 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroupApplication13EFBDA6' of type 'AWS::CodeDeploy::Application' supports Tags but none are configured -- **I9040** `CodeDeployGroupServiceRole50553EBF` (AWS::IAM::Role) → `Properties.Tags` L1907 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'CodeDeployGroupServiceRole50553EBF' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L1767 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L1791 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1852 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefC6FB60B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateTaskDefExecutionRole272677A9` (AWS::IAM::Role) → `Properties.Tags` L207 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefExecutionRole272677A9' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskDefTaskRole0B257552` (AWS::IAM::Role) → `Properties.Tags` L99 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'FargateTaskDefTaskRole0B257552' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1661 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'GreenTargetGroupEEB2DF3E' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L1710 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'PublicAlb84330974' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L1748 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'PublicAlbAlbListener804C1B2779' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1682 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `imageRepo1D8A68AF` (AWS::ECR::Repository) → `Properties.Tags` L89 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'imageRepo1D8A68AF' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `repoBEC318EA` (AWS::CodeCommit::Repository) → `Properties.Tags` L5 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'repoBEC318EA' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0` (AWS::Events::Rule) → `Properties.Tags` L23 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` - > Resource 'repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `helloWorldFunction00C940B5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldFunction00C940B5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `helloWorldFunctionServiceRole8475DBF0` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldFunctionServiceRole8475DBF0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApi6825FB98` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApi6825FB98' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApiCloudWatchRole22367FBD` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApiCloudWatchRole22367FBD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.Tags` L148 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` - > Resource 'helloWorldLambdaRestApiDeploymentStageprod67DD79AF' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `MyBucketF68F3FF0` (AWS::S3::Bucket) → `Properties.Tags` L9 in `cdk_custom-logical-names--MyStack.template_json` - > Resource 'MyBucketF68F3FF0' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyTopic86869434` (AWS::SNS::Topic) → `Properties.Tags` L3 in `cdk_custom-logical-names--MyStack.template_json` - > Resource 'MyTopic86869434' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DemoResourceProviderframeworkonEventF8E49AD2` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceProviderframeworkonEventF8E49AD2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DemoResourceProviderframeworkonEventServiceRoleDB88154F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceProviderframeworkonEventServiceRoleDB88154F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L190 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L156 in `cdk_custom-resource--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DemoResourceMyProviderframeworkonEvent65F24A35` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceMyProviderframeworkonEvent65F24A35' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DemoResourceMyProviderframeworkonEventServiceRole1437DF1C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'DemoResourceMyProviderframeworkonEventServiceRole1437DF1C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L300 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L239 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L216 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L182 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` - > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.Tags` L67 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'ddbstreaml2dlq5966ED66' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'ddbstreamtopic7821AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.Tags` L80 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableBAC64D83' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunction1987B4C5` (AWS::Lambda::Function) → `Properties.Tags` L206 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunction1987B4C5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L246 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `itemL2TableLambdaFunctionServiceRole41583A05` (AWS::IAM::Role) → `Properties.Tags` L109 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL2TableLambdaFunctionServiceRole41583A05' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.Tags` L499 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableDynamoTable6BC36F24' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunction7B818C58` (AWS::Lambda::Function) → `Properties.Tags` L412 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunction7B818C58' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L467 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `itemL3TableLambdaFunctionServiceRoleBA21B37D` (AWS::IAM::Role) → `Properties.Tags` L278 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableLambdaFunctionServiceRoleBA21B37D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `itemL3TableSqsDlqQueueD3C251B9` (AWS::SQS::Queue) → `Properties.Tags` L536 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` - > Resource 'itemL3TableSqsDlqQueueD3C251B9' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` (AWS::Lambda::Function) → `Properties.Tags` L911 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1` (AWS::IAM::Role) → `Properties.Tags` L788 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L747 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L722 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'EC2ec2InstanceSecurityGroupD268D496' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `EC2serverEc2Role6775A3D4` (AWS::IAM::Role) → `Properties.Tags` L405 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'EC2serverEc2Role6775A3D4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_ec2-instance--EC2Example.template_json` - > Resource 'VPCSSHSecurityGroup0495A24F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkisCompleteB1442B18` (AWS::Lambda::Function) → `Properties.Tags` L748 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkisCompleteB1442B18' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51` (AWS::IAM::Role) → `Properties.Tags` L631 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonEventB48896C9` (AWS::Lambda::Function) → `Properties.Tags` L577 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonEventB48896C9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonEventServiceRoleC0D29A73` (AWS::IAM::Role) → `Properties.Tags` L453 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonEventServiceRoleC0D29A73' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonTimeout83318112` (AWS::Lambda::Function) → `Properties.Tags` L916 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonTimeout83318112' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointProviderframeworkonTimeoutServiceRole904320AB` (AWS::IAM::Role) → `Properties.Tags` L799 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderframeworkonTimeoutServiceRole904320AB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointProviderwaiterstatemachine1A139B58` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1052 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderwaiterstatemachine1A139B58' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `EICEndpointProviderwaiterstatemachineRole5E284D23` (AWS::IAM::Role) → `Properties.Tags` L967 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointProviderwaiterstatemachineRole5E284D23' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointRole7DC4D43E` (AWS::IAM::Role) → `Properties.Tags` L291 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointRole7DC4D43E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EICEndpointisCompleteHandler0273707A` (AWS::Lambda::Function) → `Properties.Tags` L425 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointisCompleteHandler0273707A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EICEndpointonEventHandlerC2E1F5F2` (AWS::Lambda::Function) → `Properties.Tags` L397 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` - > Resource 'EICEndpointonEventHandlerC2E1F5F2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.Tags` L689 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Resource 'AsgCapacityProvider760D11D9' of type 'AWS::ECS::CapacityProvider' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L664 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` - > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` - > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L191 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'Listener828B0E81' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L212 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ListenerECSGroup2EA4A011' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L121 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L58 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerListenerE1A099B9' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L79 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` - > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L119 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Tags` L1111 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'Ec2Service04A33183' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L1049 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L1059 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `awsvpcecsdemoclusterA7FD8C86` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'awsvpcecsdemoclusterA7FD8C86' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Tags` L1078 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'awsvpcecsdemoserviceServiceFC4BE5C7' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1048 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginx76230F353007' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginxawspvcB396AC00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `nginxawspvcTaskRole3F43A26E` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` - > Resource 'nginxawspvcTaskRole3F43A26E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L1040 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` - > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Tags` L727 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceECC8084D' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBB353E155' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L554 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBPublicListener4B4929CA' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L575 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBPublicListenerECSGroupBE57E081' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.Tags` L509 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceLBSecurityGroup5F444C78' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.Tags` L788 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceSecurityGroup262B61DD' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Tags` L615 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDef940E3A80' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefExecutionRole9194820E` (AWS::IAM::Role) → `Properties.Tags` L675 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefExecutionRole9194820E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefTaskRole8CDCF85E` (AWS::IAM::Role) → `Properties.Tags` L595 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefTaskRole8CDCF85E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateServiceTaskDefwebLogGroup71FAF541` (AWS::Logs::LogGroup) → `Properties.Tags` L665 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` - > Resource 'FargateServiceTaskDefwebLogGroup71FAF541' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `fargateserviceautoscalingD107CF93` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'fargateserviceautoscalingD107CF93' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBBDE1D276' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L501 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBPublicListenerC4DF6480' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L522 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappLBPublicListenerECSGroup525A567D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Tags` L668 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappServiceE7504FDB' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.Tags` L729 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappServiceSecurityGroup0ABF0D21' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Tags` L556 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDef6BF75736' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `sampleappTaskDefExecutionRoleAD6F4C40` (AWS::IAM::Role) → `Properties.Tags` L616 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefExecutionRoleAD6F4C40' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sampleappTaskDefTaskRoleB530CAC0` (AWS::IAM::Role) → `Properties.Tags` L536 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefTaskRoleB530CAC0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sampleappTaskDefwebLogGroup34BE8C79` (AWS::Logs::LogGroup) → `Properties.Tags` L606 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` - > Resource 'sampleappTaskDefwebLogGroup34BE8C79' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L597 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L646 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L535 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L545 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L491 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` - > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L118 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L87 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L29 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TopicBFC7AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` - > Resource 'TopicBFC7AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ProxyAPI32755B5A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L5 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPI32755B5A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ProxyAPICloudWatchRoleB8A087D1` (AWS::IAM::Role) → `Properties.Tags` L19 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPICloudWatchRoleB8A087D1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.Tags` L92 in `cdk_http-proxy-apigateway--HttpProxy.template_json` - > Resource 'ProxyAPIDeploymentStageprodBE6BE99F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Tags` L220 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'AmazonLinux2023WithGitPipeline' of type 'AWS::ImageBuilder::ImagePipeline' supports Tags but none are configured -- **I9040** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Tags` L49 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'AmazonLinux2023withGitAndNodeRecipe' of type 'AWS::ImageBuilder::ContainerRecipe' supports Tags but none are configured -- **I9040** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L29 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'DockerComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `EC2InstanceProfileForImageBuilderA043DE9F` (AWS::IAM::Role) → `Properties.Tags` L105 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'EC2InstanceProfileForImageBuilderA043DE9F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcrRepoForImageBuilderCodeCatalystBF634BA6` (AWS::ECR::Repository) → `Properties.Tags` L39 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'EcrRepoForImageBuilderCodeCatalystBF634BA6' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L5 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'GitComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Tags` L196 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'ImageBuilderDistConfig' of type 'AWS::ImageBuilder::DistributionConfiguration' supports Tags but none are configured -- **I9040** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Tags` L184 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'ImageBuilderInfraConfig' of type 'AWS::ImageBuilder::InfrastructureConfiguration' supports Tags but none are configured -- **I9040** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L17 in `cdk_imagebuilder--ImagebuilderStack.template_json` - > Resource 'NodejsComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L212 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606` (AWS::IAM::Role) → `Properties.Tags` L52 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L329 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L71 in `cdk_inspector2--Inspector2EnableStack.template_json` - > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `EnableInspector2ResourceInspectorRole75753456` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableStack.template_json` - > Resource 'EnableInspector2ResourceInspectorRole75753456' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2FindingHandler1F85FFBC` (AWS::Lambda::Function) → `Properties.Tags` L330 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2FindingHandler1F85FFBC' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2FindingHandlerServiceRoleCEDAFBC1` (AWS::IAM::Role) → `Properties.Tags` L296 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2FindingHandlerServiceRoleCEDAFBC1' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2InitialScanHandler460C9991` (AWS::Lambda::Function) → `Properties.Tags` L150 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2InitialScanHandler460C9991' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Inspector2InitialScanHandlerServiceRoleA1739B7A` (AWS::IAM::Role) → `Properties.Tags` L116 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2InitialScanHandlerServiceRoleA1739B7A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Inspector2MonitoringfindingScanRuleC84833CE` (AWS::Events::Rule) → `Properties.Tags` L61 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2MonitoringfindingScanRuleC84833CE' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Inspector2MonitoringinitialScanRule902E013C` (AWS::Events::Rule) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'Inspector2MonitoringinitialScanRule902E013C' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L266 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_inspector2--Inspector2MonitoringStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L219 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L158 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleLambdaB2FF4FA1` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaB2FF4FA1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L94 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaDashboard39118496' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured -- **I9040** `SampleLambdaServiceRoleB1A8618F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` - > Resource 'SampleLambdaServiceRoleB1A8618F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cron--LambdaCronExample.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionBF21E41F` (AWS::Lambda::Function) → `Properties.Tags` L62 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Resource 'LambdaFunctionBF21E41F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionServiceRoleC555A460` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_lambda-layer--LambdaLayerStack.template_json` - > Resource 'LambdaFunctionServiceRoleC555A460' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleQueue49AAAEFF` (AWS::SQS::Queue) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` - > Resource 'SampleQueue49AAAEFF' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SampleTopic5FE9B5DC` (AWS::SNS::Topic) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` - > Resource 'SampleTopic5FE9B5DC' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.Tags` L80 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'S3EventNotificationsLambda20F17D80' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `S3EventNotificationsLambdaServiceRoleD45D5063` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'S3EventNotificationsLambdaServiceRoleD45D5063' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleBucket7F6F8160` (AWS::S3::Bucket) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` - > Resource 'SampleBucket7F6F8160' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `WidgetsWidgetHandler1BC9DB34` (AWS::Lambda::Function) → `Properties.Tags` L103 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetHandler1BC9DB34' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `WidgetsWidgetHandlerServiceRole8C2B589C` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetHandlerServiceRole8C2B589C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WidgetsWidgetStore0ED7FDB7` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetsWidgetStore0ED7FDB7' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Widgetswidgetsapi72353315` (AWS::ApiGateway::RestApi) → `Properties.Tags` L139 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'Widgetswidgetsapi72353315' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `WidgetswidgetsapiCloudWatchRole8C2A5801` (AWS::IAM::Role) → `Properties.Tags` L149 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetswidgetsapiCloudWatchRole8C2A5801' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.Tags` L224 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` - > Resource 'WidgetswidgetsapiDeploymentStageprod0D8CD1B7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.Tags` L86 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.Tags` L14 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'BigFanTopicStatusCreatedSubscriberQueue589E974E' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L716 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandler4037E293' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB` (AWS::IAM::Role) → `Properties.Tags` L308 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L437 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none -- **I9040** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` (AWS::Lambda::Function) → `Properties.Tags` L231 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandler0467DB95' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A` (AWS::IAM::Role) → `Properties.Tags` L162 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L291 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none ar -- **I9040** `theBigFanAPI6E21715A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L454 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPI6E21715A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `theBigFanAPICloudWatchRoleD603B41E` (AWS::IAM::Role) → `Properties.Tags` L463 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPICloudWatchRoleD603B41E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.Tags` L532 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanAPIDeploymentStageprod1F15C9DC' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `theBigFanTopicF96567DE` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` - > Resource 'theBigFanTopicF96567DE' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `APIGateway4XXErrors1647FE3DB` (AWS::CloudWatch::Alarm) → `Properties.Tags` L285 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIGateway4XXErrors1647FE3DB' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `APIGateway5XXErrors0A91D7B4E` (AWS::CloudWatch::Alarm) → `Properties.Tags` L354 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIGateway5XXErrors0A91D7B4E' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `APIp99latencyalarm1s67095ACE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L385 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'APIp99latencyalarm1s67095ACE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudWatchDashBoard043C60B6` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L900 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'CloudWatchDashBoard043C60B6' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured -- **I9040** `DynamoDBErrors0FA6C66C9` (AWS::CloudWatch::Alarm) → `Properties.Tags` L641 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoDBErrors0FA6C66C9' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoDBTableReadsWritesThrottled13F6F2AE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L576 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoDBTableReadsWritesThrottled13F6F2AE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambda2ErrorDE3BEB2F` (AWS::CloudWatch::Alarm) → `Properties.Tags` L416 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambda2ErrorDE3BEB2F' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambda2Throttled090CFA4C` (AWS::CloudWatch::Alarm) → `Properties.Tags` L511 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambda2Throttled090CFA4C' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoLambdap99LongDuration1s739ED568` (AWS::CloudWatch::Alarm) → `Properties.Tags` L481 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'DynamoLambdap99LongDuration1s739ED568' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L174 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HttpAPI8D545486' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L266 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'HttpAPIDefaultStage1BC7D78F' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `errorTopicE59AB483` (AWS::SNS::Topic) → `Properties.Tags` L277 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` - > Resource 'errorTopicE59AB483' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ApiGatewaySnsRole904B65D6` (AWS::IAM::Role) → `Properties.Tags` L777 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'ApiGatewaySnsRole904B65D6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Tags` L5 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'DestinedEventBus14820B65' of type 'AWS::Events::EventBus' supports Tags but none are configured -- **I9040** `FailureLambdaHandlerBB58C051` (AWS::Lambda::Function) → `Properties.Tags` L400 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'FailureLambdaHandlerBB58C051' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FailureLambdaHandlerServiceRole7E0414CB` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'FailureLambdaHandlerServiceRole7E0414CB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SuccessLambdaHandler0E2CD797` (AWS::Lambda::Function) → `Properties.Tags` L243 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'SuccessLambdaHandler0E2CD797' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SuccessLambdaHandlerServiceRole77BD70C4` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'SuccessLambdaHandlerServiceRole77BD70C4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `destinedLambda8DF776BB` (AWS::Lambda::Function) → `Properties.Tags` L81 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'destinedLambda8DF776BB' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `destinedLambdaServiceRole87608B6F` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'destinedLambdaServiceRole87608B6F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.Tags` L460 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'failureRule10D0B2E4' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.Tags` L303 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'successRuleE9E88056' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPIBAB2789B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L515 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPIBAB2789B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPICloudWatchRoleCDF408DA` (AWS::IAM::Role) → `Properties.Tags` L524 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPICloudWatchRoleCDF408DA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.Tags` L593 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaAPIDeploymentStageprodD67BDFB2' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `theDestinedLambdaTopic8F2C8FB6` (AWS::SNS::Topic) → `Properties.Tags` L14 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` - > Resource 'theDestinedLambdaTopic8F2C8FB6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L444 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoStreamerAPICA573C81` (AWS::ApiGateway::RestApi) → `Properties.Tags` L185 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPICA573C81' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `DynamoStreamerAPICloudWatchRoleEF2543E3` (AWS::IAM::Role) → `Properties.Tags` L194 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPICloudWatchRoleEF2543E3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.Tags` L263 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'DynamoStreamerAPIDeploymentStageprod0700648B' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'TheDynamoStreamer641C5E5B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerD2AAE139` (AWS::Lambda::Function) → `Properties.Tags` L106 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerD2AAE139' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L166 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47` (AWS::IAM::Role) → `Properties.Tags` L34 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` - > Resource 'dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L581 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L649 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L572 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaC3C4DA46` (AWS::Lambda::Function) → `Properties.Tags` L157 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaC3C4DA46' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaRuleC1D6BC2F` (AWS::Events::Rule) → `Properties.Tags` L216 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaRuleC1D6BC2F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer1LambdaServiceRole70132707` (AWS::IAM::Role) → `Properties.Tags` L123 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer1LambdaServiceRole70132707' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaB7E263A7` (AWS::Lambda::Function) → `Properties.Tags` L306 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaB7E263A7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaRule5894DC8E` (AWS::Events::Rule) → `Properties.Tags` L365 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaRule5894DC8E' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer2LambdaServiceRole130B888D` (AWS::IAM::Role) → `Properties.Tags` L272 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer2LambdaServiceRole130B888D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmConsumer3Lambda880BEEDF` (AWS::Lambda::Function) → `Properties.Tags` L456 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3Lambda880BEEDF' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmConsumer3LambdaRule41A00643` (AWS::Events::Rule) → `Properties.Tags` L515 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3LambdaRule41A00643' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `atmConsumer3LambdaServiceRoleCF9BAEA7` (AWS::IAM::Role) → `Properties.Tags` L422 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmConsumer3LambdaServiceRoleCF9BAEA7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `atmProducerLambda71029F8F` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmProducerLambda71029F8F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `atmProducerLambdaServiceRoleEF3D6079` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` - > Resource 'atmProducerLambdaServiceRoleEF3D6079' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreaker4FAEA3DB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L436 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayCloudWatchRole934DF897` (AWS::IAM::Role) → `Properties.Tags` L445 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayCloudWatchRole934DF897' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.Tags` L513 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayDeploymentStageprod84F6B9E5' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `ErrorLambdaHandler4224322A` (AWS::Lambda::Function) → `Properties.Tags` L312 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'ErrorLambdaHandler4224322A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ErrorLambdaHandlerServiceRole5D9F8D61` (AWS::IAM::Role) → `Properties.Tags` L228 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'ErrorLambdaHandlerServiceRole5D9F8D61' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WebserviceIntegrationLambdaHandler5E349AB7` (AWS::Lambda::Function) → `Properties.Tags` L160 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'WebserviceIntegrationLambdaHandler5E349AB7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `WebserviceIntegrationLambdaHandlerServiceRole851361F8` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'WebserviceIntegrationLambdaHandlerServiceRole851361F8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `webserviceErrorRuleCE293636` (AWS::Events::Rule) → `Properties.Tags` L380 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` - > Resource 'webserviceErrorRuleCE293636' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L662 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Tags` L744 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinition8E3B365E' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionAppContainerLogGroup20407D7C` (AWS::Logs::LogGroup) → `Properties.Tags` L820 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionAppContainerLogGroup20407D7C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionExecutionRoleE69A8E33` (AWS::IAM::Role) → `Properties.Tags` L831 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionExecutionRoleE69A8E33' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskDefinitionTaskRoleE3C2BCAA` (AWS::IAM::Role) → `Properties.Tags` L670 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'FargateTaskDefinitionTaskRoleE3C2BCAA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LandingBucket23FE90FB` (AWS::S3::Bucket) → `Properties.Tags` L29 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LandingBucket23FE90FB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LoadLambdaHandlerFDA03D53` (AWS::Lambda::Function) → `Properties.Tags` L1380 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LoadLambdaHandlerFDA03D53' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LoadLambdaHandlerServiceRole83E61748` (AWS::IAM::Role) → `Properties.Tags` L1296 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'LoadLambdaHandlerServiceRole83E61748' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ObserveLambdaHandler685FFDBB` (AWS::Lambda::Function) → `Properties.Tags` L1539 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'ObserveLambdaHandler685FFDBB' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ObserveLambdaHandlerServiceRole040C69BA` (AWS::IAM::Role) → `Properties.Tags` L1505 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'ObserveLambdaHandlerServiceRole040C69BA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TransformLambdaHandler60ABE8EE` (AWS::Lambda::Function) → `Properties.Tags` L1178 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformLambdaHandler60ABE8EE' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TransformLambdaHandlerServiceRole710C039E` (AWS::IAM::Role) → `Properties.Tags` L1120 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformLambdaHandlerServiceRole710C039E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'TransformedDataB0572681' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `extractLambdaHandlerD06B8F09` (AWS::Lambda::Function) → `Properties.Tags` L1015 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerD06B8F09' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `extractLambdaHandlerServiceRole8A50F829` (AWS::IAM::Role) → `Properties.Tags` L916 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerServiceRole8A50F829' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L1103 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `loadRuleF0FAF418` (AWS::Events::Rule) → `Properties.Tags` L1449 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'loadRuleF0FAF418' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `newObjectInLandingBucketEventQueue67CBE2F2` (AWS::SQS::Queue) → `Properties.Tags` L75 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'newObjectInLandingBucketEventQueue67CBE2F2' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `observeRule9CF2E16C` (AWS::Events::Rule) → `Properties.Tags` L1599 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'observeRule9CF2E16C' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `transformRuleFEA34632` (AWS::Events::Rule) → `Properties.Tags` L1240 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` - > Resource 'transformRuleFEA34632' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerGatewayDefaultStageC51956FB' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'CircuitBreakerTable02DAD2B8' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `UnreliableLambdaHandlerD4A4DED9` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'UnreliableLambdaHandlerD4A4DED9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `UnreliableLambdaHandlerServiceRole955A5CFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` - > Resource 'UnreliableLambdaHandlerServiceRole955A5CFD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BookingSagaFA991213` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1337 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingSagaFA991213' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `BookingSagaRole82982544` (AWS::IAM::Role) → `Properties.Tags` L1207 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingSagaRole82982544' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'BookingsB1C24132' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `SagaPatternSingleTable288D85B3` (AWS::ApiGateway::RestApi) → `Properties.Tags` L1554 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTable288D85B3' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `SagaPatternSingleTableCloudWatchRole130684F0` (AWS::IAM::Role) → `Properties.Tags` L1563 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTableCloudWatchRole130684F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.Tags` L1631 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'SagaPatternSingleTableDeploymentStageprod92F0690D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `cancelFlightLambdaHandler437EEC76` (AWS::Lambda::Function) → `Properties.Tags` L410 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelFlightLambdaHandler437EEC76' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `cancelFlightLambdaHandlerServiceRole7F2439CB` (AWS::IAM::Role) → `Properties.Tags` L331 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelFlightLambdaHandlerServiceRole7F2439CB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `cancelHotelLambdaHandler09F13EF6` (AWS::Lambda::Function) → `Properties.Tags` L848 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelHotelLambdaHandler09F13EF6' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `cancelHotelLambdaHandlerServiceRole4815D152` (AWS::IAM::Role) → `Properties.Tags` L769 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'cancelHotelLambdaHandlerServiceRole4815D152' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `confirmFlightLambdaHandler96C3663F` (AWS::Lambda::Function) → `Properties.Tags` L264 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmFlightLambdaHandler96C3663F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `confirmFlightLambdaHandlerServiceRole45F91B6E` (AWS::IAM::Role) → `Properties.Tags` L185 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmFlightLambdaHandlerServiceRole45F91B6E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `confirmHotelLambdaHandler882ACF2D` (AWS::Lambda::Function) → `Properties.Tags` L702 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmHotelLambdaHandler882ACF2D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `confirmHotelLambdaHandlerServiceRoleD5F8F90E` (AWS::IAM::Role) → `Properties.Tags` L623 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'confirmHotelLambdaHandlerServiceRoleD5F8F90E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `refundPaymentLambdaHandler932D11D5` (AWS::Lambda::Function) → `Properties.Tags` L1140 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'refundPaymentLambdaHandler932D11D5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `refundPaymentLambdaHandlerServiceRole62F72F0D` (AWS::IAM::Role) → `Properties.Tags` L1061 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'refundPaymentLambdaHandlerServiceRole62F72F0D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `reserveFlightLambdaHandler3C75473D` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveFlightLambdaHandler3C75473D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `reserveFlightLambdaHandlerServiceRole985C586D` (AWS::IAM::Role) → `Properties.Tags` L39 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveFlightLambdaHandlerServiceRole985C586D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `reserveHotelLambdaHandler020AE24A` (AWS::Lambda::Function) → `Properties.Tags` L556 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveHotelLambdaHandler020AE24A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `reserveHotelLambdaHandlerServiceRole452F23B7` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'reserveHotelLambdaHandlerServiceRole452F23B7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sagaLambdaHandlerFC24742F` (AWS::Lambda::Function) → `Properties.Tags` L1487 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'sagaLambdaHandlerFC24742F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sagaLambdaHandlerServiceRole7EB685BD` (AWS::IAM::Role) → `Properties.Tags` L1427 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'sagaLambdaHandlerServiceRole7EB685BD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `takePaymentLambdaHandlerB96529D4` (AWS::Lambda::Function) → `Properties.Tags` L994 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'takePaymentLambdaHandlerB96529D4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `takePaymentLambdaHandlerServiceRole56CA2808` (AWS::IAM::Role) → `Properties.Tags` L915 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` - > Resource 'takePaymentLambdaHandlerServiceRole56CA2808' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L434 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L357 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'Messages804FA4EB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `RDSPublishQueue2BEA1A7F` (AWS::SQS::Queue) → `Properties.Tags` L31 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'RDSPublishQueue2BEA1A7F' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SQSPublishLambdaHandler51EE31BE` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSPublishLambdaHandler51EE31BE' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSPublishLambdaHandlerServiceRole4F9A1044` (AWS::IAM::Role) → `Properties.Tags` L40 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSPublishLambdaHandlerServiceRole4F9A1044' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerBBB58615` (AWS::Lambda::Function) → `Properties.Tags` L269 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerBBB58615' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerServiceRoleB6261F09` (AWS::IAM::Role) → `Properties.Tags` L174 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerServiceRoleB6261F09' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L340 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` - > Resource 'SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'RequestTableC81DB378' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `scheduledLambda8A84450D` (AWS::Lambda::Function) → `Properties.Tags` L104 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambda8A84450D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `scheduledLambdaServiceRoleB98DFEFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambdaServiceRoleB98DFEFD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `scheduledLambdaschedule99960653` (AWS::Events::Rule) → `Properties.Tags` L171 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` - > Resource 'scheduledLambdaschedule99960653' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `ApiApiLogsRole90293F72` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiApiLogsRole90293F72' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiCustomerServiceRole28709567` (AWS::IAM::Role) → `Properties.Tags` L90 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiCustomerServiceRole28709567' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiF70053CD` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L39 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiF70053CD' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `ApiLoyaltyServiceRole2B487CD2` (AWS::IAM::Role) → `Properties.Tags` L329 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'ApiLoyaltyServiceRole2B487CD2' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.Tags` L446 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'CustomerTable260DCC08' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LoyaltyLambdaHandler5918F0DA` (AWS::Lambda::Function) → `Properties.Tags` L503 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'LoyaltyLambdaHandler5918F0DA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LoyaltyLambdaHandlerServiceRole62E814E8` (AWS::IAM::Role) → `Properties.Tags` L469 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` - > Resource 'LoyaltyLambdaHandlerServiceRole62E814E8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'EndpointDefaultStage0AD21F27' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `HttpApiRole79B5C31A` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'HttpApiRole79B5C31A' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L168 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L98 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `pineappleCheckLambdaHandlerFDB742D5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'pineappleCheckLambdaHandlerFDB742D5' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `pineappleCheckLambdaHandlerServiceRoleFC4E3211` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'pineappleCheckLambdaHandlerServiceRoleFC4E3211' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L242 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'thestatemachineapi69C81CC4' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured -- **I9040** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L252 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` - > Resource 'thestatemachineapiDefaultStageE23A2C15' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured -- **I9040** `HelloWorldHandler30C22324` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'HelloWorldHandler30C22324' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `HelloWorldHandlerServiceRole56E6BFBA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'HelloWorldHandlerServiceRole56E6BFBA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WafGatewayAPI5BA7C2CE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L98 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPI5BA7C2CE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `WafGatewayAPICloudWatchRoleEE79D232` (AWS::IAM::Role) → `Properties.Tags` L112 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPICloudWatchRoleEE79D232' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.Tags` L179 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` - > Resource 'WafGatewayAPIDeploymentStageprodEF5FA49F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` - > Resource 'WebACL' of type 'AWS::WAFv2::WebACL' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` - > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `httpLambdaHandler66D9C9A8` (AWS::Lambda::Function) → `Properties.Tags` L66 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Resource 'httpLambdaHandler66D9C9A8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `httpLambdaHandlerServiceRole01D49A7D` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` - > Resource 'httpLambdaHandlerServiceRole01D49A7D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Queue4A7E3555` (AWS::SQS::Queue) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'Queue4A7E3555' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `sqsLambdaHandler0DD5DF9B` (AWS::Lambda::Function) → `Properties.Tags` L89 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsLambdaHandler0DD5DF9B' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sqsLambdaHandlerServiceRole2F57B7B5` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsLambdaHandlerServiceRole2F57B7B5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerD66392B8` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerD66392B8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerServiceRole8F070FD3` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerServiceRole8F070FD3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L349 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` - > Resource 'sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `TheXRayTracerSnsTopicCCE2005E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'TheXRayTracerSnsTopicCCE2005E' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `snsLambdaHandlerE7B0ABE3` (AWS::Lambda::Function) → `Properties.Tags` L82 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsLambdaHandlerE7B0ABE3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `snsLambdaHandlerServiceRole7F428B88` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsLambdaHandlerServiceRole7F428B88' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `snsSubscriptionLambdaHandler68619CD8` (AWS::Lambda::Function) → `Properties.Tags` L263 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsSubscriptionLambdaHandler68619CD8' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `snsSubscriptionLambdaHandlerServiceRole215E543C` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` - > Resource 'snsSubscriptionLambdaHandlerServiceRole215E543C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewaySNSRole1BAAAE75` (AWS::IAM::Role) → `Properties.Tags` L374 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'ApiGatewaySNSRole1BAAAE75' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TheXRayTracerSnsFanOutTopicDE7E70F8` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'TheXRayTracerSnsFanOutTopicDE7E70F8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `xrayTracerAPIA84CAE80` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPIA84CAE80' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `xrayTracerAPICloudWatchRoleCCB113F4` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPICloudWatchRoleCCB113F4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.Tags` L93 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` - > Resource 'xrayTracerAPIDeploymentStageprod85442A48' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `ApiCorsLambda5083F55F` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiCorsLambda5083F55F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `ApiCorsLambdaServiceRole0DB39061` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiCorsLambdaServiceRole0DB39061' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayWithCors6DE4076F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCors6DE4076F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ApiGatewayWithCorsCloudWatchRole9C3700F0` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCorsCloudWatchRole9C3700F0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.Tags` L149 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` - > Resource 'ApiGatewayWithCorsDeploymentStageprod7F1DD875' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumer52DC1403` (AWS::ApiGateway::RestApi) → `Properties.Tags` L485 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumer52DC1403' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E` (AWS::IAM::Role) → `Properties.Tags` L494 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.Tags` L566 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `consumer3firehose` (AWS::KinesisFirehose::DeliveryStream) → `Properties.Tags` L375 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'consumer3firehose' of type 'AWS::KinesisFirehose::DeliveryStream' supports Tags but none are configured -- **I9040** `consumer3firehoseEventsRoleECB13871` (AWS::IAM::Role) → `Properties.Tags` L401 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'consumer3firehoseEventsRoleECB13871' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer1Lambda4AF2292E` (AWS::Lambda::Function) → `Properties.Tags` L126 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1Lambda4AF2292E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventConsumer1LambdaRule288E5FF9` (AWS::Events::Rule) → `Properties.Tags` L154 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1LambdaRule288E5FF9' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventConsumer1LambdaServiceRoleC8CCBFC5` (AWS::IAM::Role) → `Properties.Tags` L92 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer1LambdaServiceRoleC8CCBFC5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer2Lambda1631C47A` (AWS::Lambda::Function) → `Properties.Tags` L236 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2Lambda1631C47A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventConsumer2LambdaRule54312CB1` (AWS::Events::Rule) → `Properties.Tags` L264 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2LambdaRule54312CB1' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventConsumer2LambdaServiceRole6B878884` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer2LambdaServiceRole6B878884' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `eventConsumer3KinesisRuleB8D02F6F` (AWS::Events::Rule) → `Properties.Tags` L453 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventConsumer3KinesisRuleB8D02F6F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `eventProducerLambda100D549C` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventProducerLambda100D549C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `eventProducerLambdaServiceRoleD019EB99` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'eventProducerLambdaServiceRoleD019EB99' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myRoleE60D68E8` (AWS::IAM::Role) → `Properties.Tags` L320 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'myRoleE60D68E8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `testngestbucketD7155299` (AWS::S3::Bucket) → `Properties.Tags` L310 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` - > Resource 'testngestbucketD7155299' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ApiGW45519054` (AWS::ApiGateway::RestApi) → `Properties.Tags` L47 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGW45519054' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ApiGWCloudWatchRole51A9A431` (AWS::IAM::Role) → `Properties.Tags` L56 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGWCloudWatchRole51A9A431' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.Tags` L129 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'ApiGWDeploymentStageprodDFD8EC11' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `RestAPIRoleA3B4EFA3` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'RestAPIRoleA3B4EFA3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSQueue7674CD17` (AWS::SQS::Queue) → `Properties.Tags` L3 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSQueue7674CD17' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `SQSTriggerLambda99F71FB3` (AWS::Lambda::Function) → `Properties.Tags` L328 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambda99F71FB3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SQSTriggerLambdaServiceRole0C427DE8` (AWS::IAM::Role) → `Properties.Tags` L259 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambdaServiceRole0C427DE8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L357 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` - > Resource 'SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L142 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L117 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Resource 'CDKDataSyncS3AccessRole0C49AEBFA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` - > Resource 'CDKDataSyncS3AccessRole18E349368' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3Location0' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured -- **I9040** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.Tags` L20 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3Location1' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured -- **I9040** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.Tags` L36 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` - > Resource 'DataSyncS3toS3Task' of type 'AWS::DataSync::Task' supports Tags but none are configured -- **I9040** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L249 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBAEE750D2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L281 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBListener3B99FF85' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L302 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'ALBListenerTargetGroupD5D64FBA' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'sgalbE4BDB11E' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.Tags` L167 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` - > Resource 'sgnextcloud40AB2A88' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSE0E96D00' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `RDSSecret3683CA93` (AWS::SecretsManager::Secret) → `Properties.Tags` L51 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSSecret3683CA93' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured -- **I9040** `RDSSubnetGroup3527AC04` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'RDSSubnetGroup3527AC04' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - > Resource 'sgrds6871B7A8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L14 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` - > Resource 'sgefs8B17F90D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `consumerlambdafunction40710347` (AWS::Lambda::Function) → `Properties.Tags` L225 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'consumerlambdafunction40710347' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `consumerlambdafunctionServiceRole116B0746` (AWS::IAM::Role) → `Properties.Tags` L138 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'consumerlambdafunctionServiceRole116B0746' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'demotable002BE91A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `oneminuteruleE9168CE5` (AWS::Events::Rule) → `Properties.Tags` L261 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'oneminuteruleE9168CE5' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `producerlambdafunctionCE724CE7` (AWS::Lambda::Function) → `Properties.Tags` L102 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'producerlambdafunctionCE724CE7' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `producerlambdafunctionServiceRole5400FE21` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` - > Resource 'producerlambdafunctionServiceRole5400FE21' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWSBackupPlanSelectionRole2A44F724` (AWS::IAM::Role) → `Properties.Tags` L976 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSBackupPlanSelectionRole2A44F724' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` (AWS::Lambda::Function) → `Properties.Tags` L907 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50` (AWS::IAM::Role) → `Properties.Tags` L849 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ScheduleRuleDA5BD877` (AWS::Events::Rule) → `Properties.Tags` L790 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'ScheduleRuleDA5BD877' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L651 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` - > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L562 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L490 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `EcrStackNestedStackEcrStackNestedStackResource706AA777` (AWS::CloudFormation::Stack) → `Properties.Tags` L600 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'EcrStackNestedStackEcrStackNestedStackResource706AA777' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `EcsStackNestedStackEcsStackNestedStackResource48283A58` (AWS::CloudFormation::Stack) → `Properties.Tags` L632 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - > Resource 'EcsStackNestedStackEcsStackNestedStackResource48283A58' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.Tags` L16 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'BackendDataRepositoryD361813E' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` (AWS::Lambda::Function) → `Properties.Tags` L144 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491` (AWS::IAM::Role) → `Properties.Tags` L70 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` - > Resource 'FrontendRepository7D714FA2' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Tags` L472 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendService7A4224EE' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BackendTaskDefinitionBackendContainerLogGroup5E30F6E8` (AWS::Logs::LogGroup) → `Properties.Tags` L390 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendTaskDefinitionBackendContainerLogGroup5E30F6E8' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Tags` L336 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'BackendTaskDefinitionEC224DE6' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSCluster7D463CD4' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Tags` L28 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE' of type 'AWS::ServiceDiscovery::PrivateDnsNamespace' supports Tags but none are configured -- **I9040** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L218 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSSecurityGroupA14DBE7D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.Tags` L40 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSServiceLogGroupD961AA4E' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `ECSTaskIamRole84EB0A02` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ECSTaskIamRole84EB0A02' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L591 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendLB2FA80AC2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L627 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendLBListener230479D8' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured -- **I9040** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Tags` L400 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendServiceBC94BA93' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L272 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendTaskDefinition6CBC2B00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FrontendTaskDefinitionFrontendContainerLogGroup994ED50C` (AWS::Logs::LogGroup) → `Properties.Tags` L326 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'FrontendTaskDefinitionFrontendContainerLogGroup994ED50C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.Tags` L648 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'ListenerRule73F9AC5E' of type 'AWS::ElasticLoadBalancingV2::ListenerRule' supports Tags but none are configured -- **I9040** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'PublicLBSG963B1ACE' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L560 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskexecutionRole978012CD` (AWS::IAM::Role) → `Properties.Tags` L172 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` - > Resource 'TaskexecutionRole978012CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `emrcluster` (AWS::EMR::Cluster) → `Properties.Tags` L316 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrcluster' of type 'AWS::EMR::Cluster' supports Tags but none are configured -- **I9040** `emrjobflowrole15D4DAE5` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrjobflowrole15D4DAE5' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `emrservicerole3BE5EDAF` (AWS::IAM::Role) → `Properties.Tags` L219 in `cdk_py-emr--emr-cluster.template_json` - > Resource 'emrservicerole3BE5EDAF' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CdkIoTCoreRule` (AWS::IoT::TopicRule) → `Properties.Tags` L528 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CdkIoTCoreRule' of type 'AWS::IoT::TopicRule' supports Tags but none are configured -- **I9040** `CdkThing001LambdaRoleD7EE5CD3` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CdkThing001LambdaRoleD7EE5CD3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.Tags` L69 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CertHandler220363A9' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L518 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `CfnPolicy` (AWS::IoT::Policy) → `Properties.Tags` L353 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnPolicy' of type 'AWS::IoT::Policy' supports Tags but none are configured -- **I9040** `CfnRole` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'CfnRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IoTCertProviderframeworkonEvent8FF1476F` (AWS::Lambda::Function) → `Properties.Tags` L296 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'IoTCertProviderframeworkonEvent8FF1476F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `IoTCertProviderframeworkonEventServiceRole80DDBEA7` (AWS::IAM::Role) → `Properties.Tags` L217 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'IoTCertProviderframeworkonEventServiceRole80DDBEA7' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L126 in `cdk_py-iotcore--CdkIotThingStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-cron--LambdaCronExample.template_json` - > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Resource 'lambdaContainerFunction5815FD88' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdaContainerFunctionServiceRole5E36DB3C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` - > Resource 'lambdaContainerFunctionServiceRole5E36DB3C' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `lambdafunction45C982D3` (AWS::Lambda::Function) → `Properties.Tags` L64 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Resource 'lambdafunction45C982D3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `lambdafunctionServiceRole85538ADB` (AWS::IAM::Role) → `Properties.Tags` L30 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` - > Resource 'lambdafunctionServiceRole85538ADB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L220 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `statusLambdaCF47B86D` (AWS::Lambda::Function) → `Properties.Tags` L101 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'statusLambdaCF47B86D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `statusLambdaServiceRoleD1132168` (AWS::IAM::Role) → `Properties.Tags` L67 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'statusLambdaServiceRoleD1132168' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `submitLambda3C32AFD4` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'submitLambda3C32AFD4' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `submitLambdaServiceRole576DCA8F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` - > Resource 'submitLambdaServiceRole576DCA8F' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'TableCD117FA1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `UrlShortenerApi1FE619BE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L157 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApi1FE619BE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `UrlShortenerApiCloudWatchRole28577D98` (AWS::IAM::Role) → `Properties.Tags` L166 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiCloudWatchRole28577D98' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.Tags` L239 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiDeploymentStageprod9A3CCA44' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.Tags` L492 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerApiDomain85D0CE65' of type 'AWS::ApiGateway::DomainName' supports Tags but none are configured -- **I9040** `UrlShortenerFunctionB5E87AC1` (AWS::Lambda::Function) → `Properties.Tags` L122 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerFunctionB5E87AC1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `UrlShortenerFunctionServiceRole2FBF9CDA` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-app.template_json` - > Resource 'UrlShortenerFunctionServiceRole2FBF9CDA' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTask1D3C2E79' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `generatorPingTaskExecutionRoleA7BE7F8B` (AWS::IAM::Role) → `Properties.Tags` L73 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTaskExecutionRoleA7BE7F8B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorPingTaskTaskRoleA4886BE8` (AWS::IAM::Role) → `Properties.Tags` L11 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorPingTaskTaskRoleA4886BE8' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `generatorcluster9804CB70` (AWS::ECS::Cluster) → `Properties.Tags` L3 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorcluster9804CB70' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L184 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorserviceSecurityGroup3D8BECF8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Tags` L137 in `cdk_py-url-shortener--urlshort-load-test.template_json` - > Resource 'generatorserviceServiceA6AC5079' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `BlockListC03D0423` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L282 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListC03D0423' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `BlockListRuleGroup55F6B55D` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L294 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListRuleGroup55F6B55D' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured -- **I9040** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L315 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L252 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L470 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'InboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured -- **I9040** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L406 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'OutboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured -- **I9040** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.Tags` L435 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'sginboundendpoint32081788' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L333 in `cdk_r53-resolver--R53ResolverStack.template_json` - > Resource 'sgoutboundendpointEC0509A3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Bucket83908E77` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'Bucket83908E77' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L413 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L350 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.Tags` L127 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'Classifications0C921F6C' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L499 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L438 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RekFunction9837D13D` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'RekFunction9837D13D' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `RekFunctionServiceRole3947AEF4` (AWS::IAM::Role) → `Properties.Tags` L153 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` - > Resource 'RekFunctionServiceRole3947AEF4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Other34654A52` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_resource-overrides--resource-overrides.template_json` - > Resource 'Other34654A52' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L506 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'AllowedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L518 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'BlockedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured -- **I9040** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.Tags` L465 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSFirewallLogGroupF0EEB7D4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Tags` L477 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSLogsConfig' of type 'AWS::Route53Resolver::ResolverQueryLoggingConfig' supports Tags but none are configured -- **I9040** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L531 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'DNSRuleGroup' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured -- **I9040** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L557 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` - > Resource 'FirewallRuleGroupAssociation' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured -- **I9040** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Tags` L191 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'exampleBucketAP' of type 'AWS::S3::AccessPoint' supports Tags but none are configured -- **I9040** `examplebucketC9DFA43E` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'examplebucketC9DFA43E' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `retrieveTransformedObjectLambdaD5D6532C` (AWS::Lambda::Function) → `Properties.Tags` L141 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'retrieveTransformedObjectLambdaD5D6532C' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `retrieveTransformedObjectLambdaServiceRole27FF342E` (AWS::IAM::Role) → `Properties.Tags` L83 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` - > Resource 'retrieveTransformedObjectLambdaServiceRole27FF342E' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L297 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L225 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `DocumentAssociation` (AWS::SSM::Association) → `Properties.Tags` L45 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'DocumentAssociation' of type 'AWS::SSM::Association' supports Tags but none are configured -- **I9040** `EC2SSMRole1C0EBD7B` (AWS::IAM::Role) → `Properties.Tags` L327 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'EC2SSMRole1C0EBD7B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Tags` L5 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` - > Resource 'TimeWriterDocument' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L246 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L205 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_static-site-basic--MyStaticSite.template_json` - > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L83 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachine6C968CA5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.Tags` L5 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachineLogGroup9955D1FE' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `MyStateMachineRoleD59FFEBC` (AWS::IAM::Role) → `Properties.Tags` L17 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'MyStateMachineRoleD59FFEBC' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.Tags` L153 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiDeploymentStageprod5FF8FD8E' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `StepFuncApiE896FCA7` (AWS::ApiGateway::RestApi) → `Properties.Tags` L121 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiE896FCA7' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `StepFuncApiordersGETStartSyncExecutionRole90998151` (AWS::IAM::Role) → `Properties.Tags` L186 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` - > Resource 'StepFuncApiordersGETStartSyncExecutionRole90998151' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CheckLambda9CBBF9BA` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CheckLambda9CBBF9BA' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `CheckLambdaServiceRole74B86E23` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CheckLambdaServiceRole74B86E23' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CronStateMachine7E50955B` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L210 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachine7E50955B' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `CronStateMachineEventsRoleA3F136B0` (AWS::IAM::Role) → `Properties.Tags` L271 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachineEventsRoleA3F136B0' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CronStateMachineRoleFE85923B` (AWS::IAM::Role) → `Properties.Tags` L119 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'CronStateMachineRoleFE85923B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L317 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SubmitLambda8054545E` (AWS::Lambda::Function) → `Properties.Tags` L96 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'SubmitLambda8054545E' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SubmitLambdaServiceRole98C85C39` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` - > Resource 'SubmitLambdaServiceRole98C85C39' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Flow` (AWS::MediaConnect::Flow) → `Properties.Tags` L10 in `gh-issues_issue-144_yaml` - > Resource 'Flow' of type 'AWS::MediaConnect::Flow' supports Tags but none are configured -- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L12 in `gh-issues_issue-183_yaml` - > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L23 in `gh-issues_issue-226_yaml` - > Resource 'InvertedRangeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `gh-issues_issue-226_yaml` - > Resource 'PingSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L67 in `gh-issues_issue-235_yaml` - > Resource 'AllowedValuesEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Tags` L142 in `gh-issues_issue-235_yaml` - > Resource 'AuroraAllowedValues' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Tags` L137 in `gh-issues_issue-235_yaml` - > Resource 'AuroraEngine' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L189 in `gh-issues_issue-235_yaml` - > Resource 'AutomatedBackupRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L26 in `gh-issues_issue-235_yaml` - > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Tags` L147 in `gh-issues_issue-235_yaml` - > Resource 'ClusterMember' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L165 in `gh-issues_issue-235_yaml` - > Resource 'ClusterSnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L78 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalClusterOrStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L61 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalNoValueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L225 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalSnapshotOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L108 in `gh-issues_issue-235_yaml` - > Resource 'ConditionalTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L218 in `gh-issues_issue-235_yaml` - > Resource 'CorrelatedClusterOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L84 in `gh-issues_issue-235_yaml` - > Resource 'CustomFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L201 in `gh-issues_issue-235_yaml` - > Resource 'CustomImplicitEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L90 in `gh-issues_issue-235_yaml` - > Resource 'CustomStringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L206 in `gh-issues_issue-235_yaml` - > Resource 'CustomTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L114 in `gh-issues_issue-235_yaml` - > Resource 'DynamicEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Tags` L132 in `gh-issues_issue-235_yaml` - > Resource 'DynamicEngineValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicProperties` (AWS::RDS::DBInstance) → `Properties.Tags` L250 in `gh-issues_issue-235_yaml` - > Resource 'DynamicProperties' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L120 in `gh-issues_issue-235_yaml` - > Resource 'DynamicReferenceEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Tags` L159 in `gh-issues_issue-235_yaml` - > Resource 'EmptySnapshotIdentifier' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Tags` L171 in `gh-issues_issue-235_yaml` - > Resource 'EncryptedSource' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L73 in `gh-issues_issue-235_yaml` - > Resource 'EngineAllowedValuesMissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L43 in `gh-issues_issue-235_yaml` - > Resource 'FalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L126 in `gh-issues_issue-235_yaml` - > Resource 'InvalidEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L37 in `gh-issues_issue-235_yaml` - > Resource 'KmsKeyWithoutEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Tags` L212 in `gh-issues_issue-235_yaml` - > Resource 'LegacySecurityGroups' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `gh-issues_issue-235_yaml` - > Resource 'MissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L153 in `gh-issues_issue-235_yaml` - > Resource 'SnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L195 in `gh-issues_issue-235_yaml` - > Resource 'SourceClusterReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L177 in `gh-issues_issue-235_yaml` - > Resource 'SourceInstanceReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L183 in `gh-issues_issue-235_yaml` - > Resource 'SourceResourceRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L49 in `gh-issues_issue-235_yaml` - > Resource 'StringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L102 in `gh-issues_issue-235_yaml` - > Resource 'StringTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L96 in `gh-issues_issue-235_yaml` - > Resource 'TrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `WholePropertiesCorrelated` (AWS::RDS::DBInstance) → `Properties.Tags` L232 in `gh-issues_issue-235_yaml` - > Resource 'WholePropertiesCorrelated' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `WholePropertiesFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L241 in `gh-issues_issue-235_yaml` - > Resource 'WholePropertiesFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-246_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `gh-issues_issue-247_json` - > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `EIP` (AWS::EC2::EIP) → `Properties.Tags` L8 in `gh-issues_issue-264_yaml` - > Resource 'EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-34_json` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Instance2` (AWS::EC2::Instance) → `Properties.Tags` L22 in `gh-issues_issue-34_json` - > Resource 'Instance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L4 in `gh-issues_issue-35_yaml` - > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `gh-issues_issue-36_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L10 in `gh-issues_issue-37_yaml` - > Resource 'MyAsg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Tags` L5 in `gh-issues_issue-38_json` - > Resource 'Memory' of type 'AWS::BedrockAgentCore::Memory' supports Tags but none are configured -- **I9040** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.Tags` L5 in `gh-issues_issue-39_json` - > Resource 'VPCB9E5F0B4' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.Tags` L11 in `gh-issues_issue-39_json` - > Resource 'VPCEcrEndpointSecurityGroup50ED8BA4' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.Tags` L15 in `gh-issues_issue-40_yaml` - > Resource 'DaxConcrete' of type 'AWS::DAX::Cluster' supports Tags but none are configured -- **I9040** `DaxRef` (AWS::DAX::Cluster) → `Properties.Tags` L27 in `gh-issues_issue-40_yaml` - > Resource 'DaxRef' of type 'AWS::DAX::Cluster' supports Tags but none are configured -- **I9040** `EksCluster` (AWS::EKS::Cluster) → `Properties.Tags` L4 in `gh-issues_issue-40_yaml` - > Resource 'EksCluster' of type 'AWS::EKS::Cluster' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-41_json` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L34 in `gh-issues_issue-42-if_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L27 in `gh-issues_issue-42-if_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L17 in `gh-issues_issue-42-if_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L29 in `gh-issues_issue-42-ref_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L22 in `gh-issues_issue-42-ref_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `gh-issues_issue-42-ref_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L22 in `gh-issues_issue-42_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L15 in `gh-issues_issue-42_yaml` - > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `gh-issues_issue-42_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `gh-issues_issue-44_json` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `PipelineRole` (AWS::IAM::Role) → `Properties.Tags` L49 in `gh-issues_issue-44_json` - > Resource 'PipelineRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L5 in `gh-issues_issue-45_json` - > Resource 'interfaceVpcEndpoint89C99945' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured -- **I9040** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.Tags` L6 in `gh-issues_issue-46_json` - > Resource 'ClusterEB0386A7' of type 'AWS::EKS::Cluster' supports Tags but none are configured -- **I9040** `ClusterKubectlProviderHandler2E05C68A` (AWS::Lambda::Function) → `Properties.Tags` L15 in `gh-issues_issue-46_json` - > Resource 'ClusterKubectlProviderHandler2E05C68A' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-47_json` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.Tags` L10 in `gh-issues_issue-49_yaml` - > Resource 'DocDbInstance' of type 'AWS::DocDB::DBInstance' supports Tags but none are configured -- **I9040** `Ec2Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-49_yaml` - > Resource 'Ec2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `EsDomain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L4 in `gh-issues_issue-49_yaml` - > Resource 'EsDomain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured -- **I9040** `MyFunctionServiceRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `gh-issues_issue-50_json` - > Resource 'MyFunctionServiceRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Tags` L5 in `gh-issues_issue-52_json` - > Resource 'Nodegroup' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured -- **I9040** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.Tags` L595 in `gh-issues_issue-53_json` - > Resource 'ClusterControlPlaneSecurityGroupD274242C' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `ClusterCreationRole360249B6` (AWS::IAM::Role) → `Properties.Tags` L616 in `gh-issues_issue-53_json` - > Resource 'ClusterCreationRole360249B6' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterKubectlHandlerRole94549F93` (AWS::IAM::Role) → `Properties.Tags` L474 in `gh-issues_issue-53_json` - > Resource 'ClusterKubectlHandlerRole94549F93' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ClusterKubectlReadyBarrier200052AF` (AWS::SSM::Parameter) → `Properties.Tags` L882 in `gh-issues_issue-53_json` - > Resource 'ClusterKubectlReadyBarrier200052AF' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Tags` L956 in `gh-issues_issue-53_json` - > Resource 'ClusterNodegroupDefaultCapacityDA0920A3' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured -- **I9040** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` (AWS::IAM::Role) → `Properties.Tags` L896 in `gh-issues_issue-53_json` - > Resource 'ClusterNodegroupDefaultCapacityNodeGroupRole55953B04' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `UserRoleB7C3739B` (AWS::IAM::Role) → `Properties.Tags` L444 in `gh-issues_issue-53_json` - > Resource 'UserRoleB7C3739B' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` (AWS::CloudFormation::Stack) → `Properties.Tags` L1035 in `gh-issues_issue-53_json` - > Resource 'awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` (AWS::CloudFormation::Stack) → `Properties.Tags` L1058 in `gh-issues_issue-53_json` - > Resource 'awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `gh-issues_issue-54-bare_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54-with-ownership_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L12 in `gh-issues_issue-55_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `WeakConsumer` (AWS::SNS::Topic) → `Properties.Tags` L5 in `gh-issues_issue-56_json` - > Resource 'WeakConsumer' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-57_json` - > Resource 'AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Resource` (AWS::EC2::Volume) → `Properties.Tags` L3 in `gh-issues_issue-61_json` - > Resource 'Resource' of type 'AWS::EC2::Volume' supports Tags but none are configured -- **I9040** `Canary` (AWS::Synthetics::Canary) → `Properties.Tags` L5 in `gh-issues_issue-62_json` - > Resource 'Canary' of type 'AWS::Synthetics::Canary' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L29 in `gh-issues_issue-63_json` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-65_json` - > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L5 in `gh-issues_issue-67_json` - > Resource 'PromAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.Tags` L18 in `gh-issues_issue-68_json` - > Resource 'FutureNodeFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyFunc` (AWS::Lambda::Function) → `Properties.Tags` L6 in `gh-issues_issue-68_json` - > Resource 'MyFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L16 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CompoundSub` (AWS::S3::Bucket) → `Properties.Tags` L20 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'CompoundSub' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'ConditionalLeft' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ConditionalRight` (AWS::S3::Bucket) → `Properties.Tags` L29 in `good_E3019_identity_no_false_positive_yaml` - > Resource 'ConditionalRight' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `good_E9001_aws_cdk_metadata_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `KubectlHandlerRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `good_W1028_pseudo_param_branches_reachable_yaml` - > Resource 'KubectlHandlerRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_W3010_getazs_not_flagged_yaml` - > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_W3010_getazs_not_flagged_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L12 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `Stage1` (AWS::ApiGateway::Stage) → `Properties.Tags` L39 in `good_apigateway_method_authorizer_same_rest_api_yaml` - > Resource 'Stage1' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `good_aurora_dbinstance_yaml` - > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_cdk_bootstrap_version_rule_json` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_cloudfront_valid_yaml` - > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `good_codepipeline_artifact_counts_yaml` - > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_complex_conditions_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L34 in `good_complex_conditions_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevBucket` (AWS::S3::Bucket) → `Properties.Tags` L45 in `good_complex_conditions_yaml` - > Resource 'DevBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L41 in `good_conditions_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L101 in `good_core_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L79 in `good_core_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `good_core_conditions_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `good_core_conditions_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L53 in `good_core_conditions_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L66 in `good_core_conditions_yaml` - > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `good_core_conditions_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `good_core_config_default_e3012_yaml` - > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `MyKey` (AWS::KMS::Key) → `Properties.Tags` L4 in `good_core_directives_yaml` - > Resource 'MyKey' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L60 in `good_core_resource_attributes_yaml` - > Resource 'AutoScalingGroupWithPolicies' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `BucketWithConnectors` (AWS::Serverless::Function) → `Properties.Tags` L94 in `good_core_resource_attributes_yaml` - > Resource 'BucketWithConnectors' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_core_resource_attributes_yaml` - > Resource 'BucketWithTransform' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_core_resource_attributes_yaml` - > Resource 'CommonCfnAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DependsOnList` (AWS::S3::Bucket) → `Properties.Tags` L41 in `good_core_resource_attributes_yaml` - > Resource 'DependsOnList' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.Tags` L32 in `good_core_resource_attributes_yaml` - > Resource 'DependsOnSingleString' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_custom_is-defined_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedArray` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedArray' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedEmpty` (AWS::Lambda::Function) → `Properties.Tags` L35 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedEmpty' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedGetAttr` (AWS::Lambda::Function) → `Properties.Tags` L45 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedGetAttr' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedObject` (AWS::Lambda::Function) → `Properties.Tags` L55 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedObject' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedRef` (AWS::Lambda::Function) → `Properties.Tags` L66 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedRef' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestDefinedValue` (AWS::Lambda::Function) → `Properties.Tags` L76 in `good_custom_is-defined_yaml` - > Resource 'LambdaFunctionTestDefinedValue' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L6 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedFromParent` (AWS::Lambda::Function) → `Properties.Tags` L20 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedFromParent' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedFromProperties` (AWS::Lambda::Function) → `Properties.Tags` L29 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedFromProperties' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedRefAWSNoValue` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedRefAWSNoValue' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFunctionTestNotDefinedWithSiblings` (AWS::Lambda::Function) → `Properties.Tags` L46 in `good_custom_is-not-defined_yaml` - > Resource 'LambdaFunctionTestNotDefinedWithSiblings' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-large_yaml` - > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-small_yaml` - > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `good_deletion_policies_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `DB` (AWS::RDS::DBInstance) → `Properties.Tags` L9 in `good_deletion_policies_yaml` - > Resource 'DB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_provisioned_yaml` - > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `GoodTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_valid_attributes_yaml` - > Resource 'GoodTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_awsvpc_valid_yaml` - > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L198 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedEc2SizeThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L150 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedEc2ThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L186 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedFargateSizeThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L138 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedFargateThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L174 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedOnDemandThenProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.Tags` L163 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'CorrelatedProvisionedThenOnDemand' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L107 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'DefaultWithThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L122 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'FargateIntCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L62 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Tags` L47 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'NonFargateTask' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.Tags` L78 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'PayPerRequestTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.Tags` L91 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ProvisionedTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ValidFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Tags` L30 in `good_ecs_fargate_ddb_valid_yaml` - > Resource 'ValidFargateSplunk' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_valid_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L18 in `good_ecs_fargate_yaml` - > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `ELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_elb_https_empty_sslcertificateid_yaml` - > Resource 'ELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `good_functions_dynamic_reference_embedded_yaml` - > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L25 in `good_functions_dynamic_reference_embedded_yaml` - > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Cluster0` (AWS::ECS::Cluster) → `Properties.Tags` L13 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster0' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster1` (AWS::ECS::Cluster) → `Properties.Tags` L21 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster1' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L29 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L37 in `good_functions_findinmap_default_value_yaml` - > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.Tags` L45 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh0' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.Tags` L61 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh1' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L72 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.Tags` L83 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh3' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.Tags` L95 in `good_functions_findinmap_default_value_yaml` - > Resource 'Mesh4' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L48 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L80 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L102 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `Mesh` (AWS::AppMesh::Mesh) → `Properties.Tags` L22 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Mesh' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L35 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L61 in `good_functions_findinmap_enhanced_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L13 in `good_functions_findinmap_yaml` - > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L17 in `good_functions_findinmap_yaml` - > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L25 in `good_functions_findinmap_yaml` - > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `S3BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `S3BucketB` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `S3BucketC` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` - > Resource 'S3BucketC' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L15 in `good_functions_get_stack_output_yaml` - > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic10` (AWS::SNS::Topic) → `Properties.Tags` L106 in `good_functions_get_stack_output_yaml` - > Resource 'Topic10' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L23 in `good_functions_get_stack_output_yaml` - > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L33 in `good_functions_get_stack_output_yaml` - > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L44 in `good_functions_get_stack_output_yaml` - > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic5` (AWS::SNS::Topic) → `Properties.Tags` L55 in `good_functions_get_stack_output_yaml` - > Resource 'Topic5' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic6` (AWS::SNS::Topic) → `Properties.Tags` L65 in `good_functions_get_stack_output_yaml` - > Resource 'Topic6' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic7` (AWS::SNS::Topic) → `Properties.Tags` L74 in `good_functions_get_stack_output_yaml` - > Resource 'Topic7' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic8` (AWS::SNS::Topic) → `Properties.Tags` L83 in `good_functions_get_stack_output_yaml` - > Resource 'Topic8' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Topic9` (AWS::SNS::Topic) → `Properties.Tags` L95 in `good_functions_get_stack_output_yaml` - > Resource 'Topic9' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ConfigApplication` (AWS::AppConfig::Application) → `Properties.Tags` L25 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'ConfigApplication' of type 'AWS::AppConfig::Application' supports Tags but none are configured -- **I9040** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.Tags` L30 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'ConfigEnvironment' of type 'AWS::AppConfig::Environment' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L35 in `good_functions_relationship_conditions_sam_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_functions_relationship_conditions_yaml` - > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `good_functions_relationship_conditions_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_functions_select_string_index_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_functions_select_string_index_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L27 in `good_functions_select_string_index_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `TestRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_functions_sub_needed_custom_excludes_yaml` - > Resource 'TestRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IOTPolicies` (AWS::IoT::Policy) → `Properties.Tags` L120 in `good_functions_sub_needed_yaml` - > Resource 'IOTPolicies' of type 'AWS::IoT::Policy' supports Tags but none are configured -- **I9040** `Key` (AWS::ApiGateway::ApiKey) → `Properties.Tags` L84 in `good_functions_sub_needed_yaml` - > Resource 'Key' of type 'AWS::ApiGateway::ApiKey' supports Tags but none are configured -- **I9040** `TestGoodStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L139 in `good_functions_sub_needed_yaml` - > Resource 'TestGoodStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `MyStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L66 in `good_functions_sub_yaml` - > Resource 'MyStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L51 in `good_functions_sub_yaml` - > Resource 'myAlb' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L32 in `good_functions_sub_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `mySubStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L43 in `good_functions_sub_yaml` - > Resource 'mySubStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `myVPc2` (AWS::EC2::VPC) → `Properties.Tags` L71 in `good_functions_sub_yaml` - > Resource 'myVPc2' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `ElasticIP` (AWS::EC2::EIP) → `Properties.Tags` L119 in `good_generic_yaml` - > Resource 'ElasticIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L123 in `good_generic_yaml` - > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L144 in `good_generic_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `LambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L162 in `good_generic_yaml` - > Resource 'LambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L74 in `good_generic_yaml` - > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.Tags` L94 in `good_generic_yaml` - > Resource 'MyEC2Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_generic_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L90 in `good_generic_yaml` - > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ProvisionedProduct` (AWS::ServiceCatalog::CloudFormationProvisionedProduct) → `Properties.Tags` L8 in `good_getatt_provisioned_product_outputs_yaml` - > Resource 'ProvisionedProduct' of type 'AWS::ServiceCatalog::CloudFormationProvisionedProduct' supports Tags but none are configured -- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `good_getatt_provisioned_product_outputs_yaml` - > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_getazs_resolves_current_regions_yaml` - > Resource 'SubnetApEast2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_getazs_resolves_current_regions_yaml` - > Resource 'SubnetMxCentral1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `ProdBucket` (AWS::S3::Bucket) → `Properties.Tags` L22 in `good_good_conditions_valid_refs_yaml` - > Resource 'ProdBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.Tags` L16 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Resource 'RoleInlinePolicy' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Tags` L75 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` - > Resource 'SSOPermissionSet' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured -- **I9040** `SomeBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_iam_intrinsic_resource_arns_yaml` - > Resource 'SomeBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L18 in `good_iam_valid_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TopicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L18 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicAliasName` (AWS::SNS::Topic) → `Properties.Tags` L14 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicAliasName' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicIntrinsicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L30 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicIntrinsicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicKeyId` (AWS::SNS::Topic) → `Properties.Tags` L6 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicMultiRegionKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L26 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicMultiRegionKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `TopicMultiRegionKeyId` (AWS::SNS::Topic) → `Properties.Tags` L22 in `good_kms_key_identifier_forms_yaml` - > Resource 'TopicMultiRegionKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_snapstart_yaml` - > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_zipfile_yaml` - > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `good_mappings_used_yaml` - > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `good_mappings_valid_yaml` - > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_minimal_yaml` - > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `OtherResource` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_modules_minimal_yaml` - > Resource 'OtherResource' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Instance` (AWS::Neptune::DBInstance) → `Properties.Tags` L4 in `good_neptune_valid_instanceclass_yaml` - > Resource 'Instance' of type 'AWS::Neptune::DBInstance' supports Tags but none are configured -- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `good_no_value_yaml` - > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Cluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L8 in `good_no_w3010_on_unlisted_type_yaml` - > Resource 'Cluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured -- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L17 in `good_output_value_string_yaml` - > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L16 in `good_override_complete_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_complete_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L12 in `good_override_complete_yaml` - > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_required_yaml` - > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_param_constraints_valid_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_parameters_not_used_parameters_yaml` - > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyAPI` (AWS::Serverless::Api) → `Properties.Tags` L15 in `good_parameters_used_transform_removed_yaml` - > Resource 'MyAPI' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_parameters_used_transforms_yaml` - > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `mySubnet21` (AWS::EC2::Subnet) → `Properties.Tags` L56 in `good_properties_ec2_vpc_yaml` - > Resource 'mySubnet21' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `mySubnet22` (AWS::EC2::Subnet) → `Properties.Tags` L64 in `good_properties_ec2_vpc_yaml` - > Resource 'mySubnet22' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L31 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc2` (AWS::EC2::VPC) → `Properties.Tags` L36 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc2' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc3` (AWS::EC2::VPC) → `Properties.Tags` L41 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc3' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc4` (AWS::EC2::VPC) → `Properties.Tags` L46 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc4' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `myVpc5` (AWS::EC2::VPC) → `Properties.Tags` L51 in `good_properties_ec2_vpc_yaml` - > Resource 'myVpc5' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `NatGW` (AWS::EC2::NatGateway) → `Properties.Tags` L29 in `good_redshift_private_yaml` - > Resource 'NatGW' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `good_redshift_private_yaml` - > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured -- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `good_redshift_private_yaml` - > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `good_redshift_private_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `good_redshift_private_yaml` - > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `Cluster` (AWS::Redshift::Cluster) → `Properties.Tags` L4 in `good_redshift_valid_nodetype_yaml` - > Resource 'Cluster' of type 'AWS::Redshift::Cluster' supports Tags but none are configured -- **I9040** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.Tags` L12 in `good_region_conditional_resource_type_yaml` - > Resource 'Pool' of type 'AWS::DeviceFarm::DevicePool' supports Tags but none are configured -- **I9040** `NestedStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `good_resources_cloudformation_nested_stack_dynamic_yaml` - > Resource 'NestedStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L39 in `good_resources_cloudformation_stacks_yaml` - > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackInvalidPath` (AWS::CloudFormation::Stack) → `Properties.Tags` L31 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackInvalidPath' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackIsWebUrl` (AWS::CloudFormation::Stack) → `Properties.Tags` L15 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackIsWebUrl' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L7 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `StackUrlIsObject` (AWS::CloudFormation::Stack) → `Properties.Tags` L23 in `good_resources_cloudformation_stacks_yaml` - > Resource 'StackUrlIsObject' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_resources_cloudfront_aliases_yaml` - > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `good_resources_codepipeline_yaml` - > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_deletionpolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L18 in `good_resources_dynamodb_attributes_transform_object_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `good_resources_dynamodb_attributes_transform_yaml` - > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `good_resources_dynamodb_attributes_yaml` - > Resource 'DDBTable1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.Tags` L36 in `good_resources_dynamodb_attributes_yaml` - > Resource 'DDBTable2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L50 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L125 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FifthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L108 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'FourthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L25 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L33 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L42 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyOptionalClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L17 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured -- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L142 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'SixthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L89 in `good_resources_elasticache_cache_cluster_failover_yaml` - > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured -- **I9040** `IAMInstanceProfile` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `good_resources_iam_instance_profile_yaml` - > Resource 'IAMInstanceProfile' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `Instance` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_resources_iam_instance_profile_yaml` - > Resource 'Instance' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured -- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `good_resources_iam_ref_with_path_yaml` - > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Ecr` (AWS::ECR::Repository) → `Properties.Tags` L6 in `good_resources_iam_resource_policy_yaml` - > Resource 'Ecr' of type 'AWS::ECR::Repository' supports Tags but none are configured -- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `good_resources_lambda_required_properties_yaml` - > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `good_resources_name_yaml` - > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L76 in `good_resources_primary_identifiers_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_resources_primary_identifiers_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L30 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L53 in `good_resources_primary_identifiers_yaml` - > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TESTROLE` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_properties_allowed_pattern_yaml` - > Resource 'TESTROLE' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Instance` (AWS::EC2::Subnet) → `Properties.Tags` L6 in `good_resources_properties_az_cdk_yaml` - > Resource 'Instance' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L11 in `good_resources_properties_exclusive_yaml` - > Resource 'Alarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.Tags` L88 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'IngestionPipeline' of type 'AWS::OSIS::Pipeline' supports Tags but none are configured -- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L31 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` - > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Stack` (AWS::CloudFormation::Stack) → `Properties.Tags` L13 in `good_resources_properties_hard_coded_arn_properties_yaml` - > Resource 'Stack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `IamRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IamRoleWithConditions` (AWS::IAM::Role) → `Properties.Tags` L24 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRoleWithConditions' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `IamRoleWithNestedConditions` (AWS::IAM::Role) → `Properties.Tags` L36 in `good_resources_properties_list_duplicates_yaml` - > Resource 'IamRoleWithNestedConditions' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L17 in `good_resources_properties_password_yaml` - > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L44 in `good_resources_properties_password_yaml` - > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured -- **I9040** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Tags` L26 in `good_resources_properties_password_yaml` - > Resource 'myNewDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L35 in `good_resources_properties_password_yaml` - > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `good_resources_properties_string_size_yaml` - > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_resources_properties_templated_code_sam_yaml` - > Resource 'Function' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `AppSync` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L4 in `good_resources_properties_templated_code_yaml` - > Resource 'AppSync' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured -- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L24 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L31 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `good_resources_rds_instance_sizes_yaml` - > Resource 'DBInstance6' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_s3_access-control-obsolete_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `FunctionRole` (AWS::IAM::Role) → `Properties.Tags` L39 in `good_resources_update_policy_supported_yaml` - > Resource 'FunctionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L8 in `good_resources_update_policy_supported_yaml` - > Resource 'MyASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L28 in `good_resources_update_policy_supported_yaml` - > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_updatereplacepolicy_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L5 in `good_sam_api_stagename_valid_yaml` - > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_sam_connector_valid_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L3 in `good_sam_connector_valid_yaml` - > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_deploymentpreference_with_alias_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_dlq_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_image_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_provisioned_concurrency_with_alias_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L9 in `good_sam_function_runtime_handler_via_globals_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_url_config_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_zip_valid_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L19 in `good_sam_globals_all_valid_sections_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_globals_empty_yaml` - > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `AliasParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_alias_ref_yaml` - > Resource 'AliasParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_alias_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ApiIdParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'ApiIdParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `ApiSubParam` (AWS::SSM::Parameter) → `Properties.Tags` L22 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'ApiSubParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_httpapi_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_restapi_stage_ref_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `StageParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_restapi_stage_ref_yaml` - > Resource 'StageParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `RoleArnParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'RoleArnParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `RoleRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_role_getatt_dependson_yaml` - > Resource 'RoleRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_no_primarykey_yaml` - > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured -- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_valid_yaml` - > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured -- **I9040** `MySM` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_sam_statemachine_definition_only_yaml` - > Resource 'MySM' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_schema_valid_resources_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_schema_valid_resources_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_simple_sub_prefix_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `good_some_logs_stream_lambda_yaml` - > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `good_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L75 in `good_some_logs_stream_lambda_yaml` - > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `good_sqs_fifo_valid_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `good_ssm_document_valid_yaml` - > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_ssm_parameter_name_type_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `good_stepfunctions_valid_yaml` - > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured -- **I9040** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L23 in `good_string_length_unknowable_values_json` - > Resource 'JoinedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_string_length_unknowable_values_json` - > Resource 'JoinedFromAReference' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_string_length_unknowable_values_json` - > Resource 'NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.Tags` L43 in `good_string_length_unknowable_values_json` - > Resource 'OnlySomeChoicesTooLong' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L37 in `good_string_length_unknowable_values_json` - > Resource 'SubstitutedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_sub_not_needed_yaml` - > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `App1` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_transform_applications_location_yaml` - > Resource 'App1' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `App2` (AWS::Serverless::Application) → `Properties.Tags` L9 in `good_transform_applications_location_yaml` - > Resource 'App2' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L22 in `good_transform_auto_publish_alias_yaml` - > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SkillFunction2` (AWS::Serverless::Function) → `Properties.Tags` L31 in `good_transform_auto_publish_alias_yaml` - > Resource 'SkillFunction2' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_auto_publish_code_sha256_yaml` - > Resource 'LambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_transform_function_use_s3_uri_yaml` - > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `HelloWorldFunction` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_transform_function_using_image_yaml` - > Resource 'HelloWorldFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `MySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L96 in `good_transform_language_extension_yaml` - > Resource 'MySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `good_transform_language_extension_yaml` - > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.Tags` L90 in `good_transform_language_extension_yaml` - > Resource 'SecurityGroups' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `TestLambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L80 in `good_transform_language_extension_yaml` - > Resource 'TestLambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `TestStateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L67 in `good_transform_language_extension_yaml` - > Resource 'TestStateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_transform_list_transform_many_yaml` - > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Lambda::Function) → `Properties.Tags` L9 in `good_transform_list_transform_not_sam_yaml` - > Resource 'SkillFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_list_transform_yaml` - > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L23 in `good_transform_serverless_api_yaml` - > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_serverless_api_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `LiteralAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_transform_serverless_auto_publish_alias_yaml` - > Resource 'LiteralAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ParameterAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_serverless_auto_publish_alias_yaml` - > Resource 'ParameterAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L7 in `good_transform_serverless_function_yaml` - > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L73 in `good_transform_serverless_function_yaml` - > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L11 in `good_transform_serverless_function_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_globals_yaml` - > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` - > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_yaml` - > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `StateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_transform_step_function_local_definition_yaml` - > Resource 'StateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured -- **I9040** `AppName` (AWS::Serverless::Application) → `Properties.Tags` L20 in `good_transform_yaml` - > Resource 'AppName' of type 'AWS::Serverless::Application' supports Tags but none are configured -- **I9040** `MyServerlessFunctionLogicalID` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_yaml` - > Resource 'MyServerlessFunctionLogicalID' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `ImportedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `good_unique_items_deploy_time_values_json` - > Resource 'ImportedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `SelectedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L44 in `good_unique_items_deploy_time_values_json` - > Resource 'SelectedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `StackOutputSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L12 in `good_unique_items_deploy_time_values_json` - > Resource 'StackOutputSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L24 in `good_vpc_subnets_yaml` - > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `good_vpc_subnets_yaml` - > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_vpc_subnets_yaml` - > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L4 in `integration_availability-zones_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `KMS` (AWS::KMS::Key) → `Properties.Tags` L3 in `integration_aws-dynamodb-table_yaml` - > Resource 'KMS' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `Table1` (AWS::DynamoDB::Table) → `Properties.Tags` L11 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Table2` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `Table3` (AWS::DynamoDB::Table) → `Properties.Tags` L49 in `integration_aws-dynamodb-table_yaml` - > Resource 'Table3' of type 'AWS::DynamoDB::Table' supports Tags but none are configured -- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L4 in `integration_aws-ec2-instance_yaml` - > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured -- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L9 in `integration_aws-ec2-networkinterface_yaml` - > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L7 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L13 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet3` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet4` (AWS::EC2::Subnet) → `Properties.Tags` L22 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet4' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet5` (AWS::EC2::Subnet) → `Properties.Tags` L28 in `integration_aws-ec2-subnet_yaml` - > Resource 'Subnet5' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Function` (AWS::Lambda::Function) → `Properties.Tags` L4 in `integration_aws-lambda-function_yaml` - > Resource 'Function' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L10 in `integration_aws-lambda-function_yaml` - > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Tags` L111 in `integration_cfn-gather_yaml` - > Resource 'AuroraCluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured -- **I9040** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L26 in `integration_cfn-gather_yaml` - > Resource 'AwsvpcTaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L117 in `integration_cfn-gather_yaml` - > Resource 'BadEngineInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `FargateService` (AWS::ECS::Service) → `Properties.Tags` L16 in `integration_cfn-gather_yaml` - > Resource 'FargateService' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L104 in `integration_cfn-gather_yaml` - > Resource 'FifoMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `FifoProcessor` (AWS::Lambda::Function) → `Properties.Tags` L93 in `integration_cfn-gather_yaml` - > Resource 'FifoProcessor' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L39 in `integration_cfn-gather_yaml` - > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `RestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L52 in `integration_cfn-gather_yaml` - > Resource 'RestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `RestApi2` (AWS::ApiGateway::RestApi) → `Properties.Tags` L73 in `integration_cfn-gather_yaml` - > Resource 'RestApi2' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured -- **I9040** `ServiceNoNetConfig` (AWS::ECS::Service) → `Properties.Tags` L34 in `integration_cfn-gather_yaml` - > Resource 'ServiceNoNetConfig' of type 'AWS::ECS::Service' supports Tags but none are configured -- **I9040** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L88 in `integration_cfn-gather_yaml` - > Resource 'SqsFifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.Tags` L81 in `integration_cfn-gather_yaml` - > Resource 'StageBadApi' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured -- **I9040** `StandardDLQ` (AWS::SQS::Queue) → `Properties.Tags` L47 in `integration_cfn-gather_yaml` - > Resource 'StandardDLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L6 in `integration_cfn-gather_yaml` - > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `KmsKey` (AWS::KMS::Key) → `Properties.Tags` L6 in `integration_custom-resources_yaml` - > Resource 'KmsKey' of type 'AWS::KMS::Key' supports Tags but none are configured -- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `integration_deployment-file-template_yaml` - > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L27 in `integration_deployment-file-template_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L23 in `integration_deployment-file-template_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `Broker` (AWS::AmazonMQ::Broker) → `Properties.Tags` L20 in `integration_dynamic-references_yaml` - > Resource 'Broker' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured -- **I9040** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L6 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L13 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMappingBadDynamicReference' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L34 in `integration_dynamic-references_yaml` - > Resource 'SESEventSourceMappingSpaces' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured -- **I9040** `Instance1` (AWS::EC2::Instance) → `Properties.Tags` L27 in `integration_formats_yaml` - > Resource 'Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L21 in `integration_formats_yaml` - > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `integration_formats_yaml` - > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L10 in `integration_formats_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `InvalidMissing` (AWS::SNS::Topic) → `Properties.Tags` L45 in `integration_get-stack-output_yaml` - > Resource 'InvalidMissing' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `InvalidType` (AWS::SNS::Topic) → `Properties.Tags` L52 in `integration_get-stack-output_yaml` - > Resource 'InvalidType' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidIf` (AWS::SNS::Topic) → `Properties.Tags` L34 in `integration_get-stack-output_yaml` - > Resource 'ValidIf' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidJoin` (AWS::SNS::Topic) → `Properties.Tags` L23 in `integration_get-stack-output_yaml` - > Resource 'ValidJoin' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `ValidTopic` (AWS::SNS::Topic) → `Properties.Tags` L15 in `integration_get-stack-output_yaml` - > Resource 'ValidTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `DocDBCluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L23 in `integration_getatt-types_yaml` - > Resource 'DocDBCluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured -- **I9040** `SsmParameter` (AWS::SSM::Parameter) → `Properties.Tags` L16 in `integration_getatt-types_yaml` - > Resource 'SsmParameter' of type 'AWS::SSM::Parameter' supports Tags but none are configured -- **I9040** `TestCluster` (AWS::ECS::Cluster) → `Properties.Tags` L25 in `integration_getatt-types_yaml` - > Resource 'TestCluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `TestFargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `integration_getatt-types_yaml` - > Resource 'TestFargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TestFargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L42 in `integration_getatt-types_yaml` - > Resource 'TestFargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `TestLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L50 in `integration_getatt-types_yaml` - > Resource 'TestLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Tags` L56 in `integration_getatt-types_yaml` - > Resource 'TestTaskDefinitionWithGetAtt' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `CloudFront2` (AWS::CloudFront::Distribution) → `Properties.Tags` L42 in `integration_ref-no-value_yaml` - > Resource 'CloudFront2' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured -- **I9040** `IamRole3` (AWS::IAM::Role) → `Properties.Tags` L31 in `integration_ref-no-value_yaml` - > Resource 'IamRole3' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L7 in `integration_ref-types_yaml` - > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured -- **I9040** `FargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L11 in `integration_ref-types_yaml` - > Resource 'FargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `FargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `integration_ref-types_yaml` - > Resource 'FargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L57 in `integration_ref-types_yaml` - > Resource 'LoadBalancer' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured -- **I9040** `LogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L65 in `integration_ref-types_yaml` - > Resource 'LogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L48 in `integration_ref-types_yaml` - > Resource 'SecurityGroup1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L53 in `integration_ref-types_yaml` - > Resource 'SecurityGroup2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L38 in `integration_ref-types_yaml` - > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L43 in `integration_ref-types_yaml` - > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured -- **I9040** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Tags` L92 in `integration_ref-types_yaml` - > Resource 'TaskDefinitionWithRefToParameter' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Tags` L71 in `integration_ref-types_yaml` - > Resource 'TaskDefinitionWithRefToResource' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured -- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L34 in `integration_ref-types_yaml` - > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured -- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L93 in `integration_resources-cloudformation-init_yaml` - > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured -- **I9040** `DmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L296 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `DmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L399 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L331 in `issues_sam_w_conditions_yaml` - > Resource 'DmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `VmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L171 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `VmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L274 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L206 in `issues_sam_w_conditions_yaml` - > Resource 'VmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured -- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L491 in `lsp_comprehensive_json` - > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L846 in `lsp_comprehensive_json` - > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L716 in `lsp_comprehensive_json` - > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L802 in `lsp_comprehensive_json` - > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L204 in `lsp_comprehensive_yaml` - > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L369 in `lsp_comprehensive_yaml` - > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L293 in `lsp_comprehensive_yaml` - > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L343 in `lsp_comprehensive_yaml` - > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `lsp_condition-usage_json` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L86 in `lsp_condition-usage_json` - > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_condition-usage_json` - > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L94 in `lsp_condition-usage_yaml` - > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L142 in `lsp_condition-usage_yaml` - > Resource 'DevSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L88 in `lsp_condition-usage_yaml` - > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.Tags` L170 in `lsp_condition-usage_yaml` - > Resource 'LogicalConditionResource' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L55 in `lsp_condition-usage_yaml` - > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L136 in `lsp_condition-usage_yaml` - > Resource 'ProductionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L42 in `lsp_constants_json` - > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L25 in `lsp_constants_yaml` - > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L32 in `lsp_parameter_usage_json` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L40 in `lsp_parameter_usage_json` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L48 in `lsp_parameter_usage_json` - > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L56 in `lsp_parameter_usage_json` - > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L64 in `lsp_parameter_usage_json` - > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L28 in `lsp_parameter_usage_yaml` - > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L34 in `lsp_parameter_usage_yaml` - > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L41 in `lsp_parameter_usage_yaml` - > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L47 in `lsp_parameter_usage_yaml` - > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L52 in `lsp_parameter_usage_yaml` - > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket6` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_parameter_usage_yaml` - > Resource 'Bucket6' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `Bucket7` (AWS::S3::Bucket) → `Properties.Tags` L63 in `lsp_parameter_usage_yaml` - > Resource 'Bucket7' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L4 in `lsp_simple_json` - > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `lsp_simple_yaml` - > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L8 in `lsp_test-template_yaml` - > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured -- **I9040** `MyFunction` (AWS::Serverless::Function) → `Properties.Tags` L4 in `lsp_test-template_yaml` - > Resource 'MyFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured -- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L162 in `public_lambda-poller_json` - > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L116 in `public_lambda-poller_json` - > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `public_lambda-poller_json` - > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L185 in `public_lambda-poller_yaml` - > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L162 in `public_lambda-poller_yaml` - > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L17 in `public_lambda-poller_yaml` - > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L1689 in `public_watchmaker_json` - > Resource 'WatchmakerInstanceLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2045 in `quickstart_cis_benchmark_yaml` - > Resource 'BillingChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L2201 in `quickstart_cis_benchmark_yaml` - > Resource 'BillingChangesCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1984 in `quickstart_cis_benchmark_yaml` - > Resource 'CloudTrailCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1774 in `quickstart_cis_benchmark_yaml` - > Resource 'ConsoleLoginFailureCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1737 in `quickstart_cis_benchmark_yaml` - > Resource 'ConsoleSigninWithoutMFACloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Tags` L1937 in `quickstart_cis_benchmark_yaml` - > Resource 'DetectConfigChanges' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Tags` L1906 in `quickstart_cis_benchmark_yaml` - > Resource 'DetectS3BucketPolicyChanges' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2069 in `quickstart_cis_benchmark_yaml` - > Resource 'Ec2TerminationCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.Tags` L1002 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailBucketRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.Tags` L1119 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailLogIntegrityRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.Tags` L889 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateCloudTrailRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.Tags` L1397 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateConfigInAllRegionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.Tags` L1301 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateKeyRotationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.Tags` L702 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluatePolicyPermissionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.Tags` L230 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateRootAccountRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.Tags` L798 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForEvaluateUserPolicyAssociationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.Tags` L1216 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForInstanceRoleUseRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.Tags` L609 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForRoleForMfaOnUsersRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.Tags` L500 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcDefaultSecurityGroupsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.Tags` L424 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcFlowLogRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.Tags` L1502 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionForVpcPeeringRouteTablesRule' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.Tags` L2254 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionToDisableUnusedCredentials' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.Tags` L1859 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctionToFormatCloudWatchEvent' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.Tags` L123 in `quickstart_cis_benchmark_yaml` - > Resource 'FunctiontForEvaluateCisBenchmarkingPreconditions' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.Tags` L1602 in `quickstart_cis_benchmark_yaml` - > Resource 'GetCloudTrailCloudWatchLog' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1699 in `quickstart_cis_benchmark_yaml` - > Resource 'IAMRootActivityCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2007 in `quickstart_cis_benchmark_yaml` - > Resource 'IamPolicyChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1811 in `quickstart_cis_benchmark_yaml` - > Resource 'KMSCustomerKeyDeletionCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1962 in `quickstart_cis_benchmark_yaml` - > Resource 'KmsKeyUseCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `MasterConfigRole` (AWS::IAM::Role) → `Properties.Tags` L78 in `quickstart_cis_benchmark_yaml` - > Resource 'MasterConfigRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2120 in `quickstart_cis_benchmark_yaml` - > Resource 'NetworkAclChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2150 in `quickstart_cis_benchmark_yaml` - > Resource 'NetworkChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `RoleForCloudWatchEvents` (AWS::IAM::Role) → `Properties.Tags` L1831 in `quickstart_cis_benchmark_yaml` - > Resource 'RoleForCloudWatchEvents' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `RoleForDisableUnusedCredentialsFunction` (AWS::IAM::Role) → `Properties.Tags` L2221 in `quickstart_cis_benchmark_yaml` - > Resource 'RoleForDisableUnusedCredentialsFunction' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Tags` L2348 in `quickstart_cis_benchmark_yaml` - > Resource 'ScheduledRuleForDisableUnusedCredentials' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2092 in `quickstart_cis_benchmark_yaml` - > Resource 'SecurityGroupChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured -- **I9040** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.Tags` L1588 in `quickstart_cis_benchmark_yaml` - > Resource 'SnsTopicForCloudWatchEvents' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1661 in `quickstart_cis_benchmark_yaml` - > Resource 'UnauthorizedAttemptCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L240 in `quickstart_config-rules_json` - > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L99 in `quickstart_config-rules_json` - > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L119 in `quickstart_iam_json` - > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L191 in `quickstart_iam_json` - > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L304 in `quickstart_iam_json` - > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `quickstart_iam_json` - > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rEipNat` (AWS::EC2::EIP) → `Properties.Tags` L71 in `quickstart_nat-instance_json` - > Resource 'rEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rCWAlarmHighCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L645 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmHighCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmHighCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L663 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmHighCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmLowCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L681 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmLowCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCWAlarmLowCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L699 in `quickstart_nist_application_yaml` - > Resource 'rCWAlarmLowCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rDBSubnetGroup` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L716 in `quickstart_nist_application_yaml` - > Resource 'rDBSubnetGroup' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured -- **I9040** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Tags` L960 in `quickstart_nist_application_yaml` - > Resource 'rPostProcInstanceRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Tags` L1006 in `quickstart_nist_application_yaml` - > Resource 'rRDSInstanceMySQL' of type 'AWS::RDS::DBInstance' supports Tags but none are configured -- **I9040** `rS3ELBAccessLogs` (AWS::S3::Bucket) → `Properties.Tags` L1062 in `quickstart_nist_application_yaml` - > Resource 'rS3ELBAccessLogs' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1139 in `quickstart_nist_application_yaml` - > Resource 'rSecurityGroupWeb' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `rWebContentBucket` (AWS::S3::Bucket) → `Properties.Tags` L1179 in `quickstart_nist_application_yaml` - > Resource 'rWebContentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L99 in `quickstart_nist_config_rules_yaml` - > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L282 in `quickstart_nist_config_rules_yaml` - > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L280 in `quickstart_nist_high_main_yaml` - > Resource 'ApplicationTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ConfigRulesTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L393 in `quickstart_nist_high_main_yaml` - > Resource 'ConfigRulesTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `IamTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L412 in `quickstart_nist_high_main_yaml` - > Resource 'IamTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `LoggingTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L425 in `quickstart_nist_high_main_yaml` - > Resource 'LoggingTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L446 in `quickstart_nist_high_main_yaml` - > Resource 'ManagementVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L527 in `quickstart_nist_high_main_yaml` - > Resource 'ProductionVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L64 in `quickstart_nist_iam_yaml` - > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L144 in `quickstart_nist_iam_yaml` - > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L243 in `quickstart_nist_iam_yaml` - > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L319 in `quickstart_nist_iam_yaml` - > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rArchiveLogsBucket` (AWS::S3::Bucket) → `Properties.Tags` L43 in `quickstart_nist_logging_yaml` - > Resource 'rArchiveLogsBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailBucket` (AWS::S3::Bucket) → `Properties.Tags` L121 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured -- **I9040** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L144 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailChangeAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rCloudTrailLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L159 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured -- **I9040** `rCloudTrailLoggingLocal` (AWS::CloudTrail::Trail) → `Properties.Tags` L164 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailLoggingLocal' of type 'AWS::CloudTrail::Trail' supports Tags but none are configured -- **I9040** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Tags` L187 in `quickstart_nist_logging_yaml` - > Resource 'rCloudTrailRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Tags` L325 in `quickstart_nist_logging_yaml` - > Resource 'rCloudWatchLogsRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L392 in `quickstart_nist_logging_yaml` - > Resource 'rIAMCreateAccessKeyAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L408 in `quickstart_nist_logging_yaml` - > Resource 'rIAMPolicyChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L443 in `quickstart_nist_logging_yaml` - > Resource 'rNetworkAclChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L472 in `quickstart_nist_logging_yaml` - > Resource 'rRootActivityAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rSecurityAlarmTopic` (AWS::SNS::Topic) → `Properties.Tags` L486 in `quickstart_nist_logging_yaml` - > Resource 'rSecurityAlarmTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured -- **I9040** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L494 in `quickstart_nist_logging_yaml` - > Resource 'rSecurityGroupChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L523 in `quickstart_nist_logging_yaml` - > Resource 'rUnauthorizedAttemptAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured -- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L336 in `quickstart_nist_vpc_management_yaml` - > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L395 in `quickstart_nist_vpc_management_yaml` - > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L401 in `quickstart_nist_vpc_management_yaml` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L548 in `quickstart_nist_vpc_management_yaml` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L558 in `quickstart_nist_vpc_management_yaml` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L304 in `quickstart_nist_vpc_production_yaml` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.Tags` L367 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNACLPrivate' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured -- **I9040** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.Tags` L372 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNACLPublic' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L518 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L528 in `quickstart_nist_vpc_production_yaml` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `OpenShiftStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L185 in `quickstart_openshift_master_yaml` - > Resource 'OpenShiftStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `VPCStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L243 in `quickstart_openshift_master_yaml` - > Resource 'VPCStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L747 in `quickstart_openshift_yaml` - > Resource 'ContainerAccessELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `KeyGen` (AWS::Lambda::Function) → `Properties.Tags` L799 in `quickstart_openshift_yaml` - > Resource 'KeyGen' of type 'AWS::Lambda::Function' supports Tags but none are configured -- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L814 in `quickstart_openshift_yaml` - > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1055 in `quickstart_openshift_yaml` - > Resource 'OpenShiftInternalSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1282 in `quickstart_openshift_yaml` - > Resource 'OpenShiftMasterELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1317 in `quickstart_openshift_yaml` - > Resource 'OpenShiftMasterInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1370 in `quickstart_openshift_yaml` - > Resource 'OpenShiftNodeInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured -- **I9040** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1395 in `quickstart_openshift_yaml` - > Resource 'OpenShiftNodeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1637 in `quickstart_openshift_yaml` - > Resource 'OpenShiftSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `SetupRole` (AWS::IAM::Role) → `Properties.Tags` L1657 in `quickstart_openshift_yaml` - > Resource 'SetupRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `quickstart_test_yaml` - > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured -- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L920 in `quickstart_vpc-management_json` - > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L723 in `quickstart_vpc-management_json` - > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L767 in `quickstart_vpc-management_json` - > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L775 in `quickstart_vpc-management_json` - > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L380 in `quickstart_vpc-management_json` - > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured -- **I9040** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.Tags` L483 in `quickstart_vpc_json` - > Resource 'DHCPOptions' of type 'AWS::EC2::DHCPOptions' supports Tags but none are configured -- **I9040** `NAT1EIP` (AWS::EC2::EIP) → `Properties.Tags` L1749 in `quickstart_vpc_json` - > Resource 'NAT1EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT2EIP` (AWS::EC2::EIP) → `Properties.Tags` L1768 in `quickstart_vpc_json` - > Resource 'NAT2EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT3EIP` (AWS::EC2::EIP) → `Properties.Tags` L1787 in `quickstart_vpc_json` - > Resource 'NAT3EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NAT4EIP` (AWS::EC2::EIP) → `Properties.Tags` L1806 in `quickstart_vpc_json` - > Resource 'NAT4EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured -- **I9040** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.Tags` L1825 in `quickstart_vpc_json` - > Resource 'NATGateway1' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.Tags` L1841 in `quickstart_vpc_json` - > Resource 'NATGateway2' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.Tags` L1857 in `quickstart_vpc_json` - > Resource 'NATGateway3' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.Tags` L1873 in `quickstart_vpc_json` - > Resource 'NATGateway4' of type 'AWS::EC2::NatGateway' supports Tags but none are configured -- **I9040** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L2096 in `quickstart_vpc_json` - > Resource 'NATInstanceSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured -- **I9040** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L2116 in `quickstart_vpc_json` - > Resource 'S3VPCEndpoint' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured +- **W2509** → `Parameters.DBPassword` L6 in `integration_resources-cloudformation-init_yaml` + > Parameter 'DBPassword' appears to be a password but does not have NoEcho set to true + +## Intentional Divergence - 216 correct findings across 7 rules + +These rules have cfn-lint equivalents, but authoritative CloudFormation +or IAM behavior proves the unmatched cases are correct. They remain +distinct from both false positives and engine-extra checks. -### W9003 - 168 findings +### W9003 - 191 findings - **W9003** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L9 in `bad_aurora_with_allocated_storage_yaml` > 100 is not of type 'string' - automatically coerced (number to string) @@ -20678,6 +1415,10 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > 1 is not of type 'string' - automatically coerced (number to string) - **W9003** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.2.DeviceIndex` L41 in `integration_formats_yaml` > 2 is not of type 'string' - automatically coerced (number to string) +- **W9003** `Database` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L650 in `lsp_comprehensive_json` + > 100 (from Fn::If on condition 'IsProduction') is not of type 'string' - automatically coerced (number to string) +- **W9003** `Database` (AWS::RDS::DBInstance) → `Properties.AllocatedStorage` L273 in `lsp_comprehensive_yaml` + > 100 (from Fn::If on condition 'IsProduction') is not of type 'string' - automatically coerced (number to string) - **W9003** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupEgress.0.IpProtocol` L196 in `lsp_comprehensive_yaml` > -1 is not of type 'string' - automatically coerced (number to string) - **W9003** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.MetricTransformations.0.MetricValue` L2197 in `quickstart_cis_benchmark_yaml` @@ -20814,6 +1555,48 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > '20' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.TimeoutInMinutes` L577 in `quickstart_nist_high_main_yaml` > '20' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.0.AssociatePublicIpAddress` L365 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces.0.DeleteOnTermination` L366 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `KeyGen` (AWS::Lambda::Function) → `Properties.Timeout` L811 in `quickstart_openshift_yaml` + > '5' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L853 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L905 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L1077 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L1130 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags.0.PropagateAtLaunch` L1362 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.FromPort` L1403 in `quickstart_openshift_yaml` + > '8080' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.ToPort` L1405 in `quickstart_openshift_yaml` + > '8080' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.FromPort` L1408 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.ToPort` L1410 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.0.Ebs.VolumeSize` L1459 in `quickstart_openshift_yaml` + > '80' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings.1.Ebs.VolumeSize` L1463 in `quickstart_openshift_yaml` + > '110' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` + > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.FromPort` L1645 in `quickstart_openshift_yaml` + > '8443' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.1.ToPort` L1647 in `quickstart_openshift_yaml` + > '8444' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.FromPort` L1650 in `quickstart_openshift_yaml` + > '22' is not of type 'integer' - automatically coerced (string to integer) +- **W9003** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress.2.ToPort` L1652 in `quickstart_openshift_yaml` + > '22' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.TimeoutInMinutes` L386 in `quickstart_vpc-management_json` > '20' is not of type 'integer' - automatically coerced (string to integer) - **W9003** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupEgress.0.FromPort` L818 in `quickstart_vpc-management_json` @@ -20925,6 +1708,15875 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9003** `VPC` (AWS::EC2::VPC) → `Properties.EnableDnsSupport` L515 in `quickstart_vpc_json` > 'true' is not of type 'boolean' - automatically coerced (string to boolean) +### I3011 - 12 findings - Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy + +- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `Function` (AWS::Serverless::Application) L3 in `good_resources_properties_templated_code_sam_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_no_primarykey_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `MyTable` (AWS::Serverless::SimpleTable) L3 in `good_sam_simpletable_valid_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App1` (AWS::Serverless::Application) L3 in `good_transform_applications_location_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `App2` (AWS::Serverless::Application) L7 in `good_transform_applications_location_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` + > 'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) +- **I3011** `AppName` (AWS::Serverless::Application) L18 in `good_transform_yaml` + > 'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource) + +### F3003 - 6 findings - Required Resource properties are missing + +- **F3003** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties` L69 in `bad_cross_resource_task10_yaml` + > 'TransitEncryptionEnabled' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'AllocatedStorage' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'Iops' is a required property (from extension) +- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > 'StorageType' is a required property (from extension) +- **F3003** `Function3` (AWS::Lambda::Function) → `Properties` L25 in `bad_resources_lambda_required_properties_yaml` + > 'Runtime' is a required property (from extension) +- **F3003** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties` L37 in `gh-issues_issue-235_yaml` + > 'StorageEncrypted' is a required property (from extension) + +### E1028 - 3 findings + +- **E1028** → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression +- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.0` L236 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression +- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.2.Fn::If.0` L241 in `lsp_condition-usage_yaml` + > Fn::If first element must be the name of a condition, not an expression + +### F3002 - 2 findings - Resource properties are invalid + +- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadKey` L60 in `bad_conditions_yaml` + > Additional properties are not allowed ('BadKey' was unexpected) +- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadValue` L60 in `bad_conditions_yaml` + > Additional properties are not allowed ('BadValue' was unexpected) + +### E3510 - 1 findings - Validate identity based IAM polices + +- **E3510** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyDocument.Id` L47 in `bad_resources_iam_identity_policy_e3510_yaml` + > Additional properties are not allowed ('Id' was unexpected) + +### W1019 - 1 findings + +- **W1019** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` + > Parameter 'UnusedKey' not used in Fn::Sub template string + +## Reference Suppressed - 4 findings excluded from parity scoring + +These engine diagnostics correspond to checks explicitly disabled by +template-local cfn-lint configuration. They are shown for transparency +but are neither false positives nor engine-extra findings. + +### F3002 - 2 findings + +- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_directives_yaml` + > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) +- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_mandatory_checks_yaml` + > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) + +### E3001 - 1 findings + +- **E3001** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `BadProperty` L19 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastPass' has invalid property 'BadProperty'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, + +### W3030 - 1 findings + +- **W3030** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.VersioningConfiguration.Status` L30 in `bad_core_directives_yaml` + > 'Enabled1' is not one of ['Enabled', 'Suspended'] + +## Reference Out of Scope - 20 findings excluded from recall + +These reference diagnostics belong to explicitly documented checks that +are not comparable to offline template validation. They remain visible +here and are never silently discarded or counted as false negatives. + +### E0002 - 8 findings + +> Scope rationale: cfn-lint rule-execution failure rather than a template contract. + +- **E0002** L1 in `bad_core_E3001_resource_shape_yaml` + > Unknown exception while processing rule E1029: "'str_node' object has no attribute 'get'" +- **E0002** L1 in `bad_core_conditions_list_yaml` + > Unknown exception while processing rule W8001: "'list_node' object has no attribute 'items'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule E3007: "argument of type 'NoneType' is not iterable" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W2001: "'NoneType' object has no attribute 'keys'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W2501: "'NoneType' object has no attribute 'keys'" +- **E0002** L1 in `bad_core_sections_not_objects_yaml` + > Unknown exception while processing rule W7001: "'list_node' object has no attribute 'items'" +- **E0002** L1 in `bad_functions_foreach_no_transform_yaml` + > Unknown exception while processing rule E1029: "'list_node' object has no attribute 'get'" +- **E0002** L1 in `gh-issues_issue-235_yaml` + > Unknown exception while processing rule I3100: "'str_node' object has no attribute 'get'" + +### E3043 - 8 findings + +> Scope rationale: requires loading a referenced nested template from the local filesystem. + +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "One" is not specified when condition "IsUsWest2" is True and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified when condition "IsUsWest2" is False and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified when condition "IsUsWest2" is False and when condition "IsUsEast1" is True +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsWest2" is False and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template when condition "IsUsWest2" is True and when condition "IsUsEast1" is False +- **E3043** `Stack3` → `Properties.Parameters` L18 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Zero" doesn't exist in nested stack template when condition "IsUsWest2" is False and when condition "IsUsEast1" is True +- **E3043** `StackNormal` → `Properties.Parameters` L10 in `bad_resources_cloudformation_stacks_yaml` + > Nested stack template parameter "Two" is not specified at Resources/StackNormal/Properties/Parameters +- **E3043** `StackNormal` → `Properties.Parameters.Three` L12 in `bad_resources_cloudformation_stacks_yaml` + > Specified parameter "Three" doesn't exist in nested stack template at Resources/StackNormal/Properties/Parameters/Three + +### W4005 - 2 findings + +> Scope rationale: cfn-lint-specific metadata configuration. + +- **W4005** → `Metadata.cfn-lint.config.ignore_checks` L6 in `bad_core_config_parameters_yaml` + > 'E0101' is not of type 'array' +- **W4005** → `Metadata.cfn-lint.config.bad_checks` L12 in `integration_metdata_yaml` + > Additional properties are not allowed ('bad_checks' was unexpected) + +### W4001 - 1 findings + +> Scope rationale: CloudFormation console-interface metadata is outside the validator scope. + +- **W4001** → `Metadata.AWS::CloudFormation::Interface.ParameterGroups.0.Parameters.0` L9 in `integration_metdata_yaml` + > 'Vpc' is not one of ['VpcId'] + +### W6001 - 1 findings + +> Scope rationale: cross-stack import advisory is outside offline template correctness. + +- **W6001** → `Outputs.ImportedValue.Value.Fn::ImportValue` L39 in `good_output_value_string_yaml` + > The output value {'Fn::ImportValue': 'SomeExportedName'} is an import from another output + +## Reference Incorrect - 8 cfn-lint findings excluded from FN and recall across 2 rules + +These are cfn-lint findings demonstrably wrong per CloudFormation's actual +behavior. They are excluded from false negatives and recall calculation. + +### E3048 - 5 incorrect findings - Validate ECS Fargate tasks have required properties and values + +- **E3048** `ThirtyTwoVcpuUnsupportedSixtyFourGb` → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' +- **E3048** `ThirtyTwoVcpuUnsupportedTwoFortyGb` → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > 32768 is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] +- **E3048** `ThirtyTwoVcpuOneTwentyGb` → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` + > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] +- **E3048** `ThirtyTwoVcpuSixtyGb` → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` + > '32 vCPU' does not match '^(\\.25|\\.5|1|2|4|8|16)\\s*(?i)vCpu$' +- **E3048** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` + > '32768' is not one of ['256', '512', '1024', '2048', '4096', '8192', '16384'] + +### E3047 - 3 incorrect findings - Validate ECS Fargate tasks have the right combination of CPU and memory + +- **E3047** `ThirtyTwoVcpuOneTwentyGb` → `Properties` L71 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32768' is not compatible with memory '122880' +- **E3047** `ThirtyTwoVcpuSixtyGb` → `Properties` L55 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32 vCPU' is not compatible with memory '60 GB' +- **E3047** `ThirtyTwoVcpuTwoFortyFourGb` → `Properties` L87 in `good_ecs_fargate_units_and_sizes_yaml` + > Cpu '32768' is not compatible with memory '244 GB' + +## Severity Mismatches - 140 matched identity pairs + +The same canonical diagnostic identity was paired, but severity differs +between the reference and the engine. The pair remains a TP. + +- **E1001** `` in `bad_generic_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_not_cloudformation_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_date_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_null_yaml`: reference Error vs engine Fatal +- **E1001** `` in `bad_templates_base_yaml`: reference Error vs engine Fatal +- **E1001** `` in `good_custom_is-defined_yaml`: reference Error vs engine Fatal +- **E1001** `` in `lsp_constants_json`: reference Error vs engine Fatal +- **E1001** `` in `lsp_constants_yaml`: reference Error vs engine Fatal +- **E1011** `Bucket` in `bad_findinmap_bad_yaml`: reference Error vs engine Fatal +- **E3001** `Fn::ForEach::Buckets` in `bad_functions_foreach_no_transform_yaml`: reference Error vs engine Fatal +- **E3001** `my.Instance` in `bad_resources_name_yaml`: reference Error vs engine Fatal +- **E3001** `my_Instance` in `bad_resources_name_yaml`: reference Error vs engine Fatal +- **E7001** `` in `bad_invalid_mapping_structure_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction2` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **E9004** `myLambdaFunction3` in `bad_resources_lambda_function_property_value_limits_yaml`: reference Error vs engine Fatal +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `EC2Instance` in `bad_conditions_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: reference Fatal vs engine Error +- **F3012** `myTable` in `bad_core_config_configure_e3012_yaml`: reference Fatal vs engine Warning +- **F3012** `rAMIComplianceFunction` in `quickstart_nist_config_rules_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailValidationFunction` in `quickstart_nist_config_rules_yaml`: reference Fatal vs engine Warning +- **F3012** `rArchiveLogsBucket` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rArchiveLogsBucket` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailChangeAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rCloudTrailLogGroup` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMCreateAccessKeyAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rIAMPolicyChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNetworkAclChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rRootActivityAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupChangesAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rUnauthorizedAttemptAlarm` in `quickstart_nist_logging_yaml`: reference Fatal vs engine Warning +- **F3012** `rNatInstanceTemplate` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupBastion` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupPeered` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupPeered` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromMgmt` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromMgmt` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCManagement` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCManagement` in `quickstart_nist_vpc_management_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLEgressPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowALLfromPrivEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternal` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowAllTCPInternalEgress` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowBastionSSHAccess` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowEgressReturnTCP` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPSPublic` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowHTTPfromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowMgmtAccessSSHtoPrivate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNACLRuleAllowReturnTCPPriv` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rNatInstanceTemplate` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupMgmtBastion` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupMgmtBastion` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupSSHFromProd` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rSecurityGroupVpcNat` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCProduction` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3012** `rVPCProduction` in `quickstart_nist_vpc_production_yaml`: reference Fatal vs engine Warning +- **F3030** `ComputeEnvironment` in `bad_W3030_enum_case_insensitive_mismatch_yaml`: reference Fatal vs engine Warning +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastFail` in `bad_core_directives_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastFail` in `bad_core_mandatory_checks_yaml`: reference Fatal vs engine Warning +- **F3030** `myBucketFirstAndLastPass` in `bad_core_mandatory_checks_yaml`: reference Fatal vs engine Warning +- **F3030** `MyEC2Instance` in `bad_properties_ebs_yaml`: reference Fatal vs engine Warning +- **F3030** `Bucket` in `bad_schema_enum_violation_yaml`: reference Fatal vs engine Warning +- **F3030** `Bucket` in `bad_schema_type_mismatch_yaml`: reference Fatal vs engine Warning +- **F3030** `ImagePipeline7DDDE57F` in `gh-issues_issue-186-imagebuilder_json`: reference Fatal vs engine Warning +- **F3030** `MyFunction` in `gh-issues_issue-47_json`: reference Fatal vs engine Warning +- **F3030** `FutureNodeFunc` in `gh-issues_issue-68_json`: reference Fatal vs engine Warning +- **F3030** `MyFunc` in `gh-issues_issue-68_json`: reference Fatal vs engine Warning +- **F3030** `Table2` in `integration_aws-dynamodb-table_yaml`: reference Fatal vs engine Warning +- **W3049** `TargetGroup` in `bad_ecs_dynamic_port_no_traffic_yaml`: reference Error vs engine Warning +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: reference Error vs engine Warning +- **W3049** `TargetGroup` in `gh-issues_issue-42_yaml`: reference Error vs engine Info + +## Engine Extra - 8089 correct findings across 30 rules + +These are correct diagnostics the engine reports that cfn-lint does not cover. + +### I9001 - 5465 findings + +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `bad_E1050_dynamic_ref_malformed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L11 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `A` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `B` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `C` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `D` (AWS::S3::Bucket) → `Properties.BucketName` L21 in `bad_E3019_four_way_group_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `JoinBucket` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralA` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralB` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `RefBucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubBucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_E3019_identity_reference_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `DirectRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L19 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L20 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ImplicitSub` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L24 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `JoinRef` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_E3022_equivalent_subnet_forms_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `bad_E3023_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `bad_E3023_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `bad_E3023_conditional_record_items_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerLiteral` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L21 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerParam` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L40 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L29 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L28 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefLiteralMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L27 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L48 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.ResourceId` L47 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodRefParamMismatch` (AWS::ApiGateway::Method) → `Properties.RestApiId` L46 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AuthorizerB` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L20 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L28 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.ResourceId` L27 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodA` (AWS::ApiGateway::Method) → `Properties.RestApiId` L26 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `GoodCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L34 in `bad_F3006_invalid_aws_namespaces_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `bad_F3018_conditional_required_novalue_yaml` + > Property 'PermissionModel' is create-only; updating it will cause resource replacement +- **I9001** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `bad_F3018_conditional_required_novalue_yaml` + > Property 'StackSetName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L8 in `bad_F3031_log_group_name_dollar_brace_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `VpcControl` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `bad_I9001_conditional_create_only_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.CidrBlock` L8 in `bad_I9001_conditional_create_only_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcWithConditionalCreateOnly` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `bad_I9001_conditional_create_only_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_W1028_allowedvalues_excludes_literal_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L8 in `bad_W1053_dynref_spaces_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_W1054_raw_pseudo_param_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L13 in `bad_W3010_full_coverage_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L45 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.AvailabilityZone` L17 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L18 in `bad_W3010_full_coverage_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L22 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `bad_W3010_full_coverage_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `bad_W3010_full_coverage_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.AvailabilityZone` L63 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Rds` (AWS::RDS::DBInstance) → `Properties.Engine` L65 in `bad_W3010_full_coverage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L36 in `bad_W3010_full_coverage_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L35 in `bad_W3010_full_coverage_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L34 in `bad_W3010_full_coverage_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L54 in `bad_W3010_full_coverage_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L55 in `bad_W3010_full_coverage_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L56 in `bad_W3010_full_coverage_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L15 in `bad_W3030_enum_case_insensitive_mismatch_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `ComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `bad_W3030_enum_case_insensitive_mismatch_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L10 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `bad_aurora_with_allocated_storage_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `bad_aurora_with_allocated_storage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L56 in `bad_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.Device` L75 in `bad_conditions_yaml` + > Property 'Device' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.InstanceId` L73 in `bad_conditions_yaml` + > Property 'InstanceId' is create-only; updating it will cause resource replacement +- **I9001** `MountPoint` (AWS::EC2::VolumeAttachment) → `Properties.VolumeId` L74 in `bad_conditions_yaml` + > Property 'VolumeId' is create-only; updating it will cause resource replacement +- **I9001** `BadConditionType` (AWS::S3::Bucket) → `Properties.BucketName` L22 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.BucketName` L27 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ValidResource` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `bad_core_E3001_resource_shape_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L92 in `bad_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L87 in `bad_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `bad_core_conditions_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L37 in `bad_core_conditions_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L65 in `bad_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L66 in `bad_core_conditions_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `bad_core_conditions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `bad_core_conditions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L21 in `bad_core_config_configure_e3012_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L17 in `bad_core_config_configure_e3012_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L10 in `bad_cross_resource_task10_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L42 in `bad_cross_resource_task10_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BadFargateService` (AWS::ECS::Service) → `Properties.LaunchType` L76 in `bad_cross_resource_task10_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L55 in `bad_cross_resource_task10_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BadImageLambda` (AWS::Lambda::Function) → `Properties.PackageType` L56 in `bad_cross_resource_task10_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L20 in `bad_cross_resource_task10_yaml` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L14 in `bad_cross_resource_task10_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LC` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L15 in `bad_cross_resource_task10_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L35 in `bad_cross_resource_task10_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L36 in `bad_cross_resource_task10_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L37 in `bad_cross_resource_task10_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `bad_cross_resource_task10_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `bad_cross_resource_task10_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `bad_cross_resource_task10_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_cross_resource_task10_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_cross_resource_task10_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MySNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L26 in `bad_duplicate_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_duplicate_primary_id_multi_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `bad_duplicate_primary_id_multi_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_duplicate_primary_id_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_duplicate_primary_id_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_attribute_mismatch_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BadTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_attribute_mismatch_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_prod_no_kms_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ProdTable` (AWS::DynamoDB::Table) → `Properties.TableName` L7 in `bad_dynamodb_prod_no_kms_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L11 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L15 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L16 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L17 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L6 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `bad_ecs_fargate_mismatch_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `bad_ecs_fargate_mismatch_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L8 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L9 in `bad_ecs_fargate_mismatch_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `bad_ecs_fargate_mismatch_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `bad_ecs_role_no_boundary_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L27 in `bad_ecs_role_no_boundary_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L26 in `bad_ecs_role_no_boundary_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L6 in `bad_elb_http_443_yaml` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `bad_fargate_bad_cpu_memory_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.Cluster` L9 in `bad_fargate_daemon_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.LaunchType` L6 in `bad_fargate_daemon_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateDaemon` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L7 in `bad_fargate_daemon_yaml` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `bad_fargate_daemon_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L16 in `bad_fargate_daemon_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `bad_fargate_daemon_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L17 in `bad_fargate_daemon_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L18 in `bad_fargate_daemon_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L14 in `bad_fargate_daemon_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_findinmap_bad_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_formatters_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L9 in `bad_formatters_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_base64_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L11 in `bad_functions_base64_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L11 in `bad_functions_findinmap_enhanced_invalid_key_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L16 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L22 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L34 in `bad_functions_getaz_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `bad_functions_getaz_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L31 in `bad_functions_getaz_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `bad_functions_import_value_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `bad_functions_import_value_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_join_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L11 in `bad_functions_join_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `bad_functions_join_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_functions_join_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L54 in `bad_functions_ref_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L51 in `bad_functions_ref_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L52 in `bad_functions_ref_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L53 in `bad_functions_ref_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L62 in `bad_functions_ref_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L66 in `bad_functions_ref_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L35 in `bad_functions_ref_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_functions_ref_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L33 in `bad_functions_ref_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L34 in `bad_functions_ref_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L43 in `bad_functions_ref_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L46 in `bad_functions_ref_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `bad_functions_ref_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L12 in `bad_functions_ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_functions_ref_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L24 in `bad_functions_ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L30 in `bad_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `bad_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L10 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L18 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L17 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L28 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L35 in `bad_functions_select_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `bad_functions_select_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.AdditionalInfo` L12 in `bad_functions_sub_needed_yaml` + > Property 'AdditionalInfo' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `bad_functions_sub_needed_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `mySnsTopic` (AWS::SNS::Topic) → `Properties.TopicName` L33 in `bad_functions_sub_needed_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L114 in `bad_generic_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L122 in `bad_generic_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L48 in `bad_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L43 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L44 in `bad_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L45 in `bad_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L63 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L222 in `bad_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.ImageId` L219 in `bad_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.InstanceType` L220 in `bad_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.KeyName` L221 in `bad_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L223 in `bad_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L212 in `bad_generic_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PermitAllInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L213 in `bad_generic_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L105 in `bad_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L81 in `bad_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L139 in `bad_generic_yaml` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L196 in `bad_generic_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L204 in `bad_generic_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `myAcl` (AWS::WAFRegional::WebACL) → `Properties.Name` L143 in `bad_generic_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L15 in `bad_hard_coded_arn_properties_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L36 in `bad_hard_coded_arn_properties_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_hardcoded_partition_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L10 in `bad_hardcoded_partition_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `Role` (AWS::IAM::Role) → `Properties.Path` L6 in `bad_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `R` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `bad_if_wrong_arity_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.EngineName` L6 in `bad_issues_yaml` + > Property 'EngineName' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.MajorEngineVersion` L7 in `bad_issues_yaml` + > Property 'MajorEngineVersion' is create-only; updating it will cause resource replacement +- **I9001** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.OptionGroupDescription` L8 in `bad_issues_yaml` + > Property 'OptionGroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Fn` (AWS::Lambda::Function) → `Properties.PackageType` L11 in `bad_lambda_image_handler_intrinsic_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_no_snapstart_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `bad_lambda_permission_no_source_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `bad_lambda_permission_no_source_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `bad_lambda_permission_no_source_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `bad_lambda_permission_no_source_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_snapstart_bad_runtime_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L21 in `bad_lambda_sqs_timeout_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Func` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zip_no_handler_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_lambda_zipfile_java_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.ImageId` L89 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.InstanceType` L90 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource1` (AWS::EC2::Instance) → `Properties.UserData` L91 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.ImageId` L980 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.InstanceType` L981 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource10` (AWS::EC2::Instance) → `Properties.UserData` L982 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.ImageId` L9890 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.InstanceType` L9891 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource100` (AWS::EC2::Instance) → `Properties.UserData` L9892 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.ImageId` L9989 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.InstanceType` L9990 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource101` (AWS::EC2::Instance) → `Properties.UserData` L9991 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.ImageId` L10088 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.InstanceType` L10089 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource102` (AWS::EC2::Instance) → `Properties.UserData` L10090 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.ImageId` L10187 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.InstanceType` L10188 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource103` (AWS::EC2::Instance) → `Properties.UserData` L10189 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.ImageId` L10286 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.InstanceType` L10287 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource104` (AWS::EC2::Instance) → `Properties.UserData` L10288 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.ImageId` L10385 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.InstanceType` L10386 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource105` (AWS::EC2::Instance) → `Properties.UserData` L10387 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.ImageId` L10484 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.InstanceType` L10485 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource106` (AWS::EC2::Instance) → `Properties.UserData` L10486 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.ImageId` L10583 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.InstanceType` L10584 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource107` (AWS::EC2::Instance) → `Properties.UserData` L10585 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.ImageId` L10682 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.InstanceType` L10683 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource108` (AWS::EC2::Instance) → `Properties.UserData` L10684 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.ImageId` L10781 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.InstanceType` L10782 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource109` (AWS::EC2::Instance) → `Properties.UserData` L10783 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.ImageId` L1079 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.InstanceType` L1080 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource11` (AWS::EC2::Instance) → `Properties.UserData` L1081 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.ImageId` L10880 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.InstanceType` L10881 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource110` (AWS::EC2::Instance) → `Properties.UserData` L10882 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.ImageId` L10979 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.InstanceType` L10980 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource111` (AWS::EC2::Instance) → `Properties.UserData` L10981 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.ImageId` L11078 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.InstanceType` L11079 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource112` (AWS::EC2::Instance) → `Properties.UserData` L11080 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.ImageId` L11177 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.InstanceType` L11178 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource113` (AWS::EC2::Instance) → `Properties.UserData` L11179 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.ImageId` L11276 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.InstanceType` L11277 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource114` (AWS::EC2::Instance) → `Properties.UserData` L11278 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.ImageId` L11375 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.InstanceType` L11376 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource115` (AWS::EC2::Instance) → `Properties.UserData` L11377 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.ImageId` L11474 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.InstanceType` L11475 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource116` (AWS::EC2::Instance) → `Properties.UserData` L11476 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.ImageId` L11573 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.InstanceType` L11574 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource117` (AWS::EC2::Instance) → `Properties.UserData` L11575 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.ImageId` L11672 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.InstanceType` L11673 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource118` (AWS::EC2::Instance) → `Properties.UserData` L11674 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.ImageId` L11771 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.InstanceType` L11772 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource119` (AWS::EC2::Instance) → `Properties.UserData` L11773 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.ImageId` L1178 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.InstanceType` L1179 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource12` (AWS::EC2::Instance) → `Properties.UserData` L1180 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.ImageId` L11870 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.InstanceType` L11871 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource120` (AWS::EC2::Instance) → `Properties.UserData` L11872 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.ImageId` L11969 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.InstanceType` L11970 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource121` (AWS::EC2::Instance) → `Properties.UserData` L11971 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.ImageId` L12068 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.InstanceType` L12069 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource122` (AWS::EC2::Instance) → `Properties.UserData` L12070 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.ImageId` L12167 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.InstanceType` L12168 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource123` (AWS::EC2::Instance) → `Properties.UserData` L12169 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.ImageId` L12266 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.InstanceType` L12267 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource124` (AWS::EC2::Instance) → `Properties.UserData` L12268 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.ImageId` L12365 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.InstanceType` L12366 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource125` (AWS::EC2::Instance) → `Properties.UserData` L12367 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.ImageId` L12464 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.InstanceType` L12465 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource126` (AWS::EC2::Instance) → `Properties.UserData` L12466 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.ImageId` L12563 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.InstanceType` L12564 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource127` (AWS::EC2::Instance) → `Properties.UserData` L12565 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.ImageId` L12662 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.InstanceType` L12663 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource128` (AWS::EC2::Instance) → `Properties.UserData` L12664 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.ImageId` L12761 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.InstanceType` L12762 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource129` (AWS::EC2::Instance) → `Properties.UserData` L12763 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.ImageId` L1277 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.InstanceType` L1278 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource13` (AWS::EC2::Instance) → `Properties.UserData` L1279 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.ImageId` L12860 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.InstanceType` L12861 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource130` (AWS::EC2::Instance) → `Properties.UserData` L12862 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.ImageId` L12959 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.InstanceType` L12960 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource131` (AWS::EC2::Instance) → `Properties.UserData` L12961 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.ImageId` L13058 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.InstanceType` L13059 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource132` (AWS::EC2::Instance) → `Properties.UserData` L13060 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.ImageId` L13157 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.InstanceType` L13158 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource133` (AWS::EC2::Instance) → `Properties.UserData` L13159 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.ImageId` L13256 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.InstanceType` L13257 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource134` (AWS::EC2::Instance) → `Properties.UserData` L13258 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.ImageId` L13355 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.InstanceType` L13356 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource135` (AWS::EC2::Instance) → `Properties.UserData` L13357 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.ImageId` L13454 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.InstanceType` L13455 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource136` (AWS::EC2::Instance) → `Properties.UserData` L13456 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.ImageId` L13553 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.InstanceType` L13554 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource137` (AWS::EC2::Instance) → `Properties.UserData` L13555 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.ImageId` L13652 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.InstanceType` L13653 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource138` (AWS::EC2::Instance) → `Properties.UserData` L13654 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.ImageId` L13751 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.InstanceType` L13752 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource139` (AWS::EC2::Instance) → `Properties.UserData` L13753 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.ImageId` L1376 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.InstanceType` L1377 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource14` (AWS::EC2::Instance) → `Properties.UserData` L1378 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.ImageId` L13850 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.InstanceType` L13851 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource140` (AWS::EC2::Instance) → `Properties.UserData` L13852 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.ImageId` L13949 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.InstanceType` L13950 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource141` (AWS::EC2::Instance) → `Properties.UserData` L13951 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.ImageId` L14048 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.InstanceType` L14049 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource142` (AWS::EC2::Instance) → `Properties.UserData` L14050 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.ImageId` L14147 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.InstanceType` L14148 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource143` (AWS::EC2::Instance) → `Properties.UserData` L14149 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.ImageId` L14246 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.InstanceType` L14247 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource144` (AWS::EC2::Instance) → `Properties.UserData` L14248 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.ImageId` L14345 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.InstanceType` L14346 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource145` (AWS::EC2::Instance) → `Properties.UserData` L14347 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.ImageId` L14444 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.InstanceType` L14445 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource146` (AWS::EC2::Instance) → `Properties.UserData` L14446 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.ImageId` L14543 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.InstanceType` L14544 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource147` (AWS::EC2::Instance) → `Properties.UserData` L14545 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.ImageId` L14642 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.InstanceType` L14643 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource148` (AWS::EC2::Instance) → `Properties.UserData` L14644 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.ImageId` L14741 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.InstanceType` L14742 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource149` (AWS::EC2::Instance) → `Properties.UserData` L14743 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.ImageId` L1475 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.InstanceType` L1476 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource15` (AWS::EC2::Instance) → `Properties.UserData` L1477 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.ImageId` L14840 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.InstanceType` L14841 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource150` (AWS::EC2::Instance) → `Properties.UserData` L14842 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.ImageId` L14939 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.InstanceType` L14940 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource151` (AWS::EC2::Instance) → `Properties.UserData` L14941 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.ImageId` L15038 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.InstanceType` L15039 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource152` (AWS::EC2::Instance) → `Properties.UserData` L15040 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.ImageId` L15137 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.InstanceType` L15138 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource153` (AWS::EC2::Instance) → `Properties.UserData` L15139 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.ImageId` L15236 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.InstanceType` L15237 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource154` (AWS::EC2::Instance) → `Properties.UserData` L15238 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.ImageId` L15335 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.InstanceType` L15336 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource155` (AWS::EC2::Instance) → `Properties.UserData` L15337 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.ImageId` L15434 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.InstanceType` L15435 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource156` (AWS::EC2::Instance) → `Properties.UserData` L15436 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.ImageId` L15533 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.InstanceType` L15534 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource157` (AWS::EC2::Instance) → `Properties.UserData` L15535 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.ImageId` L15632 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.InstanceType` L15633 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource158` (AWS::EC2::Instance) → `Properties.UserData` L15634 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.ImageId` L15731 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.InstanceType` L15732 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource159` (AWS::EC2::Instance) → `Properties.UserData` L15733 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.ImageId` L1574 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.InstanceType` L1575 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource16` (AWS::EC2::Instance) → `Properties.UserData` L1576 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.ImageId` L15830 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.InstanceType` L15831 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource160` (AWS::EC2::Instance) → `Properties.UserData` L15832 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.ImageId` L15929 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.InstanceType` L15930 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource161` (AWS::EC2::Instance) → `Properties.UserData` L15931 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.ImageId` L16028 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.InstanceType` L16029 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource162` (AWS::EC2::Instance) → `Properties.UserData` L16030 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.ImageId` L16127 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.InstanceType` L16128 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource163` (AWS::EC2::Instance) → `Properties.UserData` L16129 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.ImageId` L16226 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.InstanceType` L16227 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource164` (AWS::EC2::Instance) → `Properties.UserData` L16228 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.ImageId` L16325 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.InstanceType` L16326 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource165` (AWS::EC2::Instance) → `Properties.UserData` L16327 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.ImageId` L16424 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.InstanceType` L16425 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource166` (AWS::EC2::Instance) → `Properties.UserData` L16426 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.ImageId` L16523 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.InstanceType` L16524 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource167` (AWS::EC2::Instance) → `Properties.UserData` L16525 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.ImageId` L16622 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.InstanceType` L16623 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource168` (AWS::EC2::Instance) → `Properties.UserData` L16624 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.ImageId` L16721 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.InstanceType` L16722 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource169` (AWS::EC2::Instance) → `Properties.UserData` L16723 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.ImageId` L1673 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.InstanceType` L1674 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource17` (AWS::EC2::Instance) → `Properties.UserData` L1675 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.ImageId` L16820 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.InstanceType` L16821 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource170` (AWS::EC2::Instance) → `Properties.UserData` L16822 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.ImageId` L16919 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.InstanceType` L16920 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource171` (AWS::EC2::Instance) → `Properties.UserData` L16921 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.ImageId` L17018 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.InstanceType` L17019 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource172` (AWS::EC2::Instance) → `Properties.UserData` L17020 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.ImageId` L17117 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.InstanceType` L17118 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource173` (AWS::EC2::Instance) → `Properties.UserData` L17119 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.ImageId` L17216 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.InstanceType` L17217 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource174` (AWS::EC2::Instance) → `Properties.UserData` L17218 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.ImageId` L17315 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.InstanceType` L17316 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource175` (AWS::EC2::Instance) → `Properties.UserData` L17317 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.ImageId` L17414 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.InstanceType` L17415 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource176` (AWS::EC2::Instance) → `Properties.UserData` L17416 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.ImageId` L17513 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.InstanceType` L17514 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource177` (AWS::EC2::Instance) → `Properties.UserData` L17515 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.ImageId` L17612 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.InstanceType` L17613 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource178` (AWS::EC2::Instance) → `Properties.UserData` L17614 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.ImageId` L17711 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.InstanceType` L17712 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource179` (AWS::EC2::Instance) → `Properties.UserData` L17713 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.ImageId` L1772 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.InstanceType` L1773 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource18` (AWS::EC2::Instance) → `Properties.UserData` L1774 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.ImageId` L17810 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.InstanceType` L17811 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource180` (AWS::EC2::Instance) → `Properties.UserData` L17812 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.ImageId` L17909 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.InstanceType` L17910 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource181` (AWS::EC2::Instance) → `Properties.UserData` L17911 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.ImageId` L18008 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.InstanceType` L18009 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource182` (AWS::EC2::Instance) → `Properties.UserData` L18010 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.ImageId` L18107 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.InstanceType` L18108 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource183` (AWS::EC2::Instance) → `Properties.UserData` L18109 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.ImageId` L18206 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.InstanceType` L18207 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource184` (AWS::EC2::Instance) → `Properties.UserData` L18208 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.ImageId` L18305 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.InstanceType` L18306 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource185` (AWS::EC2::Instance) → `Properties.UserData` L18307 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.ImageId` L18404 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.InstanceType` L18405 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource186` (AWS::EC2::Instance) → `Properties.UserData` L18406 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.ImageId` L18503 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.InstanceType` L18504 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource187` (AWS::EC2::Instance) → `Properties.UserData` L18505 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.ImageId` L18602 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.InstanceType` L18603 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource188` (AWS::EC2::Instance) → `Properties.UserData` L18604 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.ImageId` L18701 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.InstanceType` L18702 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource189` (AWS::EC2::Instance) → `Properties.UserData` L18703 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.ImageId` L1871 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.InstanceType` L1872 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource19` (AWS::EC2::Instance) → `Properties.UserData` L1873 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.ImageId` L18800 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.InstanceType` L18801 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource190` (AWS::EC2::Instance) → `Properties.UserData` L18802 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.ImageId` L18899 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.InstanceType` L18900 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource191` (AWS::EC2::Instance) → `Properties.UserData` L18901 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.ImageId` L18998 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.InstanceType` L18999 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource192` (AWS::EC2::Instance) → `Properties.UserData` L19000 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.ImageId` L19097 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.InstanceType` L19098 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource193` (AWS::EC2::Instance) → `Properties.UserData` L19099 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.ImageId` L19196 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.InstanceType` L19197 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource194` (AWS::EC2::Instance) → `Properties.UserData` L19198 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.ImageId` L19295 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.InstanceType` L19296 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource195` (AWS::EC2::Instance) → `Properties.UserData` L19297 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.ImageId` L19394 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.InstanceType` L19395 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource196` (AWS::EC2::Instance) → `Properties.UserData` L19396 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.ImageId` L19493 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.InstanceType` L19494 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource197` (AWS::EC2::Instance) → `Properties.UserData` L19495 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.ImageId` L19592 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.InstanceType` L19593 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource198` (AWS::EC2::Instance) → `Properties.UserData` L19594 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.ImageId` L19691 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.InstanceType` L19692 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource199` (AWS::EC2::Instance) → `Properties.UserData` L19693 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.ImageId` L188 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.InstanceType` L189 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource2` (AWS::EC2::Instance) → `Properties.UserData` L190 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.ImageId` L1970 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.InstanceType` L1971 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource20` (AWS::EC2::Instance) → `Properties.UserData` L1972 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.ImageId` L19790 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.InstanceType` L19791 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource200` (AWS::EC2::Instance) → `Properties.UserData` L19792 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.ImageId` L19889 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.InstanceType` L19890 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource201` (AWS::EC2::Instance) → `Properties.UserData` L19891 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.ImageId` L19988 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.InstanceType` L19989 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource202` (AWS::EC2::Instance) → `Properties.UserData` L19990 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.ImageId` L20087 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.InstanceType` L20088 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource203` (AWS::EC2::Instance) → `Properties.UserData` L20089 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.ImageId` L20186 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.InstanceType` L20187 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource204` (AWS::EC2::Instance) → `Properties.UserData` L20188 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.ImageId` L20285 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.InstanceType` L20286 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource205` (AWS::EC2::Instance) → `Properties.UserData` L20287 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.ImageId` L20384 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.InstanceType` L20385 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource206` (AWS::EC2::Instance) → `Properties.UserData` L20386 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.ImageId` L20483 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.InstanceType` L20484 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource207` (AWS::EC2::Instance) → `Properties.UserData` L20485 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.ImageId` L20582 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.InstanceType` L20583 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource208` (AWS::EC2::Instance) → `Properties.UserData` L20584 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.ImageId` L20681 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.InstanceType` L20682 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource209` (AWS::EC2::Instance) → `Properties.UserData` L20683 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.ImageId` L2069 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.InstanceType` L2070 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource21` (AWS::EC2::Instance) → `Properties.UserData` L2071 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.ImageId` L20780 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.InstanceType` L20781 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource210` (AWS::EC2::Instance) → `Properties.UserData` L20782 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.ImageId` L20879 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.InstanceType` L20880 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource211` (AWS::EC2::Instance) → `Properties.UserData` L20881 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.ImageId` L20978 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.InstanceType` L20979 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource212` (AWS::EC2::Instance) → `Properties.UserData` L20980 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.ImageId` L21077 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.InstanceType` L21078 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource213` (AWS::EC2::Instance) → `Properties.UserData` L21079 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.ImageId` L21176 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.InstanceType` L21177 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource214` (AWS::EC2::Instance) → `Properties.UserData` L21178 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.ImageId` L21275 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.InstanceType` L21276 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource215` (AWS::EC2::Instance) → `Properties.UserData` L21277 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.ImageId` L21374 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.InstanceType` L21375 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource216` (AWS::EC2::Instance) → `Properties.UserData` L21376 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.ImageId` L21473 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.InstanceType` L21474 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource217` (AWS::EC2::Instance) → `Properties.UserData` L21475 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.ImageId` L21572 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.InstanceType` L21573 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource218` (AWS::EC2::Instance) → `Properties.UserData` L21574 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.ImageId` L21671 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.InstanceType` L21672 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource219` (AWS::EC2::Instance) → `Properties.UserData` L21673 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.ImageId` L2168 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.InstanceType` L2169 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource22` (AWS::EC2::Instance) → `Properties.UserData` L2170 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.ImageId` L21770 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.InstanceType` L21771 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource220` (AWS::EC2::Instance) → `Properties.UserData` L21772 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.ImageId` L21869 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.InstanceType` L21870 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource221` (AWS::EC2::Instance) → `Properties.UserData` L21871 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.ImageId` L21968 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.InstanceType` L21969 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource222` (AWS::EC2::Instance) → `Properties.UserData` L21970 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.ImageId` L22067 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.InstanceType` L22068 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource223` (AWS::EC2::Instance) → `Properties.UserData` L22069 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.ImageId` L22166 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.InstanceType` L22167 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource224` (AWS::EC2::Instance) → `Properties.UserData` L22168 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.ImageId` L22265 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.InstanceType` L22266 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource225` (AWS::EC2::Instance) → `Properties.UserData` L22267 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.ImageId` L22364 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.InstanceType` L22365 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource226` (AWS::EC2::Instance) → `Properties.UserData` L22366 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.ImageId` L22463 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.InstanceType` L22464 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource227` (AWS::EC2::Instance) → `Properties.UserData` L22465 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.ImageId` L22562 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.InstanceType` L22563 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource228` (AWS::EC2::Instance) → `Properties.UserData` L22564 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.ImageId` L22661 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.InstanceType` L22662 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource229` (AWS::EC2::Instance) → `Properties.UserData` L22663 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.ImageId` L2267 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.InstanceType` L2268 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource23` (AWS::EC2::Instance) → `Properties.UserData` L2269 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.ImageId` L22760 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.InstanceType` L22761 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource230` (AWS::EC2::Instance) → `Properties.UserData` L22762 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.ImageId` L22859 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.InstanceType` L22860 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource231` (AWS::EC2::Instance) → `Properties.UserData` L22861 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.ImageId` L22958 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.InstanceType` L22959 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource232` (AWS::EC2::Instance) → `Properties.UserData` L22960 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.ImageId` L23057 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.InstanceType` L23058 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource233` (AWS::EC2::Instance) → `Properties.UserData` L23059 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.ImageId` L23156 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.InstanceType` L23157 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource234` (AWS::EC2::Instance) → `Properties.UserData` L23158 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.ImageId` L23255 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.InstanceType` L23256 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource235` (AWS::EC2::Instance) → `Properties.UserData` L23257 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.ImageId` L23354 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.InstanceType` L23355 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource236` (AWS::EC2::Instance) → `Properties.UserData` L23356 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.ImageId` L23453 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.InstanceType` L23454 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource237` (AWS::EC2::Instance) → `Properties.UserData` L23455 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.ImageId` L23552 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.InstanceType` L23553 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource238` (AWS::EC2::Instance) → `Properties.UserData` L23554 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.ImageId` L23651 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.InstanceType` L23652 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource239` (AWS::EC2::Instance) → `Properties.UserData` L23653 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.ImageId` L2366 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.InstanceType` L2367 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource24` (AWS::EC2::Instance) → `Properties.UserData` L2368 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.ImageId` L23750 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.InstanceType` L23751 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource240` (AWS::EC2::Instance) → `Properties.UserData` L23752 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.ImageId` L23849 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.InstanceType` L23850 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource241` (AWS::EC2::Instance) → `Properties.UserData` L23851 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.ImageId` L23948 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.InstanceType` L23949 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource242` (AWS::EC2::Instance) → `Properties.UserData` L23950 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.ImageId` L24047 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.InstanceType` L24048 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource243` (AWS::EC2::Instance) → `Properties.UserData` L24049 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.ImageId` L24146 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.InstanceType` L24147 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource244` (AWS::EC2::Instance) → `Properties.UserData` L24148 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.ImageId` L24245 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.InstanceType` L24246 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource245` (AWS::EC2::Instance) → `Properties.UserData` L24247 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.ImageId` L24344 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.InstanceType` L24345 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource246` (AWS::EC2::Instance) → `Properties.UserData` L24346 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.ImageId` L24443 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.InstanceType` L24444 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource247` (AWS::EC2::Instance) → `Properties.UserData` L24445 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.ImageId` L24542 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.InstanceType` L24543 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource248` (AWS::EC2::Instance) → `Properties.UserData` L24544 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.ImageId` L24641 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.InstanceType` L24642 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource249` (AWS::EC2::Instance) → `Properties.UserData` L24643 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.ImageId` L2465 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.InstanceType` L2466 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource25` (AWS::EC2::Instance) → `Properties.UserData` L2467 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.ImageId` L24740 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.InstanceType` L24741 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource250` (AWS::EC2::Instance) → `Properties.UserData` L24742 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.ImageId` L24839 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.InstanceType` L24840 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource251` (AWS::EC2::Instance) → `Properties.UserData` L24841 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.ImageId` L24938 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.InstanceType` L24939 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource252` (AWS::EC2::Instance) → `Properties.UserData` L24940 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.ImageId` L25037 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.InstanceType` L25038 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource253` (AWS::EC2::Instance) → `Properties.UserData` L25039 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.ImageId` L25136 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.InstanceType` L25137 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource254` (AWS::EC2::Instance) → `Properties.UserData` L25138 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.ImageId` L25235 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.InstanceType` L25236 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource255` (AWS::EC2::Instance) → `Properties.UserData` L25237 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.ImageId` L25334 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.InstanceType` L25335 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource256` (AWS::EC2::Instance) → `Properties.UserData` L25336 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.ImageId` L25433 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.InstanceType` L25434 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource257` (AWS::EC2::Instance) → `Properties.UserData` L25435 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.ImageId` L25532 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.InstanceType` L25533 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource258` (AWS::EC2::Instance) → `Properties.UserData` L25534 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.ImageId` L25631 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.InstanceType` L25632 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource259` (AWS::EC2::Instance) → `Properties.UserData` L25633 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.ImageId` L2564 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.InstanceType` L2565 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource26` (AWS::EC2::Instance) → `Properties.UserData` L2566 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.ImageId` L25730 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.InstanceType` L25731 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource260` (AWS::EC2::Instance) → `Properties.UserData` L25732 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.ImageId` L25829 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.InstanceType` L25830 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource261` (AWS::EC2::Instance) → `Properties.UserData` L25831 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.ImageId` L25928 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.InstanceType` L25929 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource262` (AWS::EC2::Instance) → `Properties.UserData` L25930 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.ImageId` L26027 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.InstanceType` L26028 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource263` (AWS::EC2::Instance) → `Properties.UserData` L26029 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.ImageId` L26126 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.InstanceType` L26127 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource264` (AWS::EC2::Instance) → `Properties.UserData` L26128 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.ImageId` L26225 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.InstanceType` L26226 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource265` (AWS::EC2::Instance) → `Properties.UserData` L26227 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.ImageId` L26324 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.InstanceType` L26325 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource266` (AWS::EC2::Instance) → `Properties.UserData` L26326 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.ImageId` L26423 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.InstanceType` L26424 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource267` (AWS::EC2::Instance) → `Properties.UserData` L26425 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.ImageId` L26522 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.InstanceType` L26523 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource268` (AWS::EC2::Instance) → `Properties.UserData` L26524 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.ImageId` L26621 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.InstanceType` L26622 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource269` (AWS::EC2::Instance) → `Properties.UserData` L26623 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.ImageId` L2663 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.InstanceType` L2664 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource27` (AWS::EC2::Instance) → `Properties.UserData` L2665 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.ImageId` L26720 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.InstanceType` L26721 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource270` (AWS::EC2::Instance) → `Properties.UserData` L26722 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.ImageId` L26819 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.InstanceType` L26820 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource271` (AWS::EC2::Instance) → `Properties.UserData` L26821 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.ImageId` L26918 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.InstanceType` L26919 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource272` (AWS::EC2::Instance) → `Properties.UserData` L26920 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.ImageId` L27017 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.InstanceType` L27018 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource273` (AWS::EC2::Instance) → `Properties.UserData` L27019 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.ImageId` L27116 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.InstanceType` L27117 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource274` (AWS::EC2::Instance) → `Properties.UserData` L27118 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.ImageId` L27215 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.InstanceType` L27216 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource275` (AWS::EC2::Instance) → `Properties.UserData` L27217 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.ImageId` L27314 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.InstanceType` L27315 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource276` (AWS::EC2::Instance) → `Properties.UserData` L27316 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.ImageId` L27413 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.InstanceType` L27414 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource277` (AWS::EC2::Instance) → `Properties.UserData` L27415 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.ImageId` L27512 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.InstanceType` L27513 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource278` (AWS::EC2::Instance) → `Properties.UserData` L27514 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.ImageId` L27611 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.InstanceType` L27612 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource279` (AWS::EC2::Instance) → `Properties.UserData` L27613 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.ImageId` L2762 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.InstanceType` L2763 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource28` (AWS::EC2::Instance) → `Properties.UserData` L2764 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.ImageId` L27710 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.InstanceType` L27711 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource280` (AWS::EC2::Instance) → `Properties.UserData` L27712 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.ImageId` L27809 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.InstanceType` L27810 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource281` (AWS::EC2::Instance) → `Properties.UserData` L27811 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.ImageId` L27908 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.InstanceType` L27909 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource282` (AWS::EC2::Instance) → `Properties.UserData` L27910 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.ImageId` L28007 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.InstanceType` L28008 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource283` (AWS::EC2::Instance) → `Properties.UserData` L28009 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.ImageId` L28106 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.InstanceType` L28107 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource284` (AWS::EC2::Instance) → `Properties.UserData` L28108 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.ImageId` L28205 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.InstanceType` L28206 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource285` (AWS::EC2::Instance) → `Properties.UserData` L28207 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.ImageId` L28304 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.InstanceType` L28305 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource286` (AWS::EC2::Instance) → `Properties.UserData` L28306 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.ImageId` L28403 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.InstanceType` L28404 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource287` (AWS::EC2::Instance) → `Properties.UserData` L28405 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.ImageId` L28502 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.InstanceType` L28503 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource288` (AWS::EC2::Instance) → `Properties.UserData` L28504 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.ImageId` L28601 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.InstanceType` L28602 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource289` (AWS::EC2::Instance) → `Properties.UserData` L28603 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.ImageId` L2861 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.InstanceType` L2862 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource29` (AWS::EC2::Instance) → `Properties.UserData` L2863 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.ImageId` L28700 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.InstanceType` L28701 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource290` (AWS::EC2::Instance) → `Properties.UserData` L28702 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.ImageId` L28799 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.InstanceType` L28800 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource291` (AWS::EC2::Instance) → `Properties.UserData` L28801 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.ImageId` L28898 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.InstanceType` L28899 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource292` (AWS::EC2::Instance) → `Properties.UserData` L28900 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.ImageId` L28997 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.InstanceType` L28998 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource293` (AWS::EC2::Instance) → `Properties.UserData` L28999 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.ImageId` L29096 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.InstanceType` L29097 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource294` (AWS::EC2::Instance) → `Properties.UserData` L29098 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.ImageId` L29195 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.InstanceType` L29196 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource295` (AWS::EC2::Instance) → `Properties.UserData` L29197 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.ImageId` L29294 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.InstanceType` L29295 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource296` (AWS::EC2::Instance) → `Properties.UserData` L29296 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.ImageId` L29393 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.InstanceType` L29394 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource297` (AWS::EC2::Instance) → `Properties.UserData` L29395 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.ImageId` L29492 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.InstanceType` L29493 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource298` (AWS::EC2::Instance) → `Properties.UserData` L29494 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.ImageId` L29591 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.InstanceType` L29592 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource299` (AWS::EC2::Instance) → `Properties.UserData` L29593 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.ImageId` L287 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.InstanceType` L288 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource3` (AWS::EC2::Instance) → `Properties.UserData` L289 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.ImageId` L2960 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.InstanceType` L2961 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource30` (AWS::EC2::Instance) → `Properties.UserData` L2962 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.ImageId` L3059 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.InstanceType` L3060 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource31` (AWS::EC2::Instance) → `Properties.UserData` L3061 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.ImageId` L3158 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.InstanceType` L3159 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource32` (AWS::EC2::Instance) → `Properties.UserData` L3160 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.ImageId` L3257 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.InstanceType` L3258 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource33` (AWS::EC2::Instance) → `Properties.UserData` L3259 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.ImageId` L3356 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.InstanceType` L3357 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource34` (AWS::EC2::Instance) → `Properties.UserData` L3358 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.ImageId` L3455 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.InstanceType` L3456 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource35` (AWS::EC2::Instance) → `Properties.UserData` L3457 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.ImageId` L3554 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.InstanceType` L3555 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource36` (AWS::EC2::Instance) → `Properties.UserData` L3556 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.ImageId` L3653 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.InstanceType` L3654 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource37` (AWS::EC2::Instance) → `Properties.UserData` L3655 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.ImageId` L3752 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.InstanceType` L3753 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource38` (AWS::EC2::Instance) → `Properties.UserData` L3754 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.ImageId` L3851 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.InstanceType` L3852 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource39` (AWS::EC2::Instance) → `Properties.UserData` L3853 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.ImageId` L386 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.InstanceType` L387 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource4` (AWS::EC2::Instance) → `Properties.UserData` L388 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.ImageId` L3950 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.InstanceType` L3951 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource40` (AWS::EC2::Instance) → `Properties.UserData` L3952 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.ImageId` L4049 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.InstanceType` L4050 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource41` (AWS::EC2::Instance) → `Properties.UserData` L4051 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.ImageId` L4148 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.InstanceType` L4149 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource42` (AWS::EC2::Instance) → `Properties.UserData` L4150 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.ImageId` L4247 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.InstanceType` L4248 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource43` (AWS::EC2::Instance) → `Properties.UserData` L4249 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.ImageId` L4346 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.InstanceType` L4347 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource44` (AWS::EC2::Instance) → `Properties.UserData` L4348 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.ImageId` L4445 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.InstanceType` L4446 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource45` (AWS::EC2::Instance) → `Properties.UserData` L4447 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.ImageId` L4544 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.InstanceType` L4545 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource46` (AWS::EC2::Instance) → `Properties.UserData` L4546 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.ImageId` L4643 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.InstanceType` L4644 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource47` (AWS::EC2::Instance) → `Properties.UserData` L4645 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.ImageId` L4742 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.InstanceType` L4743 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource48` (AWS::EC2::Instance) → `Properties.UserData` L4744 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.ImageId` L4841 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.InstanceType` L4842 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource49` (AWS::EC2::Instance) → `Properties.UserData` L4843 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.ImageId` L485 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.InstanceType` L486 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource5` (AWS::EC2::Instance) → `Properties.UserData` L487 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.ImageId` L4940 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.InstanceType` L4941 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource50` (AWS::EC2::Instance) → `Properties.UserData` L4942 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.ImageId` L5039 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.InstanceType` L5040 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource51` (AWS::EC2::Instance) → `Properties.UserData` L5041 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.ImageId` L5138 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.InstanceType` L5139 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource52` (AWS::EC2::Instance) → `Properties.UserData` L5140 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.ImageId` L5237 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.InstanceType` L5238 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource53` (AWS::EC2::Instance) → `Properties.UserData` L5239 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.ImageId` L5336 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.InstanceType` L5337 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource54` (AWS::EC2::Instance) → `Properties.UserData` L5338 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.ImageId` L5435 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.InstanceType` L5436 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource55` (AWS::EC2::Instance) → `Properties.UserData` L5437 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.ImageId` L5534 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.InstanceType` L5535 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource56` (AWS::EC2::Instance) → `Properties.UserData` L5536 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.ImageId` L5633 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.InstanceType` L5634 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource57` (AWS::EC2::Instance) → `Properties.UserData` L5635 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.ImageId` L5732 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.InstanceType` L5733 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource58` (AWS::EC2::Instance) → `Properties.UserData` L5734 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.ImageId` L5831 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.InstanceType` L5832 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource59` (AWS::EC2::Instance) → `Properties.UserData` L5833 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.ImageId` L584 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.InstanceType` L585 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource6` (AWS::EC2::Instance) → `Properties.UserData` L586 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.ImageId` L5930 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.InstanceType` L5931 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource60` (AWS::EC2::Instance) → `Properties.UserData` L5932 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.ImageId` L6029 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.InstanceType` L6030 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource61` (AWS::EC2::Instance) → `Properties.UserData` L6031 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.ImageId` L6128 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.InstanceType` L6129 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource62` (AWS::EC2::Instance) → `Properties.UserData` L6130 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.ImageId` L6227 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.InstanceType` L6228 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource63` (AWS::EC2::Instance) → `Properties.UserData` L6229 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.ImageId` L6326 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.InstanceType` L6327 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource64` (AWS::EC2::Instance) → `Properties.UserData` L6328 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.ImageId` L6425 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.InstanceType` L6426 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource65` (AWS::EC2::Instance) → `Properties.UserData` L6427 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.ImageId` L6524 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.InstanceType` L6525 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource66` (AWS::EC2::Instance) → `Properties.UserData` L6526 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.ImageId` L6623 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.InstanceType` L6624 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource67` (AWS::EC2::Instance) → `Properties.UserData` L6625 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.ImageId` L6722 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.InstanceType` L6723 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource68` (AWS::EC2::Instance) → `Properties.UserData` L6724 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.ImageId` L6821 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.InstanceType` L6822 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource69` (AWS::EC2::Instance) → `Properties.UserData` L6823 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.ImageId` L683 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.InstanceType` L684 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource7` (AWS::EC2::Instance) → `Properties.UserData` L685 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.ImageId` L6920 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.InstanceType` L6921 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource70` (AWS::EC2::Instance) → `Properties.UserData` L6922 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.ImageId` L7019 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.InstanceType` L7020 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource71` (AWS::EC2::Instance) → `Properties.UserData` L7021 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.ImageId` L7118 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.InstanceType` L7119 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource72` (AWS::EC2::Instance) → `Properties.UserData` L7120 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.ImageId` L7217 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.InstanceType` L7218 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource73` (AWS::EC2::Instance) → `Properties.UserData` L7219 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.ImageId` L7316 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.InstanceType` L7317 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource74` (AWS::EC2::Instance) → `Properties.UserData` L7318 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.ImageId` L7415 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.InstanceType` L7416 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource75` (AWS::EC2::Instance) → `Properties.UserData` L7417 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.ImageId` L7514 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.InstanceType` L7515 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource76` (AWS::EC2::Instance) → `Properties.UserData` L7516 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.ImageId` L7613 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.InstanceType` L7614 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource77` (AWS::EC2::Instance) → `Properties.UserData` L7615 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.ImageId` L7712 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.InstanceType` L7713 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource78` (AWS::EC2::Instance) → `Properties.UserData` L7714 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.ImageId` L7811 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.InstanceType` L7812 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource79` (AWS::EC2::Instance) → `Properties.UserData` L7813 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.ImageId` L782 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.InstanceType` L783 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource8` (AWS::EC2::Instance) → `Properties.UserData` L784 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.ImageId` L7910 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.InstanceType` L7911 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource80` (AWS::EC2::Instance) → `Properties.UserData` L7912 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.ImageId` L8009 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.InstanceType` L8010 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource81` (AWS::EC2::Instance) → `Properties.UserData` L8011 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.ImageId` L8108 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.InstanceType` L8109 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource82` (AWS::EC2::Instance) → `Properties.UserData` L8110 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.ImageId` L8207 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.InstanceType` L8208 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource83` (AWS::EC2::Instance) → `Properties.UserData` L8209 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.ImageId` L8306 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.InstanceType` L8307 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource84` (AWS::EC2::Instance) → `Properties.UserData` L8308 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.ImageId` L8405 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.InstanceType` L8406 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource85` (AWS::EC2::Instance) → `Properties.UserData` L8407 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.ImageId` L8504 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.InstanceType` L8505 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource86` (AWS::EC2::Instance) → `Properties.UserData` L8506 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.ImageId` L8603 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.InstanceType` L8604 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource87` (AWS::EC2::Instance) → `Properties.UserData` L8605 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.ImageId` L8702 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.InstanceType` L8703 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource88` (AWS::EC2::Instance) → `Properties.UserData` L8704 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.ImageId` L8801 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.InstanceType` L8802 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource89` (AWS::EC2::Instance) → `Properties.UserData` L8803 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.ImageId` L881 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.InstanceType` L882 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource9` (AWS::EC2::Instance) → `Properties.UserData` L883 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.ImageId` L8900 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.InstanceType` L8901 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource90` (AWS::EC2::Instance) → `Properties.UserData` L8902 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.ImageId` L8999 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.InstanceType` L9000 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource91` (AWS::EC2::Instance) → `Properties.UserData` L9001 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.ImageId` L9098 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.InstanceType` L9099 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource92` (AWS::EC2::Instance) → `Properties.UserData` L9100 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.ImageId` L9197 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.InstanceType` L9198 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource93` (AWS::EC2::Instance) → `Properties.UserData` L9199 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.ImageId` L9296 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.InstanceType` L9297 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource94` (AWS::EC2::Instance) → `Properties.UserData` L9298 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.ImageId` L9395 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.InstanceType` L9396 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource95` (AWS::EC2::Instance) → `Properties.UserData` L9397 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.ImageId` L9494 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.InstanceType` L9495 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource96` (AWS::EC2::Instance) → `Properties.UserData` L9496 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.ImageId` L9593 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.InstanceType` L9594 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource97` (AWS::EC2::Instance) → `Properties.UserData` L9595 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.ImageId` L9692 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.InstanceType` L9693 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource98` (AWS::EC2::Instance) → `Properties.UserData` L9694 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.ImageId` L9791 in `bad_limit_size_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.InstanceType` L9792 in `bad_limit_size_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Resource99` (AWS::EC2::Instance) → `Properties.UserData` L9793 in `bad_limit_size_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `bad_mappings_used_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `bad_mappings_used_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L18 in `bad_override_complete_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `bad_override_complete_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myS3BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `bad_override_include_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L9 in `bad_override_include_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `bad_override_include_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L6 in `bad_pipeline_no_source_first_stage_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_previous_gen_instance_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L6 in `bad_previous_gen_instance_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Engine` L17 in `bad_previous_generation_instances_yaml` + > Property 'Engine' is create-only; updating it will cause resource replacement +- **I9001** `Host` (AWS::EC2::Host) → `Properties.InstanceType` L27 in `bad_previous_generation_instances_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L8 in `bad_previous_generation_instances_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L7 in `bad_previous_generation_instances_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L12 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L9 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L10 in `bad_properties_ebs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L11 in `bad_properties_ebs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L27 in `bad_properties_ebs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L33 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.ImageId` L32 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L45 in `bad_properties_ebs_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L43 in `bad_properties_ebs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L44 in `bad_properties_ebs_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L21 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L22 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Engine` L30 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L31 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L39 in `bad_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L40 in `bad_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L43 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AuxiliaryPublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L45 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L73 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AuxilliaryCustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L74 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L58 in `bad_properties_rt_association_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L64 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L65 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L34 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L36 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L51 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L53 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L28 in `bad_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L58 in `bad_properties_sg_ingress_yaml` + > Property 'CidrIp' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L56 in `bad_properties_sg_ingress_yaml` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L54 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L55 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupRuleSSM` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L57 in `bad_properties_sg_ingress_yaml` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L79 in `bad_properties_sg_ingress_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L80 in `bad_properties_sg_ingress_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L62 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L63 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L64 in `bad_properties_sg_ingress_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L68 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L69 in `bad_properties_sg_ingress_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngress2` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L70 in `bad_properties_sg_ingress_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L74 in `bad_properties_sg_ingress_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupIngressExclusive` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupName` L75 in `bad_properties_sg_ingress_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `bad_properties_sg_ingress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L31 in `bad_properties_sg_ingress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L32 in `bad_properties_sg_ingress_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L10 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Db` (AWS::RDS::DBInstance) → `Properties.Engine` L8 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L7 in `bad_rds_public_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L8 in `bad_rds_public_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L10 in `bad_rds_public_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L34 in `bad_redshift_internet_accessible_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L33 in `bad_redshift_internet_accessible_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `bad_redshift_internet_accessible_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `bad_redshift_internet_accessible_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `bad_redshift_internet_accessible_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `bad_redshift_internet_accessible_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `bad_redshift_internet_accessible_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_redshift_internet_accessible_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L29 in `bad_refs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.ImageId` L26 in `bad_refs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L27 in `bad_refs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.KeyName` L28 in `bad_refs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L37 in `bad_refs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnotherInstance` (AWS::EC2::Instance) → `Properties.UserData` L41 in `bad_refs_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L10 in `bad_refs_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L7 in `bad_refs_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L8 in `bad_refs_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L9 in `bad_refs_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L18 in `bad_refs_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L21 in `bad_refs_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myBucket` (AWS::S3::Bucket) → `Properties.BucketName` L71 in `bad_resources_circular_dependency_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L75 in `bad_resources_circular_dependency_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L54 in `bad_resources_circular_dependency_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L55 in `bad_resources_circular_dependency_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L56 in `bad_resources_circular_dependency_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L149 in `bad_resources_circular_dependency_yaml` + > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L150 in `bad_resources_circular_dependency_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.ImageId` L216 in `bad_resources_circular_dependency_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstanceSub` (AWS::EC2::Instance) → `Properties.UserData` L217 in `bad_resources_circular_dependency_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Path` L110 in `bad_resources_circular_dependency_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.RoleName` L100 in `bad_resources_circular_dependency_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L26 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L27 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L36 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L37 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L44 in `bad_resources_circular_dependency_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L45 in `bad_resources_circular_dependency_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L226 in `bad_resources_circular_dependency_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L223 in `bad_resources_circular_dependency_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Volumes` L258 in `bad_resources_circular_dependency_yaml` + > Property 'Volumes' is create-only; updating it will cause resource replacement +- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `bad_resources_codepipeline_stages_second_stage_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_resources_creation_policy_unsupported_e3055_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_deletionpolicy_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L27 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.KeySchema` L43 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L25 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L24 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L84 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L74 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.KeySchema` L64 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.KeySchema` L53 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L36 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L10 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L206 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L204 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L205 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L203 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L195 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L193 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L194 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L192 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L139 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L137 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L134 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L138 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L136 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L135 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L167 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L165 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L162 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L166 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L164 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L163 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L153 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L151 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Family` L148 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Memory` L152 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L150 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L149 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L125 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L123 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L120 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L124 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L122 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L121 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L182 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L179 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L176 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L180 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L178 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L181 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L177 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L44 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L42 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L38 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L43 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L41 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L39 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L94 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L92 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L93 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L91 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L110 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L107 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L103 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L108 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L106 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L109 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L104 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L62 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L57 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Family` L53 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Memory` L58 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L59 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L54 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L77 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Family` L71 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L29 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Family` L23 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L24 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L104 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L102 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Family` L99 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L103 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L101 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L100 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L117 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L115 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Family` L112 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Memory` L116 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L114 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L113 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L13 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L65 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L63 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L60 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L64 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L62 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L61 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L78 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L76 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L73 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L77 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L75 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L74 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L91 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L89 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Family` L86 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Memory` L90 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L88 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L24 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Family` L21 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Memory` L25 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L23 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L22 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L39 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L37 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L34 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L38 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L36 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L35 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L50 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L47 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L51 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L49 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L48 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L41 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L46 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L96 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L100 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L22 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L30 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L14 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L60 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L64 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L79 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L82 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `rIamRole` (AWS::IAM::Role) → `Properties.RoleName` L9 in `bad_resources_iam_iam_policy_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L89 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'InstanceArn' is create-only; updating it will cause resource replacement +- **I9001** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Name` L90 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.PolicyName` L44 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyBadIdAndCondition` (AWS::IAM::RolePolicy) → `Properties.RoleName` L45 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.GroupName` L76 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyDynamicActionBadEffect` (AWS::IAM::GroupPolicy) → `Properties.PolicyName` L77 in `bad_resources_iam_identity_policy_e3510_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `bad_resources_iam_managed_policy_description_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `bad_resources_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `bad_resources_iam_ref_with_path_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `bad_resources_iam_ref_with_path_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `bad_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `bad_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L74 in `bad_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `bad_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L9 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `bad_resources_lambda_function_property_value_limits_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Function2` (AWS::Lambda::Function) → `Properties.PackageType` L22 in `bad_resources_lambda_required_properties_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L151 in `bad_resources_primary_identifiers_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Project1` (AWS::CodeBuild::Project) → `Properties.Name` L168 in `bad_resources_primary_identifiers_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Project2` (AWS::CodeBuild::Project) → `Properties.Name` L188 in `bad_resources_primary_identifiers_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.Path` L39 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole2` (AWS::IAM::Role) → `Properties.RoleName` L40 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L62 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L63 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L85 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L86 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.Path` L108 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole5` (AWS::IAM::Role) → `Properties.RoleName` L109 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.Path` L130 in `bad_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole6` (AWS::IAM::Role) → `Properties.RoleName` L131 in `bad_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L27 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L34 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Engine` L53 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Engine` L60 in `bad_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L8 in `bad_resources_rds_not_enum_master_username_join_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `JoinedUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L9 in `bad_resources_rds_not_enum_master_username_join_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.Engine` L6 in `bad_resources_rds_not_enum_master_username_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L7 in `bad_resources_rds_not_enum_master_username_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyTopic` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `bad_resources_sns_topic_name_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_resources_update_policy_unsupported_e3016_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Engine` L43 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Engine` L23 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L29 in `bad_resources_updatereplacepolicy_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L16 in `bad_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GroupInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L61 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMixedInvalidFalse` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L105 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMixedInvalidTrue` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L89 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupUnresolvedCnameCardinality` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L131 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L26 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L27 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L15 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L16 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L49 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidFalse` (AWS::Route53::RecordSet) → `Properties.Name` L50 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L37 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMixedInvalidTrue` (AWS::Route53::RecordSet) → `Properties.Name` L38 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L121 in `bad_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnresolvedCnameCardinality` (AWS::Route53::RecordSet) → `Properties.Name` L122 in `bad_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L45 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalInvalidAliasTypes` (AWS::Route53::RecordSet) → `Properties.Name` L46 in `bad_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRecordSetsInvalidFirst` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L54 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRecordSetsInvalidSecond` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L68 in `bad_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L50 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyAAAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L51 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L40 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L41 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L110 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L111 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L64 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCAARecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L65 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L75 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L76 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L86 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyCNAMERecordSetConditions` (AWS::Route53::RecordSet) → `Properties.Name` L87 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyHostedZone` (AWS::Route53::HostedZone) → `Properties.Name` L19 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L99 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyMXRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L100 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyRecordSetGroup` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L121 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L27 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MyTXTRecordSet` (AWS::Route53::RecordSet) → `Properties.Name` L28 in `bad_route53_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PoorlyConfiguredRoute53` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L174 in `bad_route53_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.ValidationSpecification` L35 in `bad_sagemaker_instance_types_yaml` + > Property 'ValidationSpecification' is create-only; updating it will cause resource replacement +- **I9001** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.JobResources` L15 in `bad_sagemaker_instance_types_yaml` + > Property 'JobResources' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_additional_props_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Name` L8 in `bad_schema_composition_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L12 in `bad_schema_conditional_type_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_enum_violation_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `bad_schema_format_violation_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L8 in `bad_schema_format_violation_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.SubnetId` L7 in `bad_schema_format_violation_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L37 in `bad_schema_lifecycle_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EolLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L26 in `bad_schema_lifecycle_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L19 in `bad_schema_lifecycle_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MaintenanceResource` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L20 in `bad_schema_lifecycle_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.MeshName` L13 in `bad_schema_lifecycle_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_schema_numeric_bounds_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Name` L22 in `bad_schema_property_constraints_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PatternBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_property_constraints_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateAuthorityArn` L11 in `bad_schema_property_constraints_yaml` + > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.CertificateSigningRequest` L12 in `bad_schema_property_constraints_yaml` + > Property 'CertificateSigningRequest' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.SigningAlgorithm` L13 in `bad_schema_property_constraints_yaml` + > Property 'SigningAlgorithm' is create-only; updating it will cause resource replacement +- **I9001** `ReadOnlyProp` (AWS::ACMPCA::Certificate) → `Properties.Validity` L14 in `bad_schema_property_constraints_yaml` + > Property 'Validity' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L14 in `bad_schema_required_xor_conditional_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L17 in `bad_schema_required_xor_conditional_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L18 in `bad_schema_required_xor_conditional_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L16 in `bad_schema_required_xor_conditional_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L19 in `bad_schema_required_xor_conditional_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `Lambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `bad_schema_string_length_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L26 in `bad_schema_structural_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L29 in `bad_schema_structural_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L30 in `bad_schema_structural_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L28 in `bad_schema_structural_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyBothIds` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L31 in `bad_schema_structural_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L37 in `bad_schema_structural_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `ScalingPolicyMissingDeps` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L39 in `bad_schema_structural_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.VpcId` L20 in `bad_schema_structural_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_schema_type_mismatch_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.CertificateAuthorityArn` L7 in `bad_schema_write_only_yaml` + > Property 'CertificateAuthorityArn' is create-only; updating it will cause resource replacement +- **I9001** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_security_issues_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_bad_port_range_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `bad_sg_open_egress_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_simple_sub_param_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Topic` (AWS::SNS::Topic) → `Properties.TopicName` L6 in `bad_sns_cross_account_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L81 in `bad_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `bad_sqs_fifo_no_suffix_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DLQ` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L11 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `MainQueue` (AWS::SQS::Queue) → `Properties.QueueName` L10 in `bad_sqs_fifo_standard_dlq_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `bad_ssm_document_invalid_yaml` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `bad_ssm_document_invalid_yaml` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `bad_sub_needed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_sub_nested_intrinsic_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_outside_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_outside_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_outside_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L17 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L16 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L15 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L23 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L22 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L29 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L28 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetC` (AWS::EC2::Subnet) → `Properties.VpcId` L27 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L35 in `bad_subnet_overlap_multi_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.CidrBlock` L34 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetD` (AWS::EC2::Subnet) → `Properties.VpcId` L33 in `bad_subnet_overlap_multi_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_multi_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `bad_subnet_overlap_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `bad_subnet_overlap_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `bad_subnet_overlap_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `bad_subnet_overlap_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `bad_subnet_overlap_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `BadBucket` (AWS::S3::Bucket) → `Properties.BucketName` L10 in `bad_unknown_properties_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L95 in `cdk_DemoStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L80 in `cdk_DemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DataTable` (AWS::DynamoDB::Table) → `Properties.TableName` L86 in `cdk_DemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L128 in `cdk_DemoStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Name` L12 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L69 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L24 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'BrokerName' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L25 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'DeploymentMode' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EncryptionOptions` L26 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EncryptionOptions' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L29 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EngineType' is create-only; updating it will cause resource replacement +- **I9001** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L32 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement +- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L203 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L1078 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.AppId` L18 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Property 'AppId' is create-only; updating it will cause resource replacement +- **I9001** `MasterBranch` (AWS::Amplify::Branch) → `Properties.BranchName` L23 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Property 'BranchName' is create-only; updating it will cause resource replacement +- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentFEC31BD04feb54db86e2f8eed94e1b28001143ce` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L739 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L765 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.StageName` L767 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.ParentId` L780 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.PathPart` L785 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitems9015DBED` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L787 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L882 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L911 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGET59B0F78A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L914 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Action` L797 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.FunctionName` L799 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.Principal` L804 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitems2A648972` (AWS::Lambda::Permission) → `Properties.SourceArn` L806 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Action` L841 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.FunctionName` L843 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.Principal` L848 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsF4364FB2` (AWS::Lambda::Permission) → `Properties.SourceArn` L850 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1052 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1083 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsOPTIONSB46B4D53` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1086 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Action` L924 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.FunctionName` L926 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.Principal` L931 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitems7DA2B753` (AWS::Lambda::Permission) → `Properties.SourceArn` L933 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Action` L968 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.FunctionName` L970 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132POSTitemsAE25CBB6` (AWS::Lambda::Permission) → `Properties.SourceArn` L977 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1009 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1038 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsPOSTDD3E83D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1041 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1097 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1099 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidA29927C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1101 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1450 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1479 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETE21550005` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1482 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Action` L1365 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.FunctionName` L1367 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.Principal` L1372 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid056EB521` (AWS::Lambda::Permission) → `Properties.SourceArn` L1374 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Action` L1409 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.FunctionName` L1411 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.Principal` L1416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidDELETEApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132DELETEitemsid4C18D4E2` (AWS::Lambda::Permission) → `Properties.SourceArn` L1418 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1196 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1225 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGET38A333A8` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1228 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Action` L1111 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.FunctionName` L1113 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.Principal` L1118 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsid6D54AF22` (AWS::Lambda::Permission) → `Properties.SourceArn` L1120 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Action` L1155 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1157 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.Principal` L1162 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidGETApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132GETitemsidCA08693A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1164 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1493 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1524 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidOPTIONS62BD91D0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1527 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1323 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1352 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCH0548CB6A` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1355 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Action` L1238 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.FunctionName` L1240 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.Principal` L1245 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsidEE9531C0` (AWS::Lambda::Permission) → `Properties.SourceArn` L1247 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Action` L1282 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.FunctionName` L1284 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.Principal` L1289 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `itemsApiitemsidPATCHApiPermissionTestApiLambdaCrudDynamoDBExampleitemsApiC8514132PATCHitemsid513A5711` (AWS::Lambda::Permission) → `Properties.SourceArn` L1291 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentDA408F9D41ab700bc8db89ed7cb2c6250ab97c0a` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L231 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L270 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.StageName` L272 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.ParentId` L285 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.PathPart` L290 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjob39EDA914` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L292 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L371 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L420 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOST79D1CAC1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L423 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Action` L302 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.FunctionName` L304 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.Principal` L309 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob195929C9` (AWS::Lambda::Permission) → `Properties.SourceArn` L311 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Action` L338 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.FunctionName` L340 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.Principal` L345 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobPOSTApiPermissionTestApiGatewayAsyncLambdaStackapigwasynclambdaapigw016C0147POSTjob01D110CD` (AWS::Lambda::Permission) → `Properties.SourceArn` L347 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.ParentId` L434 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.PathPart` L436 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobId73AEE867` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L438 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L449 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L499 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdaapigwjobjobIdGETED10CC0C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L502 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Action` L305 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.FunctionName` L307 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.Principal` L312 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `authenticationlambdagatewaylambdaauthstackoperationalAuthorizerD36E749EPermissionsCD2687F2` (AWS::Lambda::Permission) → `Properties.SourceArn` L314 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `operationalAuthorizer363A7D2B` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L393 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentB29CB257026bd226d852d73169d333911fdd4fa6` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L432 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L474 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.StageName` L476 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.ParentId` L486 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.PathPart` L491 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealth0EB12846` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L493 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L596 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGET9A80151C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L599 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Action` L539 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.FunctionName` L541 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.Principal` L546 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissionTestgatewaylambdaauthstackrestapigatewayAEDD1643GEThealthAF95E556` (AWS::Lambda::Permission) → `Properties.SourceArn` L548 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Action` L503 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.FunctionName` L505 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.Principal` L510 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `restapigatewayhealthGETApiPermissiongatewaylambdaauthstackrestapigatewayAEDD1643GEThealth051F210D` (AWS::Lambda::Permission) → `Properties.SourceArn` L512 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L87 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L96 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L352 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L361 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L807 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L892 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `myapiANYA805D87B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L898 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeployment92F2CB49668bc8f388b84571173cc408b70fc6fa` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L726 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L746 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.StageName` L748 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.ParentId` L909 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.PathPart` L914 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesE5D75039` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L916 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L927 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.ResourceId` L932 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `myapimessagesGETE09B1C35` (AWS::ApiGateway::Method) → `Properties.RestApiId` L935 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L644 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpc4488A7AF` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `nestedstackvpcVPCGWA39BF2BE` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTable5302591F` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1RouteTableAssociation6C6975EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet1Subnet46C8720E` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableAssociation61E13F31` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2RouteTableEA03EC80` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcprivateisolatedsubnet1Subnet2Subnet89BFE59F` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1DefaultRouteA3ABB16E` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTable518786D0` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1RouteTableAssociationE08618B5` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet1Subnet89E5486A` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2DefaultRouteC44F12D1` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableAssociation432D9A37` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2RouteTableF3884194` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `nestedstackvpcpublicsubnet1Subnet2Subnet778CFACA` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_api-gateway-parallel-step-functions--apigatewayparallelstepfunctionsstack2nestedstacklambda9F5CAB08.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L7 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `chatappapideployment` (AWS::ApiGatewayV2::Deployment) → `Properties.ApiId` L676 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L692 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L698 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L23 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.TableName` L33 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `connectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L505 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `connectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L604 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `disconnectlambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L538 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `disconnectroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L628 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `messagelambdaintegration` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L571 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `messageroute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L652 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L494 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L501 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L555 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L558 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L570 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `ASGScalingPolicyAModestLoadC5714E5A` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L622 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L704 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L721 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L790 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L802 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L803 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L810 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L812 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L736 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L759 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L764 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L766 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L771 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L772 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.ApiId` L171 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiCarsDataSourceD8C35DA8` (AWS::AppSync::DataSource) → `Properties.Name` L182 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.ApiId` L277 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarApiDefectsDataSourceEBF3B13F` (AWS::AppSync::DataSource) → `Properties.Name` L288 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CarApiSchema8E4784D9` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L94 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.TableName` L22 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `CarsFunction7C2F2ED2` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L305 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DefectsFunction929174B7` (AWS::AppSync::FunctionConfiguration) → `Properties.ApiId` L333 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L61 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.TableName` L71 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.ApiId` L361 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.FieldName` L369 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetCars2DDF5816` (AWS::AppSync::Resolver) → `Properties.TypeName` L385 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.ApiId` L398 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.FieldName` L406 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PipelineResolverGetDefects032EF131` (AWS::AppSync::Resolver) → `Properties.TypeName` L422 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `AppSync2EventBridgeApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L17 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Action` L237 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.FunctionName` L239 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.Principal` L244 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncEventBridgeRleAllowEventRuleAppSyncEventBridgeechoFunction7F06E48E35535C50` (AWS::Lambda::Permission) → `Properties.SourceArn` L246 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L90 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ItemsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L118 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ItemsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L31 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L135 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L141 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `PutEventMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L144 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L140 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L147 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `DeleteMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L152 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L90 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L97 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `GetAllQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L102 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L65 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L72 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `GetOneQueryResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L77 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `PostsApiKey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L17 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.ApiId` L46 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `PostsDataSource` (AWS::AppSync::DataSource) → `Properties.Name` L54 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PostsSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L31 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.ApiId` L115 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.FieldName` L122 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `SaveMutationResolver` (AWS::AppSync::Resolver) → `Properties.TypeName` L127 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.BucketName` L15 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `IncomingDataBucketPolicyCA22042A` (AWS::S3::BucketPolicy) → `Properties.Bucket` L33 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L642 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Domain' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L625 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'ServerId' is create-only; updating it will cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L582 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L425 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MetricFilter1B93B6E5` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L642 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.Domain` L453 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Domain' is create-only; updating it will cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails` L454 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'EndpointDetails' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPServer` (AWS::Transfer::Server) → `Properties.EndpointDetails.AddressAllocationIds` L455 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'EndpointDetails.AddressAllocationIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.ServerId` L625 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'ServerId' is create-only; updating it will cause resource replacement +- **I9001** `SFTPUser` (AWS::Transfer::User) → `Properties.UserName` L631 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Description` L508 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L509 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessPolicy6C559C82` (AWS::IAM::ManagedPolicy) → `Properties.Path` L510 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.RoleName` L572 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L582 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L404 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L405 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L425 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L245 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableAssociationA2D18F7C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L248 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1RouteTableEB156210` (AWS::EC2::RouteTable) → `Properties.VpcId` L234 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L193 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L200 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet1SubnetEBD00FC6` (AWS::EC2::Subnet) → `Properties.VpcId` L217 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTable9B4F78DC` (AWS::EC2::RouteTable) → `Properties.VpcId` L300 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L311 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L314 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L259 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L266 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCIsolatedSubnet2Subnet4B1C8CAA` (AWS::EC2::Subnet) → `Properties.VpcId` L283 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L342 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vault23237E5B` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L216 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupVaultName' is create-only; updating it will cause resource replacement +- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L254 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupPlanId' is create-only; updating it will cause resource replacement +- **I9001** `demobackupplanSelectionF4B47C20` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L259 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'BackupSelection' is create-only; updating it will cause resource replacement +- **I9001** `testBucketPolicy47484917` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L568 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L577 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1085 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceRole` L750 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.InstanceRole' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.InstanceTypes` L755 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.InstanceTypes' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.SecurityGroupIds` L764 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L772 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L780 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L789 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L850 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.RepositoryName` L10 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.CidrBlock` L21 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCF5EF58EB` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L24 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L317 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1DefaultRoute7EB9EABF` (AWS::EC2::Route) → `Properties.RouteTableId` L322 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTable3DBEEA60` (AWS::EC2::RouteTable) → `Properties.VpcId` L293 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L304 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1RouteTableAssociationD2C7C327` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L307 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L252 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.CidrBlock` L259 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet1Subnet95C8C324` (AWS::EC2::Subnet) → `Properties.VpcId` L276 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L398 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2DefaultRouteA5C36AF6` (AWS::EC2::Route) → `Properties.RouteTableId` L403 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTable7EFB668D` (AWS::EC2::RouteTable) → `Properties.VpcId` L374 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L385 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2RouteTableAssociation50872E14` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L388 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L333 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.CidrBlock` L340 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPrivateSubnet2Subnet039333AF` (AWS::EC2::Subnet) → `Properties.VpcId` L357 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L107 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1DefaultRoute5FD9D646` (AWS::EC2::Route) → `Properties.RouteTableId` L112 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L141 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1NATGateway29BD3E8B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L147 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L94 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableAssociationB4BDC09E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L97 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1RouteTableDADE381A` (AWS::EC2::RouteTable) → `Properties.VpcId` L83 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L42 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L49 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet1Subnet4888FED8` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L233 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2DefaultRouteF2C059E2` (AWS::EC2::Route) → `Properties.RouteTableId` L238 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTable29142B7F` (AWS::EC2::RouteTable) → `Properties.VpcId` L209 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L220 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2RouteTableAssociationA72D6947` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L223 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L168 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.CidrBlock` L175 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCPublicSubnet2Subnet7642A39F` (AWS::EC2::Subnet) → `Properties.VpcId` L192 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenMPVPCVPCGWDD05DB82` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L431 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L584 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L600 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L492 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L494 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L499 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L501 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroupfromLoadBalancerStackLBSecurityGroupB71A4BA880C28BC1C3` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L506 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L555 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L558 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L560 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L561 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L570 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L667 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L682 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L691 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L621 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L632 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L644 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L649 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L651 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L656 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `LBSecurityGrouptoLoadBalancerStackASGInstanceSecurityGroupB0050A1780E09A2D36` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L657 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2DefaultRouteF4F5CFD2` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTable0A19E10E` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2RouteTableAssociation0C73D413` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet2SubnetCFCDAA7A` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2DefaultRouteB7481BBA` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2NATGateway3C070193` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTable6F1A15F1` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2RouteTableAssociation5A808732` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet2Subnet74179F39` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Name` L394 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Name` L409 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteBucketPolicyE10E3262` (AWS::S3::BucketPolicy) → `Properties.Bucket` L41 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Content` L154 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `WebsiteFilesAwsCliLayerE117CD16` (AWS::Lambda::LayerVersion) → `Properties.Description` L160 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1641 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1642 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1643 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1652 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Name` L2309 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipelineArtifactsBucketEncryptionKeyAliasC52C67EF` (AWS::KMS::Alias) → `Properties.AliasName` L2074 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AliasName' is create-only; updating it will cause resource replacement +- **I9001** `BuildDeployPipelineArtifactsBucketPolicyC49383E9` (AWS::S3::BucketPolicy) → `Properties.Bucket` L2123 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.CidrBlock` L1097 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcA8CFF6E7` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L1100 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1489 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1DefaultRoute6BD16184` (AWS::EC2::Route) → `Properties.RouteTableId` L1494 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTable4D91A516` (AWS::EC2::RouteTable) → `Properties.VpcId` L1457 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1472 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1RouteTableAssociationB0545C4C` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1475 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1412 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1419 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet1Subnet505E4257` (AWS::EC2::Subnet) → `Properties.VpcId` L1436 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1586 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2DefaultRouteCC18893B` (AWS::EC2::Route) → `Properties.RouteTableId` L1591 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTable918A9411` (AWS::EC2::RouteTable) → `Properties.VpcId` L1554 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1569 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2RouteTableAssociation994802D2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1572 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1509 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1516 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPrivateSubnet2Subnet176BE39E` (AWS::EC2::Subnet) → `Properties.VpcId` L1533 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1197 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1DefaultRouteAFF78CE0` (AWS::EC2::Route) → `Properties.RouteTableId` L1202 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1237 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1NATGateway69FA9C06` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1243 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableA4D922A0` (AWS::EC2::RouteTable) → `Properties.VpcId` L1165 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1180 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1RouteTableAssociation5AD6D21B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1183 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1127 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet1Subnet6F292256` (AWS::EC2::Subnet) → `Properties.VpcId` L1144 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1343 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2DefaultRouteAEC6FDD4` (AWS::EC2::Route) → `Properties.RouteTableId` L1348 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1383 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2NATGatewayC9242BCE` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1389 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTable12CC8384` (AWS::EC2::RouteTable) → `Properties.VpcId` L1311 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1326 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2RouteTableAssociation7ADD1D72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1329 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L1266 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L1273 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcPublicSubnet2Subnet426701E5` (AWS::EC2::Subnet) → `Properties.VpcId` L1290 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterVpcVPCGW361426E5` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L1627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.ApplicationName` L1955 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ApplicationName' is create-only; updating it will cause resource replacement +- **I9001** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.ComputePlatform` L1942 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ComputePlatform' is create-only; updating it will cause resource replacement +- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L1781 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L1793 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L1805 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.ServiceName` L1836 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1853 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1862 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L1879 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L1881 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L1886 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L1888 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromCodepipelineBuildDeployStackSecurityGroup07B96CA880690A9743` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L1893 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L120 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L181 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L183 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L188 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L189 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L190 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L191 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L195 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L1662 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L1663 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L1664 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L1671 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L1673 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L1717 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L1734 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L1758 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1683 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1701 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `cfnAuth` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L366 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentCB1FF57464f3e9f368e40968a1aeabdb5bcc9580` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L134 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L153 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.StageName` L155 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.ParentId` L168 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.PathPart` L173 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOAD091B67` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L175 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L273 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L302 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGET6E88F46C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L305 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.FunctionName` L187 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLO61B4977B` (AWS::Lambda::Permission) → `Properties.SourceArn` L194 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `helloWorldLambdaRestApiHELLOGETApiPermissionTestCognitoProtectedApihelloWorldLambdaRestApi9E9DB39DGETHELLOD4AD0AEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L238 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `DemoResource5B5C546C` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L141 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `DemoResourceResource1DB79ECAB` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L167 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.QueueName` L70 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.TopicName` L27 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.KeySchema` L88 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L260 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L270 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.KeySchema` L507 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L481 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L491 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L566 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.ImageId` L577 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.InstanceType` L579 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L580 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.SubnetId` L595 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `EC2Instance1F00751C57ee729c1274d778` (AWS::EC2::Instance) → `Properties.UserData` L604 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Content` L353 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `EC2assetBucketDeploymentAwsCliLayerFF55632D` (AWS::Lambda::LayerVersion) → `Properties.Description` L359 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `EC2assetBucketPolicy31C0B372` (AWS::S3::BucketPolicy) → `Properties.Bucket` L277 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L542 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.CidrBlock` L7 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPC61AD6880` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L10 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L91 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1DefaultRoute0DEC8857` (AWS::EC2::Route) → `Properties.RouteTableId` L96 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTable140320E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L67 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L78 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1RouteTableAssociationBCA9EE21` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L81 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L26 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.CidrBlock` L33 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet1SubnetF3987995` (AWS::EC2::Subnet) → `Properties.VpcId` L50 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L175 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2DefaultRoute6A434666` (AWS::EC2::Route) → `Properties.RouteTableId` L180 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L162 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableAssociationE261CDCA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L165 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2RouteTableD6971BF3` (AWS::EC2::RouteTable) → `Properties.VpcId` L151 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L110 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.CidrBlock` L117 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCServerPublicSubnet2SubnetDB508B90` (AWS::EC2::Subnet) → `Properties.VpcId` L134 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW3AFA48F6` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L211 in `cdk_ec2-instance--EC2Example.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableAssociationE01668F2` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1RouteTableE62E4ED6` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet1SubnetC2926CEA` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTable3E531D9B` (AWS::EC2::RouteTable) → `Properties.VpcId` L132 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L143 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2RouteTableAssociation25A7BD68` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L146 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L91 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcrdsSubnet2Subnet70A835C8` (AWS::EC2::Subnet) → `Properties.VpcId` L115 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L247 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.ImageId` L258 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.InstanceType` L260 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L261 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.SubnetId` L270 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `instanceB7CCE687` (AWS::EC2::Instance) → `Properties.UserData` L279 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L156 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `instanceInstanceSecurityGroup725C795D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L197 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.AutoScalingGroupProvider.AutoScalingGroupArn` L692 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AutoScalingGroupProvider.AutoScalingGroupArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsCluster72B17558` (AWS::ECS::ClusterCapacityProviderAssociations) → `Properties.Cluster` L679 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L634 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyFleetASG88E55886` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L646 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L466 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetInstanceSecurityGroup774E8234` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L481 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L592 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L595 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L597 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L598 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `MyFleetLaunchConfig5D7F9801` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L607 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L201 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L213 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L214 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L221 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L223 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L62 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L122 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L131 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L170 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L179 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680from5771F1D9` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L180 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L147 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtListenerLBStackLoadBalancerSecurityGroup4A27809680251D8C7D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L156 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L12 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L29 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L68 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L38 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L49 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L80 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L81 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L88 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L90 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L62 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L75 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L120 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L129 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L168 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L173 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L175 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L177 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580from6A874A07` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L178 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L143 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L145 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L150 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L152 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceSecurityGroupfromSplitAtTargetGroupLBStackLoadBalancerSecurityGroupAC48AF9580953EC485` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L154 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L26 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L40 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L41 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Memory` L42 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L43 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L44 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L48 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupASGC5A6D4C0` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeWillkommenEc2ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic5835279F94354ECC` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic4795E0F6` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupInstanceSecurityGroup149B0A9E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Cluster` L1113 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.LaunchType` L1125 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1126 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L1028 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L1033 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1034 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1035 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1039 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupASG7F29632B` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeec2servicewithtasknetworkingawsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic582DD4BEABB08B98` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionTopicF27EF507` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupInstanceSecurityGroupFF91CD80` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Cluster` L1080 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.LaunchType` L1092 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1114 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1049 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1069 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Family` L1030 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1031 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1032 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1036 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L639 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupASGC1A785DB` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L650 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Action` L857 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L859 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.Principal` L864 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokesampleawsecsintegecsEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7D0FA5A858D2FF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L866 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Endpoint` L877 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.Protocol` L882 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394` (AWS::SNS::Subscription) → `Properties.TopicArn` L884 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L472 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L487 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L598 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L601 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L603 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L604 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L613 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` (AWS::AutoScaling::LifecycleHook) → `Properties.AutoScalingGroupName` L961 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Cluster` L1042 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.LaunchType` L1054 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.SchedulingStrategy` L1070 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SchedulingStrategy' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L1007 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Family` L1022 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L1023 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L1024 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L1028 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Cluster` L729 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.LaunchType` L742 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L495 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L564 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L576 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L577 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L584 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L586 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L510 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L521 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.DestinationSecurityGroupId` L533 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.FromPort` L538 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.GroupId` L540 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.IpProtocol` L545 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceLBSecurityGrouptoBonjourFargateServiceSecurityGroupB8A86CBA80181B6C73` (AWS::EC2::SecurityGroupEgress) → `Properties.ToPort` L546 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L789 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L798 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L812 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L814 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L819 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L821 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroupfromBonjourFargateServiceLBSecurityGroup660CF9B080C7AA015A` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L826 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L616 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L641 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L643 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Family` L648 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Memory` L649 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L650 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L651 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L655 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L478 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L487 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L511 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L523 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L524 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L525 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L527 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Cluster` L670 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.LaunchType` L683 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L730 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L739 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L801 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetCpuScalingF4452F80` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L804 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ResourceId` L755 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ScalableDimension` L788 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `sampleappServiceTaskCountTargetE827DC30` (AWS::ApplicationAutoScaling::ScalableTarget) → `Properties.ServiceNamespace` L789 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L557 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L582 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L584 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Family` L589 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Memory` L590 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L591 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L592 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L596 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Cluster` L599 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.LaunchType` L611 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L647 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L656 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L492 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L511 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L513 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Family` L518 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Memory` L519 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L520 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L521 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L525 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcF9F0CA6F` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1DefaultRouteA8CDE2FA` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTable8819E6E2` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1RouteTableAssociation56D38C7E` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet1Subnet5057CF7E` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2DefaultRoute9CE96294` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableAssociation86A610DA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2RouteTableCEDCEECE` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPrivateSubnet2Subnet0040C983` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1DefaultRoute95FDF9EB` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1NATGatewayAD3400C1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableAssociation2ECEE1CB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1RouteTableC46AB2F4` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet1SubnetF6608456` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2DefaultRoute052936F6` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2NATGateway91BFBEC9` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTable1DF17386` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2RouteTableAssociation227DE78D` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcPublicSubnet2Subnet492B6BFB` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVpcVPCGW488ACE0D` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Action` L140 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L142 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.Principal` L147 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleEventBridgeLambdaStackSingleton0D05990EAAD8CFB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L149 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Endpoint` L16 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.Protocol` L18 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TopicTokenSubscription178F3F75E` (AWS::SNS::Subscription) → `Properties.TopicArn` L20 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeployment0905F2A51149e52ed55821cdb6db0214e7f00a2c` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L77 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L97 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.StageName` L99 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.ParentId` L112 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.PathPart` L117 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ProxyAPIaws4558A94F` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L119 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L130 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L132 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsB89410CC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L134 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L145 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.ResourceId` L158 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ProxyProxyResourceGETawsGET6AEDAC86` (AWS::ApiGateway::Method) → `Properties.RestApiId` L161 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L239 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Components` L50 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Components' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ContainerType` L76 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'ContainerType' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.DockerfileTemplateData` L77 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'DockerfileTemplateData' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Name` L78 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.ParentImage` L80 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'ParentImage' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.TargetRepository` L91 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'TargetRepository' is create-only; updating it will cause resource replacement +- **I9001** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Version` L97 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L30 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L31 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L32 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L33 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L6 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L7 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L8 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L9 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Name` L212 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Name` L188 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Data` L18 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Data' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Name` L19 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Platform` L20 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Platform' is create-only; updating it will cause resource replacement +- **I9001** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Version` L21 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Property 'Version' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Action` L95 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.Principal` L102 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringfindingScanRuleAllowEventRuleInspector2MonitoringStackInspector2FindingHandler16831F85366B3530` (AWS::Lambda::Permission) → `Properties.SourceArn` L104 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Action` L40 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.FunctionName` L42 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.Principal` L47 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Inspector2MonitoringinitialScanRuleAllowEventRuleInspector2MonitoringStackInspector2InitialScanHandler1F2D84B66EB326AF` (AWS::Lambda::Permission) → `Properties.SourceArn` L49 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.DashboardName` L150 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Property 'DashboardName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L86 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L93 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Content` L9 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `HelperLayer49ADCD6B` (AWS::Lambda::LayerVersion) → `Properties.Description` L15 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L70 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `SampleBucketNotification` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L62 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.FunctionName` L87 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeployment406A9BD66039252bdc49ee37076fc3c8f3a2eed8` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L207 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L229 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.StageName` L231 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L328 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.ResourceId` L360 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGET2086C825` (AWS::ApiGateway::Method) → `Properties.RestApiId` L366 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Action` L243 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.FunctionName` L245 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.Principal` L250 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETFA317FE0` (AWS::Lambda::Permission) → `Properties.SourceArn` L252 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Action` L287 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.FunctionName` L289 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.Principal` L294 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETD6697AB5` (AWS::Lambda::Permission) → `Properties.SourceArn` L296 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.ParentId` L377 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.PathPart` L382 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidAA19CFA8` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L384 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Action` L648 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.FunctionName` L650 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.Principal` L655 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid2BAC56B6` (AWS::Lambda::Permission) → `Properties.SourceArn` L657 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Action` L692 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.FunctionName` L694 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.Principal` L699 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFDELETEid4096AFEF` (AWS::Lambda::Permission) → `Properties.SourceArn` L701 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L733 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.ResourceId` L762 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidDELETEE81619C6` (AWS::ApiGateway::Method) → `Properties.RestApiId` L765 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L606 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.ResourceId` L635 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETABE1C648` (AWS::ApiGateway::Method) → `Properties.RestApiId` L638 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Action` L521 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.FunctionName` L523 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.Principal` L528 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid8E6C9CDF` (AWS::Lambda::Permission) → `Properties.SourceArn` L530 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Action` L565 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.FunctionName` L567 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.Principal` L572 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidGETApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFGETid5E1031AB` (AWS::Lambda::Permission) → `Properties.SourceArn` L574 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L479 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.ResourceId` L508 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOST60B9DB49` (AWS::ApiGateway::Method) → `Properties.RestApiId` L511 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Action` L394 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.FunctionName` L396 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.Principal` L401 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTid9DF97A7A` (AWS::Lambda::Permission) → `Properties.SourceArn` L403 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Action` L438 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.FunctionName` L440 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.Principal` L445 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WidgetswidgetsapiidPOSTApiPermissionTestMyWidgetServiceStackWidgetswidgetsapi6BAE39EFPOSTidF1C29E62` (AWS::Lambda::Permission) → `Properties.SourceArn` L447 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.QueueName` L87 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Endpoint` L140 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.Protocol` L135 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicAnyOtherStatusSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B9905847D` (AWS::SNS::Subscription) → `Properties.TopicArn` L137 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.QueueName` L15 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Endpoint` L68 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.Protocol` L63 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `BigFanTopicStatusCreatedSubscriberQueueTheBigFanStacktheBigFanTopicCC7EBE3B39DDDB95` (AWS::SNS::Subscription) → `Properties.TopicArn` L65 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L442 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L296 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeployment0A3D40CC3de72833f42963bffb25d554063d867d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L516 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L534 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.StageName` L548 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.ContentType` L694 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.Name` L695 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIErrorResponseModel11E9FBC4` (AWS::ApiGateway::Model) → `Properties.RestApiId` L692 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.ContentType` L671 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.Name` L672 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPIResponseModelD06A5A7F` (AWS::ApiGateway::Model) → `Properties.RestApiId` L669 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.ParentId` L558 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.PathPart` L563 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventD29495C2` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L565 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L575 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.ResourceId` L577 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `theBigFanAPISendEventPOSTBC493093` (AWS::ApiGateway::Method) → `Properties.RestApiId` L580 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L176 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteDefaultRouteIntegration9F0AC785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L226 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteF9949FE6` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L245 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Action` L185 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.FunctionName` L187 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.Principal` L192 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultRouteTheCloudwatchDashboardStackHttpAPIDefaultRoute851EEAB4Permission3852997E` (AWS::Lambda::Permission) → `Properties.SourceArn` L194 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L268 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L270 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Name` L6 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Action` L173 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.FunctionName` L175 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.Principal` L180 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaAllowInvokeTheDestinedLambdaStacktheDestinedLambdaTopic8CE84AB4D93BC799` (AWS::Lambda::Permission) → `Properties.SourceArn` L182 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.FunctionName` L143 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdaEventInvokeConfig3CA2AF7E` (AWS::Lambda::EventInvokeConfig) → `Properties.Qualifier` L145 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Qualifier' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Endpoint` L197 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.Protocol` L192 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `destinedLambdatheDestinedLambdaTopic8E937C7F` (AWS::SNS::Subscription) → `Properties.TopicArn` L194 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.EventBusName` L463 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Action` L494 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.FunctionName` L496 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.Principal` L501 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `failureRuleAllowEventRuleTheDestinedLambdaStackfailureRule39380610D37AD724` (AWS::Lambda::Permission) → `Properties.SourceArn` L503 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Action` L345 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.FunctionName` L347 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.Principal` L352 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `successRuleAllowEventRuleTheDestinedLambdaStacksuccessRuleDD139E31353F8BE2` (AWS::Lambda::Permission) → `Properties.SourceArn` L354 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.EventBusName` L306 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'EventBusName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentC364859Eae40584f53d9b7bb31907a57bb781ad3` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L577 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L595 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.StageName` L609 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.ContentType` L755 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.Name` L756 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIErrorResponseModel5F76D2FC` (AWS::ApiGateway::Model) → `Properties.RestApiId` L753 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.ContentType` L732 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.Name` L733 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPIResponseModel7D59062C` (AWS::ApiGateway::Model) → `Properties.RestApiId` L730 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L619 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L624 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventC20585CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L626 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L636 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.ResourceId` L638 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `theDestinedLambdaAPISendEventGETC3F11CCE` (AWS::ApiGateway::Method) → `Properties.RestApiId` L641 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeployment8F20C3E380de34421a04eed5e7cc4a28266c5690` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L247 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L265 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.StageName` L279 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.ContentType` L422 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.Name` L423 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIErrorResponseModelEB962BDA` (AWS::ApiGateway::Model) → `Properties.RestApiId` L420 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.ParentId` L289 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.PathPart` L294 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemACBD0A97` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L296 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L306 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L308 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIInsertItemPOSTCDE209E1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L311 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.ContentType` L399 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.Name` L400 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamoStreamerAPIResponseModel5C9A2FF6` (AWS::ApiGateway::Model) → `Properties.RestApiId` L397 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L172 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.StartingPosition` L177 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Property 'StartingPosition' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L894 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L896 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L902 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Action` L854 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.FunctionName` L856 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.Principal` L861 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYFFED7414` (AWS::Lambda::Permission) → `Properties.SourceArn` L863 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Action` L810 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.FunctionName` L812 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.Principal` L817 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANY2B0F1701` (AWS::Lambda::Permission) → `Properties.SourceArn` L819 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeployment318525DA98cf1fe46f6a8379cb8241a5e412a297` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L634 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L651 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L656 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L666 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L671 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L673 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Action` L727 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.FunctionName` L729 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.Principal` L734 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheEventbridgeAtmStackEndpoint54DB5714ANYproxy14296A4D` (AWS::Lambda::Permission) → `Properties.SourceArn` L736 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Action` L683 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.FunctionName` L685 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.Principal` L690 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheEventbridgeAtmStackEndpoint54DB5714ANYproxyC2C9F151` (AWS::Lambda::Permission) → `Properties.SourceArn` L692 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L767 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L769 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L772 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Action` L251 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.FunctionName` L253 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.Principal` L258 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer1LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer1LambdaRuleEB0F67E45F2D141B` (AWS::Lambda::Permission) → `Properties.SourceArn` L260 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Action` L401 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.FunctionName` L403 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.Principal` L408 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer2LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer2LambdaRuleF5729F59774A4AE8` (AWS::Lambda::Permission) → `Properties.SourceArn` L410 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Action` L551 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.FunctionName` L553 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.Principal` L558 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `atmConsumer3LambdaRuleAllowEventRuleTheEventbridgeAtmStackatmConsumer3LambdaRuleC926722A1B0365D4` (AWS::Lambda::Permission) → `Properties.SourceArn` L560 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Action` L718 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.FunctionName` L720 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.Principal` L725 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY33532EB9` (AWS::Lambda::Permission) → `Properties.SourceArn` L727 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Action` L674 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.FunctionName` L676 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.Principal` L681 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANY2D2F06E0` (AWS::Lambda::Permission) → `Properties.SourceArn` L683 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L758 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L760 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayANYE076316B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L766 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeployment9F2A82FA10260421dc831e654354d72baa60bfb0` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L498 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L515 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.StageName` L520 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.ParentId` L530 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.PathPart` L535 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxy1147E2CF` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L537 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L631 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.ResourceId` L633 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANY759880DB` (AWS::ApiGateway::Method) → `Properties.RestApiId` L636 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Action` L591 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.FunctionName` L593 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.Principal` L598 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTestTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxyE09D3DF2` (AWS::Lambda::Permission) → `Properties.SourceArn` L600 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Action` L547 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.FunctionName` L549 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.Principal` L554 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayproxyANYApiPermissionTheEventbridgeCircuitBreakerStackCircuitBreakerGateway4CD07824ANYproxy584EF780` (AWS::Lambda::Permission) → `Properties.SourceArn` L556 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Action` L415 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.FunctionName` L417 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.Principal` L422 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `webserviceErrorRuleAllowEventRuleTheEventbridgeCircuitBreakerStackwebserviceErrorRule5CA5849AC9CE1102` (AWS::Lambda::Permission) → `Properties.SourceArn` L424 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L745 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L794 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L796 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Family` L801 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Memory` L802 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L803 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L804 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L808 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L213 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L216 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L544 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L542 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L528 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L531 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L511 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L480 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L475 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L477 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L625 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L623 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L592 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L609 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L612 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L561 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L556 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L558 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L298 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L331 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L337 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L267 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L284 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L287 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L236 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L231 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L233 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L422 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L420 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L453 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L459 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L389 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L406 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L409 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L353 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L355 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L652 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L1108 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Action` L1484 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.FunctionName` L1486 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.Principal` L1491 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `loadRuleAllowEventRuleTheEventbridgeEtlStackloadRuleE4CE7871DBE863BA` (AWS::Lambda::Permission) → `Properties.SourceArn` L1493 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Action` L1626 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.FunctionName` L1628 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.Principal` L1633 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `observeRuleAllowEventRuleTheEventbridgeEtlStackobserveRuleDD299C278D51D81A` (AWS::Lambda::Permission) → `Properties.SourceArn` L1635 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Action` L1275 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.FunctionName` L1277 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.Principal` L1282 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `transformRuleAllowEventRuleTheEventbridgeEtlStacktransformRuleF338DDCD2082D030` (AWS::Lambda::Permission) → `Properties.SourceArn` L1284 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteCB8326BD` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L248 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteDefaultRouteIntegrationF55AEBDB` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L229 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultRouteTheLambdaCircuitBreakerStackCircuitBreakerGatewayDefaultRoute883D7748Permission8BF71621` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L271 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Action` L1836 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.FunctionName` L1838 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.Principal` L1843 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANY8FD1CF02` (AWS::Lambda::Permission) → `Properties.SourceArn` L1845 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Action` L1792 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.FunctionName` L1794 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.Principal` L1799 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYF602862D` (AWS::Lambda::Permission) → `Properties.SourceArn` L1801 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1876 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1878 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableANYFE1A7CB0` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1884 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeployment96972FE77ef5b9d25f9d7a35316435e48684bb49` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L1616 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L1633 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.StageName` L1638 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.ParentId` L1648 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.PathPart` L1653 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxy9F7D6084` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L1655 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L1749 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.ResourceId` L1751 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANY8778A55C` (AWS::ApiGateway::Method) → `Properties.RestApiId` L1754 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Action` L1709 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.FunctionName` L1711 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.Principal` L1716 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTestTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyFFAFB063` (AWS::Lambda::Permission) → `Properties.SourceArn` L1718 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Action` L1665 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.FunctionName` L1667 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.Principal` L1672 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SagaPatternSingleTableproxyANYApiPermissionTheSagaStepfunctionSingleTableStackSagaPatternSingleTable3D97C406ANYproxyCC0ED567` (AWS::Lambda::Permission) → `Properties.SourceArn` L1674 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L679 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.ResourceId` L681 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANY485C938B` (AWS::ApiGateway::Method) → `Properties.RestApiId` L687 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Action` L639 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.FunctionName` L641 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.Principal` L646 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANY6F14FF34` (AWS::Lambda::Permission) → `Properties.SourceArn` L648 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Action` L595 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.FunctionName` L597 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.Principal` L602 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYA4DEC70E` (AWS::Lambda::Permission) → `Properties.SourceArn` L604 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeployment318525DAd36b722f04bf6c9ce03a896415e5529d` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L419 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L436 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.StageName` L441 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.ParentId` L451 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.PathPart` L456 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `Endpointproxy39E2174E` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L458 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Action` L512 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.FunctionName` L514 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.Principal` L519 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTestTheScalableWebhookStackEndpoint462DCEBFANYproxy171AE875` (AWS::Lambda::Permission) → `Properties.SourceArn` L521 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Action` L468 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.FunctionName` L470 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.Principal` L475 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYApiPermissionTheScalableWebhookStackEndpoint462DCEBFANYproxy6224F0D7` (AWS::Lambda::Permission) → `Properties.SourceArn` L477 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L552 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.ResourceId` L554 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointproxyANYC09721C5` (AWS::ApiGateway::Method) → `Properties.RestApiId` L557 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L345 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Action` L193 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.FunctionName` L195 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.Principal` L200 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `scheduledLambdascheduleAllowEventRuleTheScheduledLambdaStackscheduledLambdaschedule2517ED8826359872` (AWS::Lambda::Permission) → `Properties.SourceArn` L202 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.ApiId` L157 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiCustomerFEDF5079` (AWS::AppSync::DataSource) → `Properties.Name` L162 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ApiDefaultApiKeyF991C37B` (AWS::AppSync::ApiKey) → `Properties.ApiId` L75 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.ApiId` L380 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiLoyaltyE1BE9BB1` (AWS::AppSync::DataSource) → `Properties.Name` L385 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.ApiId` L235 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.FieldName` L240 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationaddCustomerResolver53321A05` (AWS::AppSync::Resolver) → `Properties.TypeName` L241 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.ApiId` L307 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.FieldName` L312 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationremoveCustomerResolver8435F803` (AWS::AppSync::Resolver) → `Properties.TypeName` L313 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.ApiId` L259 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.FieldName` L264 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerResolver85516C23` (AWS::AppSync::Resolver) → `Properties.TypeName` L265 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.ApiId` L283 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.FieldName` L288 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiMutationsaveCustomerWithFirstOrderResolver66DBDFD0` (AWS::AppSync::Resolver) → `Properties.TypeName` L289 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.ApiId` L211 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.FieldName` L216 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomerResolver007520DC` (AWS::AppSync::Resolver) → `Properties.TypeName` L217 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.ApiId` L187 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.FieldName` L192 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetCustomersResolver522EE433` (AWS::AppSync::Resolver) → `Properties.TypeName` L193 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.ApiId` L410 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.FieldName` L415 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'FieldName' is create-only; updating it will cause resource replacement +- **I9001** `ApiQuerygetLoyaltyLevelResolverC862DCEF` (AWS::AppSync::Resolver) → `Properties.TypeName` L416 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'TypeName' is create-only; updating it will cause resource replacement +- **I9001** `ApiSchema510EECD7` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L60 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.KeySchema` L447 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `thesimplegraphqlserviceapikey` (AWS::AppSync::ApiKey) → `Properties.ApiId` L434 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteB7B22F2B` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L248 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteDefaultRouteIntegration4584A785` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L229 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Action` L188 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.FunctionName` L190 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.Principal` L195 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultRouteTheSimpleWebserviceStackEndpointDefaultRouteC99962AAPermission4BC0F1E3` (AWS::Lambda::Permission) → `Properties.SourceArn` L197 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L271 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L273 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L179 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultRoute` (AWS::ApiGatewayV2::Route) → `Properties.ApiId` L295 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `Integ` (AWS::ApiGatewayV2::Integration) → `Properties.ApiId` L267 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L190 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.ProtocolType` L244 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ProtocolType' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.ApiId` L254 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.StageName` L256 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentDDF5787C50cd54e1b820c67ddfe6e24991b1dd3f` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L165 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L181 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.StageName` L201 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.ParentId` L211 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.PathPart` L216 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldC628BF91` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L218 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L312 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.ResourceId` L314 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGET802399FF` (AWS::ApiGateway::Method) → `Properties.RestApiId` L317 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Action` L228 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.FunctionName` L230 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.Principal` L235 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworldC704FF2F` (AWS::Lambda::Permission) → `Properties.SourceArn` L237 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Action` L272 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.FunctionName` L274 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.Principal` L279 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `WafGatewayAPIhelloworldGETApiPermissionTestAPIGatewayStackWafGatewayAPI0F5D6A0EGEThelloworld3D2EE2D0` (AWS::Lambda::Permission) → `Properties.SourceArn` L281 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Scope` L9 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'Scope' is create-only; updating it will cause resource replacement +- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.ResourceArn` L106 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'ResourceArn' is create-only; updating it will cause resource replacement +- **I9001** `WebACLAssociation` (AWS::WAFv2::WebACLAssociation) → `Properties.WebACLArn` L125 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Property 'WebACLArn' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Action` L189 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.FunctionName` L191 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerAllowInvokeTheXrayDynamoFlowSNSTopicCD4F86C04F3B929A` (AWS::Lambda::Permission) → `Properties.SourceArn` L198 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Endpoint` L213 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Protocol` L208 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.Region` L219 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamoLambdaHandlerSNSTopic27AC0D9B` (AWS::SNS::Subscription) → `Properties.TopicArn` L210 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.KeySchema` L6 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Action` L130 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.FunctionName` L132 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.Principal` L137 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerAllowInvokeTheXrayHttpFlowSNSTopic4903AFE806D4343B` (AWS::Lambda::Permission) → `Properties.SourceArn` L139 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Endpoint` L154 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Protocol` L149 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.Region` L160 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `httpLambdaHandlerSNSTopicEE70E0D4` (AWS::SNS::Subscription) → `Properties.TopicArn` L151 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Action` L160 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.FunctionName` L162 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.Principal` L167 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerAllowInvokeTheXraySQSFlowSNSTopicA671E652005D4F97` (AWS::Lambda::Permission) → `Properties.SourceArn` L169 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Endpoint` L184 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Protocol` L179 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.Region` L190 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `sqsLambdaHandlerSNSTopicC33599CE` (AWS::SNS::Subscription) → `Properties.TopicArn` L181 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L354 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Action` L153 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.FunctionName` L155 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.Principal` L160 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerAllowInvokeTheXraySnsFlowSNSTopic80B9595935AF18F0` (AWS::Lambda::Permission) → `Properties.SourceArn` L162 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Endpoint` L177 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Protocol` L172 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.Region` L183 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `snsLambdaHandlerSNSTopic3B2CFF1D` (AWS::SNS::Subscription) → `Properties.TopicArn` L174 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Action` L327 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.FunctionName` L329 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.Principal` L334 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerAllowInvokeTheXraySnsFlowTheXRayTracerSnsTopic86AE60703F758919` (AWS::Lambda::Permission) → `Properties.SourceArn` L336 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Endpoint` L351 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.Protocol` L346 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `snsSubscriptionLambdaHandlerTheXRayTracerSnsTopic6FDB75DD` (AWS::SNS::Subscription) → `Properties.TopicArn` L348 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentB3CB89A0a689bf68bef2302d0715c2d1a50794fc` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L76 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L95 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.StageName` L109 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.ContentType` L352 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.Name` L353 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIErrorResponseModel24719E91` (AWS::ApiGateway::Model) → `Properties.RestApiId` L350 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L119 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.ResourceId` L121 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIGET7490A366` (AWS::ApiGateway::Method) → `Properties.RestApiId` L127 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.ContentType` L329 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ContentType' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.Name` L330 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIResponseModel2591E14E` (AWS::ApiGateway::Model) → `Properties.RestApiId` L327 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.ParentId` L216 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.PathPart` L221 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxy719DA214` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L223 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L233 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.ResourceId` L235 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `xrayTracerAPIproxyGET4E348609` (AWS::ApiGateway::Method) → `Properties.RestApiId` L238 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeployment248C0700a88c9b4f7fb5eae343fa3265f3ea5ffe` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L134 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L154 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.StageName` L156 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L169 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L174 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexample5AE32A3C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L176 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Action` L229 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.Principal` L236 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample83B6C89A` (AWS::Lambda::Permission) → `Properties.SourceArn` L238 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Action` L273 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.FunctionName` L275 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.Principal` L280 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETApiPermissionTestApiCorsLambdaStackApiGatewayWithCorsBD29564EGETexample07A026FD` (AWS::Lambda::Permission) → `Properties.SourceArn` L282 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L314 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.ResourceId` L359 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleGETCC962CB3` (AWS::ApiGateway::Method) → `Properties.RestApiId` L362 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L188 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.ResourceId` L216 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGatewayWithCorsexampleOPTIONS2F5D9F4D` (AWS::ApiGateway::Method) → `Properties.RestApiId` L219 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentD1A021868a8af37caaafdc0f762b784f7555ad86` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L552 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L571 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.StageName` L573 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.ParentId` L586 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.PathPart` L591 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritems997C90A7` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L593 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Action` L603 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.FunctionName` L605 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.Principal` L610 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitemsA86E071B` (AWS::Lambda::Permission) → `Properties.SourceArn` L612 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Action` L647 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.FunctionName` L649 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.Principal` L654 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTApiPermissionTestApiEventBridgeLambdaStackSampleAPIEventBridgeMultiConsumerF10899BCPOSTitems910D1EE7` (AWS::Lambda::Permission) → `Properties.SourceArn` L656 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L688 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.ResourceId` L717 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `SampleAPIEventBridgeMultiConsumeritemsPOSTD2DFDA56` (AWS::ApiGateway::Method) → `Properties.RestApiId` L720 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Action` L181 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.FunctionName` L183 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.Principal` L188 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer1LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer1Lambda3A2F7294318BC23E` (AWS::Lambda::Permission) → `Properties.SourceArn` L190 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Action` L291 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.FunctionName` L293 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.Principal` L298 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `eventConsumer2LambdaRuleAllowEventRuleApiEventBridgeLambdaStackeventConsumer2LambdaB60B781EECB58ACF` (AWS::Lambda::Permission) → `Properties.SourceArn` L300 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L149 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.ResourceId` L154 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWANYD1FA3A5F` (AWS::ApiGateway::Method) → `Properties.RestApiId` L160 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeployment621CA0B04c89657aa92ebebc2018c4cd4a761ecd` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L114 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L134 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.StageName` L136 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.ParentId` L171 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.PathPart` L176 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexampleDE4620AC` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L178 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L189 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.ResourceId` L247 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `ApiGWexamplePOST6CAE6201` (AWS::ApiGateway::Method) → `Properties.RestApiId` L250 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L359 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Database` L681 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.Name` L682 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L683 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `alleventsbyuserIdquery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L684 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `gluecrawlerroleB13EEB29` (AWS::IAM::Role) → `Properties.RoleName` L555 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `logauditingworkgroup` (AWS::Athena::WorkGroup) → `Properties.Name` L618 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `logsbucketE18563D9` (AWS::S3::Bucket) → `Properties.BucketName` L7 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `logsbucketPolicy6C60198C` (AWS::S3::BucketPolicy) → `Properties.Bucket` L42 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `logscrawler` (AWS::Glue::Crawler) → `Properties.Name` L571 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L651 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L652 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L653 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `producteventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L654 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `queryoutputbucket3DDDB997` (AWS::S3::Bucket) → `Properties.BucketName` L185 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `queryoutputbucketPolicy2BC02580` (AWS::S3::BucketPolicy) → `Properties.Bucket` L216 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Content` L292 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `samplefilesAwsCliLayerCFFFB375` (AWS::Lambda::LayerVersion) → `Properties.Description` L298 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Database` L666 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Database' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.Name` L667 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.QueryString` L668 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'QueryString' is create-only; updating it will cause resource replacement +- **I9001** `usereventsbydatequery` (AWS::Athena::NamedQuery) → `Properties.WorkGroup` L669 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Property 'WorkGroup' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.RoleName` L19 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.RoleName` L83 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Description` L55 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy034C77CD2` (AWS::IAM::ManagedPolicy) → `Properties.Path` L56 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CDKDataSyncS3Policy1E7D7BFA5` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L11 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'S3BucketArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.S3BucketArn` L26 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'S3BucketArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.DestinationLocationArn` L38 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'DestinationLocationArn' is create-only; updating it will cause resource replacement +- **I9001** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.SourceLocationArn` L44 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Property 'SourceLocationArn' is create-only; updating it will cause resource replacement +- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L256 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L273 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L291 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L303 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L304 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L311 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L313 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L131 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `appasgASGE5B53758` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L147 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroup8B8185FA` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L21 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L32 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L34 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L39 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L41 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `appasgInstanceSecurityGroupfromASGStacksgalb85F2758980805783DB9D` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L46 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L95 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L98 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L100 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L101 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L102 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `appasgLaunchConfig9EFFB3A3` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L117 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L221 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L222 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L240 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L168 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L169 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L187 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L198 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L200 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L205 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L207 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `sgnextcloudfromASGStacksgalb85F275898080011A1DCA` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L212 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPC92636AB0` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L300 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1DefaultRouteD1B9E467` (AWS::EC2::Route) → `Properties.RouteTableId` L305 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L287 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableAssociation46F1FFFC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L290 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1RouteTableF6513BC2` (AWS::EC2::RouteTable) → `Properties.VpcId` L276 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L235 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet1Subnet571D3690` (AWS::EC2::Subnet) → `Properties.VpcId` L259 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L381 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2DefaultRoute52A1F245` (AWS::EC2::Route) → `Properties.RouteTableId` L386 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTable9AC81FAC` (AWS::EC2::RouteTable) → `Properties.VpcId` L357 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L368 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2RouteTableAssociation336D47D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L371 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L316 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.CidrBlock` L323 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPrivateSubnet2SubnetCC3D7013` (AWS::EC2::Subnet) → `Properties.VpcId` L340 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1DefaultRoute6D26543F` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1NATGatewayC61D892B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTable17DA183D` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1RouteTableAssociationE5186D77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet1Subnet770D4FF2` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2DefaultRouteFEB062B2` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTable3609F42C` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2RouteTableAssociationB4B0A733` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCPublicSubnet2Subnet73F96DA9` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TheVPCVPCGWC9B93E30` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L414 in `cdk_py-docker-app-with-asg-alb--NetworkStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L98 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Engine` L100 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L115 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `RDSSecretAttachment39FC3A79` (AWS::SecretsManager::SecretTargetAttachment) → `Properties.SecretId` L80 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'SecretId' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L6 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L7 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L25 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `efsstorage` (AWS::EFS::FileSystem) → `Properties.Encrypted` L6 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'Encrypted' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L15 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L16 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L34 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Action` L314 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.FunctionName` L316 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.Principal` L321 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaconsumerlambdafunction1EF0C7D6888AA909` (AWS::Lambda::Permission) → `Properties.SourceArn` L323 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Action` L292 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.FunctionName` L294 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.Principal` L299 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `oneminuteruleAllowEventRuledynamodblambdaproducerlambdafunction1E7146624783D604` (AWS::Lambda::Permission) → `Properties.SourceArn` L301 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupPlanId` L1012 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupPlanId' is create-only; updating it will cause resource replacement +- **I9001** `AWSBackupPlanSelectionAF95B30F` (AWS::Backup::BackupSelection) → `Properties.BackupSelection` L1017 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupSelection' is create-only; updating it will cause resource replacement +- **I9001** `BackupVault3A9C5852` (AWS::Backup::BackupVault) → `Properties.BackupVaultName` L939 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BackupVaultName' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L606 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.ImageId` L617 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.InstanceType` L619 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L620 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.SubnetId` L629 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `BastionHost30F9ED05` (AWS::EC2::Instance) → `Properties.UserData` L638 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L504 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionHostInstanceSecurityGroupE75D4274` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L528 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Action` L828 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.FunctionName` L830 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.Principal` L835 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ScheduleRuleAllowEventRuleec2cloudwatchScheduleRuleScheduleRuleTarget0Handler5EF9EBA726A6C94B` (AWS::Lambda::Permission) → `Properties.SourceArn` L837 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L652 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L653 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L685 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKAC02ED99` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1DefaultRoute3081953E` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableAssociation7F2E7FF7` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1RouteTableB5578A45` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet1SubnetE081A3F6` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2DefaultRoute0D482744` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTable5CB16C6C` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2RouteTableAssociation68ADF807` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPrivateSubnet2Subnet6D9A025D` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1DefaultRoute1FF73EA6` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1NATGateway291FE40B` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTable0BDD81D8` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1RouteTableAssociation616E7197` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet1SubnetE7F939D2` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2DefaultRouteC022B913` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2NATGateway3450887A` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableAssociation163F9AFA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2RouteTableF7A722BD` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKPublicSubnet2SubnetBDC76372` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L475 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L492 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKS3EndpointF02E5219` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L494 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcFromCDKVPCGW6C4E6589` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L735 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L742 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.ImageId` L756 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.InstanceType` L758 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.KeyName` L759 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L760 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.SubnetId` L769 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `WebInstanceF774E10D` (AWS::EC2::Instance) → `Properties.UserData` L778 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCD8B6F71D` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1DefaultRouteCFD77CC9` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTable3887499F` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1RouteTableAssociation843B9F02` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet1SubnetD04D043D` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2DefaultRoute85237B46` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTable30EC1F5C` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2RouteTableAssociationFF89750A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPrivateSubnet2Subnet5FF59B97` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1DefaultRoute1092379D` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1NATGatewayBD9137E7` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableAssociation902A4A27` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1RouteTableC0F77754` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet1Subnet2B93B79E` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2DefaultRoute5E2EBF45` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2NATGatewayCDA3DB43` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTable5A43F858` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2RouteTableAssociation4EB0B814` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCPublicSubnet2Subnet285316DC` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ServiceConnectVPCVPCGW60A84FEA` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.RepositoryName` L17 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.RepositoryName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Property 'RepositoryName' is create-only; updating it will cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Cluster` L474 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.LaunchType` L482 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.ServiceName` L518 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L337 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L366 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L368 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Family` L373 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Memory` L374 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L375 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L376 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L380 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.ClusterName` L6 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Name` L29 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Vpc` L31 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Vpc' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L219 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L239 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.FromPort` L250 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'FromPort' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L252 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L257 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L259 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `ECSSecurityGroupfromCdkExamplesServiceConnectStackEcsStackPublicLBSG6A107D2A50006E3540BF` (AWS::EC2::SecurityGroupIngress) → `Properties.ToPort` L264 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ToPort' is create-only; updating it will cause resource replacement +- **I9001** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L42 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L602 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L619 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.LoadBalancerArn` L637 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LoadBalancerArn' is create-only; updating it will cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Cluster` L402 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.LaunchType` L411 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.ServiceName` L456 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L273 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L302 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L304 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Family` L309 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Memory` L310 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L311 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L312 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L316 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.ListenerArn` L668 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'ListenerArn' is create-only; updating it will cause resource replacement +- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L533 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L551 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Name` L566 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L567 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L568 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.TargetType` L579 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'TargetType' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L582 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Applications` L317 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Applications' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Configurations` L322 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Configurations' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.JobFlowRole` L365 in `cdk_py-emr--emr-cluster.template_json` + > Property 'JobFlowRole' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.LogUri` L367 in `cdk_py-emr--emr-cluster.template_json` + > Property 'LogUri' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Name` L378 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ReleaseLabel` L379 in `cdk_py-emr--emr-cluster.template_json` + > Property 'ReleaseLabel' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.ServiceRole` L381 in `cdk_py-emr--emr-cluster.template_json` + > Property 'ServiceRole' is create-only; updating it will cause resource replacement +- **I9001** `emrcluster` (AWS::EMR::Cluster) → `Properties.Steps` L383 in `cdk_py-emr--emr-cluster.template_json` + > Property 'Steps' is create-only; updating it will cause resource replacement +- **I9001** `emrjobflowprofile` (AWS::IAM::InstanceProfile) → `Properties.InstanceProfileName` L303 in `cdk_py-emr--emr-cluster.template_json` + > Property 'InstanceProfileName' is create-only; updating it will cause resource replacement +- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcA2121C38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_py-emr--emr-cluster.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `vpcVPCGW7984C166` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L210 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_py-emr--emr-cluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1DefaultRouteF0973989` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableA38152FE` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1RouteTableAssociationB46101B8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_py-emr--emr-cluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_py-emr--emr-cluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet1SubnetA635257E` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L174 in `cdk_py-emr--emr-cluster.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2DefaultRoute13685A07` (AWS::EC2::Route) → `Properties.RouteTableId` L179 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableA6135437` (AWS::EC2::RouteTable) → `Properties.VpcId` L150 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L161 in `cdk_py-emr--emr-cluster.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2RouteTableAssociation73F6478A` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L164 in `cdk_py-emr--emr-cluster.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L109 in `cdk_py-emr--emr-cluster.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L116 in `cdk_py-emr--emr-cluster.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `vpcpublicSubnet2Subnet027D165B` (AWS::EC2::Subnet) → `Properties.VpcId` L133 in `cdk_py-emr--emr-cluster.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.PolicyName` L416 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001PolicyPrincipalAttachment` (AWS::IoT::PolicyPrincipalAttachment) → `Properties.Principal` L418 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.Principal` L448 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `CdkThing001ThingPrincipalAttachment` (AWS::IoT::ThingPrincipalAttachment) → `Properties.ThingName` L469 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ThingName' is create-only; updating it will cause resource replacement +- **I9001** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.FunctionName` L76 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L519 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `CfnPolicy` (AWS::IoT::Policy) → `Properties.PolicyName` L407 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `CfnRole` (AWS::IAM::Role) → `Properties.RoleName` L510 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `IoTCertCustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L339 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MyCdkThing` (AWS::IoT::Thing) → `Properties.ThingName` L6 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Property 'ThingName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Action` L84 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.FunctionName` L86 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.Principal` L91 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RuleAllowEventRuleLambdaCronExampleSingleton4F1DF641E5122DD7` (AWS::Lambda::Permission) → `Properties.SourceArn` L93 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.FunctionName` L51 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.PackageType` L53 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.CompatibleRuntimes` L6 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'CompatibleRuntimes' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Content` L11 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `helperlayerC2FA2F58` (AWS::Lambda::LayerVersion) → `Properties.Description` L17 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L12 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L452 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.ResourceId` L477 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANY5994BD69` (AWS::ApiGateway::Method) → `Properties.RestApiId` L483 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Action` L419 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.FunctionName` L421 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.Principal` L426 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYD47A7EFF` (AWS::Lambda::Permission) → `Properties.SourceArn` L428 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Action` L383 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.FunctionName` L385 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.Principal` L390 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYB5D53F00` (AWS::Lambda::Permission) → `Properties.SourceArn` L392 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeployment97FF782966d8a7a27285a49d048d420aab9f3106` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L224 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L244 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.StageName` L246 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.DomainName` L493 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiDomainMapurlshortappUrlShortenerApiB1BAB0CD7C6BCC1C` (AWS::ApiGateway::BasePathMapping) → `Properties.DomainName` L509 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.ParentId` L259 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.PathPart` L264 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxy991A3B5C` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L266 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L345 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L370 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANY05B511A9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L373 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Action` L312 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.FunctionName` L314 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionTesturlshortappUrlShortenerApiB1BAB0CDANYproxy1B61094D` (AWS::Lambda::Permission) → `Properties.SourceArn` L321 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Action` L276 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.FunctionName` L278 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.Principal` L283 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerApiproxyANYApiPermissionurlshortappUrlShortenerApiB1BAB0CDANYproxy8ED41C08` (AWS::Lambda::Permission) → `Properties.SourceArn` L285 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L539 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `UrlShortenerDomain9F16453F` (AWS::Route53::RecordSet) → `Properties.Name` L540 in `cdk_py-url-shortener--urlshort-app.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L47 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L49 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Family` L54 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Memory` L55 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L56 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L61 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L185 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L193 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Cluster` L139 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.LaunchType` L152 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L317 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement +- **I9001** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L324 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L471 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'Direction' is create-only; updating it will cause resource replacement +- **I9001** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L484 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement +- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Direction` L407 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'Direction' is create-only; updating it will cause resource replacement +- **I9001** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.SecurityGroupIds` L420 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SecurityGroupIds' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPC9B993306` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTable6E169019` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1RouteTableAssociation41B46D9B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet1Subnet5DBB6B2C` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTable0899A697` (AWS::EC2::RouteTable) → `Properties.VpcId` L132 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L143 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2RouteTableAssociation53E27A3B` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L146 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L91 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `R53ResolverTestVPCPrivateSubnet2Subnet495784E7` (AWS::EC2::Subnet) → `Properties.VpcId` L115 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L436 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L461 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L334 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L397 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Action` L103 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.FunctionName` L105 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.Principal` L110 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceAccount` L112 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `BucketAllowBucketNotificationsToRekognitionLambdaS3TriggerStackRekFunction8330C87915B3782A` (AWS::Lambda::Permission) → `Properties.SourceArn` L115 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.KeySchema` L134 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L433 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASG46ED3070` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L444 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L336 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ASGInstanceSecurityGroup0525485D` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L351 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L401 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L404 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L406 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L407 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `ASGLaunchConfigC00AF12B` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L416 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L83 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L86 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L293 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1DefaultRouteAE1D6490` (AWS::EC2::Route) → `Properties.RouteTableId` L298 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L280 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableAssociation347902D1` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L283 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1RouteTableBE8A6027` (AWS::EC2::RouteTable) → `Properties.VpcId` L269 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L228 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.CidrBlock` L235 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPrivateSubnet1Subnet8BCA10E0` (AWS::EC2::Subnet) → `Properties.VpcId` L252 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L167 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1DefaultRoute91CEF279` (AWS::EC2::Route) → `Properties.RouteTableId` L172 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.AllocationId` L201 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1NATGatewayE0556630` (AWS::EC2::NatGateway) → `Properties.SubnetId` L207 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L154 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableAssociation0B0896DC` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L157 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1RouteTableFEE4B781` (AWS::EC2::RouteTable) → `Properties.VpcId` L143 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L102 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.CidrBlock` L109 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCPublicSubnet1SubnetB4246D30` (AWS::EC2::Subnet) → `Properties.VpcId` L126 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCVPCGW99B986DC` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L326 in `cdk_resource-overrides--resource-overrides.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L510 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Name` L523 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L466 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResolverQueryLogConfigId` L494 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'ResolverQueryLogConfigId' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogAssoc` (AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation) → `Properties.ResourceId` L497 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.DestinationArn` L479 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationArn' is create-only; updating it will cause resource replacement +- **I9001** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Name` L484 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Name` L549 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.FirewallRuleGroupId` L559 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'FirewallRuleGroupId' is create-only; updating it will cause resource replacement +- **I9001** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.VpcId` L564 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Vpc8378EB38` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L342 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1DefaultRouteBE02A9ED` (AWS::EC2::Route) → `Properties.RouteTableId` L347 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L329 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableAssociation70C59FA6` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L332 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1RouteTableB2C5B500` (AWS::EC2::RouteTable) → `Properties.VpcId` L318 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L277 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L284 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet1Subnet536B997A` (AWS::EC2::Subnet) → `Properties.VpcId` L301 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L423 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2DefaultRoute060D2087` (AWS::EC2::Route) → `Properties.RouteTableId` L428 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableA678073B` (AWS::EC2::RouteTable) → `Properties.VpcId` L399 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L410 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2RouteTableAssociationA89CAD56` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L413 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L358 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L365 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPrivateSubnet2Subnet3788AAA1` (AWS::EC2::Subnet) → `Properties.VpcId` L382 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L90 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1DefaultRoute3DA9E72A` (AWS::EC2::Route) → `Properties.RouteTableId` L95 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.AllocationId` L124 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1NATGateway4D7517AA` (AWS::EC2::NatGateway) → `Properties.SubnetId` L130 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTable6C95E38E` (AWS::EC2::RouteTable) → `Properties.VpcId` L66 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L77 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1RouteTableAssociation97140677` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L80 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L25 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L32 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet1Subnet5C2D37C4` (AWS::EC2::Subnet) → `Properties.VpcId` L49 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L216 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2DefaultRoute97F91067` (AWS::EC2::Route) → `Properties.RouteTableId` L221 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.AllocationId` L250 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2NATGateway9182C01D` (AWS::EC2::NatGateway) → `Properties.SubnetId` L256 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTable94F7E489` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2RouteTableAssociationDD5762D8` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L206 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L151 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L158 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VpcPublicSubnet2Subnet691E08A3` (AWS::EC2::Subnet) → `Properties.VpcId` L175 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VpcVPCGWBF912B6E` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L456 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Bucket` L193 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Name` L195 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `examplebucketPolicyE09B485E` (AWS::S3::BucketPolicy) → `Properties.Bucket` L33 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Action` L171 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.FunctionName` L173 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `retrieveTransformedObjectLambdainvocationRestrictionD58B0218` (AWS::Lambda::Permission) → `Properties.SourceAccount` L182 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `s3ObjectLambdaAP` (AWS::S3ObjectLambda::AccessPoint) → `Properties.Name` L238 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.CidrBlock` L71 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpc2979FA29` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L74 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMDocumentTestVpcVPCGW7C58FC59` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L191 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L155 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1DefaultRouteE60C709F` (AWS::EC2::Route) → `Properties.RouteTableId` L160 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTable4C0F352E` (AWS::EC2::RouteTable) → `Properties.VpcId` L131 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L142 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1RouteTableAssociation3C51BE77` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L145 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L90 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L97 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SSMDocumentTestVpcpublicSubnet1SubnetB0B3C43E` (AWS::EC2::Subnet) → `Properties.VpcId` L114 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.AvailabilityZone` L405 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.ImageId` L416 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.InstanceType` L418 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L419 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.SubnetId` L428 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceA55C9969` (AWS::EC2::Instance) → `Properties.UserData` L441 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L362 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SSMTestInstanceInstanceSecurityGroup68B5BAFB` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L381 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Content` L6 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.DocumentType` L36 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Name` L37 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Content` L133 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicDeployWebsiteAwsCliLayer198D4134` (AWS::Lambda::LayerVersion) → `Properties.Description` L139 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `StaticSiteBasicWebsiteBucketPolicy8E799A1F` (AWS::S3::BucketPolicy) → `Properties.Bucket` L36 in `cdk_static-site-basic--MyStaticSite.template_json` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.StateMachineType` L107 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'StateMachineType' is create-only; updating it will cause resource replacement +- **I9001** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L6 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeployment77C863276f473a57d5bd4cb772b382f83651c7a2` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L139 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L158 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.StageName` L160 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.ParentId` L170 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'ParentId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.PathPart` L175 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'PathPart' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiorders391C1FA5` (AWS::ApiGateway::Resource) → `Properties.RestApiId` L177 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L234 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.ResourceId` L319 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `StepFuncApiordersGET0318ABB9` (AWS::ApiGateway::Method) → `Properties.RestApiId` L322 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Name` L11 in `gh-issues_issue-144_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Flow` (AWS::MediaConnect::Flow) → `Properties.Source.Name` L13 in `gh-issues_issue-144_yaml` + > Property 'Source.Name' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Action` L32 in `gh-issues_issue-183_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L33 in `gh-issues_issue-183_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L34 in `gh-issues_issue-183_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PermissionInvalidAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L35 in `gh-issues_issue-183_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Action` L22 in `gh-issues_issue-183_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.FunctionName` L23 in `gh-issues_issue-183_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.Principal` L24 in `gh-issues_issue-183_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PermissionWithAccountId` (AWS::Lambda::Permission) → `Properties.SourceArn` L25 in `gh-issues_issue-183_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L15 in `gh-issues_issue-186-clb_json` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `CLBA83A883E` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L19 in `gh-issues_issue-186-clb_json` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ImagePipeline7DDDE57F` (AWS::ImageBuilder::ImagePipeline) → `Properties.Name` L24 in `gh-issues_issue-186-imagebuilder_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L24 in `gh-issues_issue-226_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `gh-issues_issue-226_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L68 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L69 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Engine` L143 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Engine` L138 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L190 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceAutomatedBackupsArn` L191 in `gh-issues_issue-235_yaml` + > Property 'SourceDBInstanceAutomatedBackupsArn' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.Engine` L27 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Cluster` (AWS::RDS::DBCluster) → `Properties.StorageEncrypted` L28 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L149 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Engine` L148 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBClusterSnapshotIdentifier` L167 in `gh-issues_issue-235_yaml` + > Property 'DBClusterSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L166 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L80 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L79 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L56 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L57 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L62 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L63 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L227 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L226 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L228 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L109 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L110 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L220 in `gh-issues_issue-235_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Engine` L219 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L221 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L85 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L86 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L202 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L91 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L92 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L207 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L208 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L115 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L116 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Engine` L133 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L121 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L122 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L161 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Engine` L160 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Engine` L172 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L173 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L74 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L44 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L45 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Engine` L127 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L128 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.KmsKeyId` L39 in `gh-issues_issue-235_yaml` + > Property 'KmsKeyId' is create-only; updating it will cause resource replacement +- **I9001** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Engine` L213 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.DBSnapshotIdentifier` L155 in `gh-issues_issue-235_yaml` + > Property 'DBSnapshotIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L154 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L196 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBClusterIdentifier` L197 in `gh-issues_issue-235_yaml` + > Property 'SourceDBClusterIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Engine` L178 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.SourceDBInstanceIdentifier` L179 in `gh-issues_issue-235_yaml` + > Property 'SourceDBInstanceIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Engine` L184 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.SourceDbiResourceId` L185 in `gh-issues_issue-235_yaml` + > Property 'SourceDbiResourceId' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L50 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L51 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L103 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L104 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Engine` L97 in `gh-issues_issue-235_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L98 in `gh-issues_issue-235_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L20 in `gh-issues_issue-246_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `HttpsAlias` (AWS::Route53::RecordSet) → `Properties.Name` L21 in `gh-issues_issue-246_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L6 in `gh-issues_issue-247_json` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L12 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L21 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AResourceRef` (AWS::Route53::RecordSet) → `Properties.Name` L22 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L30 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `AaaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L57 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `CaaGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L58 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L66 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `DynamicParameter` (AWS::Route53::RecordSet) → `Properties.Name` L67 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneId` L75 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L48 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MxGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L49 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.HostedZoneId` L39 in `gh-issues_issue-264_yaml` + > Property 'HostedZoneId' is create-only; updating it will cause resource replacement +- **I9001** `TxtGetAtt` (AWS::Route53::RecordSet) → `Properties.Name` L40 in `gh-issues_issue-264_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-34_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-34_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.ImageId` L23 in `gh-issues_issue-34_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance2` (AWS::EC2::Instance) → `Properties.InstanceType` L24 in `gh-issues_issue-34_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L11 in `gh-issues_issue-36_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `gh-issues_issue-37_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L6 in `gh-issues_issue-37_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L7 in `gh-issues_issue-37_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Name` L6 in `gh-issues_issue-38_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-39_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L12 in `gh-issues_issue-39_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L35 in `gh-issues_issue-39_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L16 in `gh-issues_issue-40_yaml` + > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement +- **I9001** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.NodeType` L17 in `gh-issues_issue-40_yaml` + > Property 'NodeType' is create-only; updating it will cause resource replacement +- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.IAMRoleARN` L28 in `gh-issues_issue-40_yaml` + > Property 'IAMRoleARN' is create-only; updating it will cause resource replacement +- **I9001** `DaxRef` (AWS::DAX::Cluster) → `Properties.NodeType` L29 in `gh-issues_issue-40_yaml` + > Property 'NodeType' is create-only; updating it will cause resource replacement +- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.Name` L5 in `gh-issues_issue-40_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `EksCluster` (AWS::EKS::Cluster) → `Properties.RoleArn` L6 in `gh-issues_issue-40_yaml` + > Property 'RoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-41_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L35 in `gh-issues_issue-42-if_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L28 in `gh-issues_issue-42-if_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L29 in `gh-issues_issue-42-if_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L30 in `gh-issues_issue-42-if_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L19 in `gh-issues_issue-42-if_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L18 in `gh-issues_issue-42-if_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L30 in `gh-issues_issue-42-ref_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L23 in `gh-issues_issue-42-ref_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L24 in `gh-issues_issue-42-ref_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L25 in `gh-issues_issue-42-ref_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L14 in `gh-issues_issue-42-ref_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L13 in `gh-issues_issue-42-ref_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.Cluster` L23 in `gh-issues_issue-42_yaml` + > Property 'Cluster' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Port` L16 in `gh-issues_issue-42_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Protocol` L17 in `gh-issues_issue-42_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.VpcId` L18 in `gh-issues_issue-42_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `gh-issues_issue-42_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `gh-issues_issue-42_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L7 in `gh-issues_issue-45_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcEndpointType` L6 in `gh-issues_issue-45_json` + > Property 'VpcEndpointType' is create-only; updating it will cause resource replacement +- **I9001** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L8 in `gh-issues_issue-45_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.RoleArn` L7 in `gh-issues_issue-46_json` + > Property 'RoleArn' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-47_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.DBClusterIdentifier` L11 in `gh-issues_issue-49_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L16 in `gh-issues_issue-49_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Ec2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L17 in `gh-issues_issue-49_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L6 in `gh-issues_issue-52_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L7 in `gh-issues_issue-52_json` + > Property 'NodeRole' is create-only; updating it will cause resource replacement +- **I9001** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Subnets` L8 in `gh-issues_issue-52_json` + > Property 'Subnets' is create-only; updating it will cause resource replacement +- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L596 in `gh-issues_issue-53_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L605 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.AmiType` L957 in `gh-issues_issue-53_json` + > Property 'AmiType' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.ClusterName` L959 in `gh-issues_issue-53_json` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.InstanceTypes` L962 in `gh-issues_issue-53_json` + > Property 'InstanceTypes' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.NodeRole` L966 in `gh-issues_issue-53_json` + > Property 'NodeRole' is create-only; updating it will cause resource replacement +- **I9001** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Subnets` L976 in `gh-issues_issue-53_json` + > Property 'Subnets' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Content` L462 in `gh-issues_issue-53_json` + > Property 'Content' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.Description` L468 in `gh-issues_issue-53_json` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `KubectlLayer600207B5` (AWS::Lambda::LayerVersion) → `Properties.LicenseInfo` L469 in `gh-issues_issue-53_json` + > Property 'LicenseInfo' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcFAC913E5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L9 in `gh-issues_issue-53_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L334 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1DefaultRouteB00E5F42` (AWS::EC2::Route) → `Properties.RouteTableId` L339 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTable886260DA` (AWS::EC2::RouteTable) → `Properties.VpcId` L316 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L324 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1RouteTableAssociation0C8C18D3` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L327 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L270 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet1Subnet0B127D2C` (AWS::EC2::Subnet) → `Properties.VpcId` L298 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L411 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2DefaultRoute99CA0CB9` (AWS::EC2::Route) → `Properties.RouteTableId` L416 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTable1EDE83AC` (AWS::EC2::RouteTable) → `Properties.VpcId` L393 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L401 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2RouteTableAssociation1643AB72` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L404 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L347 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.CidrBlock` L354 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPrivateSubnet2SubnetCD612986` (AWS::EC2::Subnet) → `Properties.VpcId` L375 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L86 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1DefaultRoute321532E0` (AWS::EC2::Route) → `Properties.RouteTableId` L91 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.AllocationId` L118 in `gh-issues_issue-53_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1NATGateway7AFB18E6` (AWS::EC2::NatGateway) → `Properties.SubnetId` L124 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTable5F0A6273` (AWS::EC2::RouteTable) → `Properties.VpcId` L68 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L76 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1RouteTableAssociation2AB88B08` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L79 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L22 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet1Subnet7A3A7B5D` (AWS::EC2::Subnet) → `Properties.VpcId` L50 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L210 in `gh-issues_issue-53_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2DefaultRouteE14C718B` (AWS::EC2::Route) → `Properties.RouteTableId` L215 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.AllocationId` L242 in `gh-issues_issue-53_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2NATGateway5AD59565` (AWS::EC2::NatGateway) → `Properties.SubnetId` L248 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L200 in `gh-issues_issue-53_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableAssociationF7485C52` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L203 in `gh-issues_issue-53_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2RouteTableEC6A2C2A` (AWS::EC2::RouteTable) → `Properties.VpcId` L192 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L146 in `gh-issues_issue-53_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.CidrBlock` L153 in `gh-issues_issue-53_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcPublicSubnet2Subnet42A6D42E` (AWS::EC2::Subnet) → `Properties.VpcId` L174 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `UserVpcVPCGWEFD8AF3B` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L438 in `gh-issues_issue-53_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `WeakConsumer` (AWS::SNS::Topic) → `Properties.TopicName` L7 in `gh-issues_issue-56_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `Canary` (AWS::Synthetics::Canary) → `Properties.Name` L6 in `gh-issues_issue-62_json` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyLambda` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `gh-issues_issue-65_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Action` L18 in `gh-issues_issue-65_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.FunctionName` L19 in `gh-issues_issue-65_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.Principal` L20 in `gh-issues_issue-65_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `S3Permission` (AWS::Lambda::Permission) → `Properties.SourceAccount` L21 in `gh-issues_issue-65_json` + > Property 'SourceAccount' is create-only; updating it will cause resource replacement +- **I9001** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L6 in `gh-issues_issue-67_json` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L19 in `gh-issues_issue-68_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MyFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L7 in `gh-issues_issue-68_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `BucketA` (AWS::S3::Bucket) → `Properties.BucketName` L13 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketB` (AWS::S3::Bucket) → `Properties.BucketName` L16 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CompoundSub` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRight` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `good_E3019_identity_no_false_positive_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L9 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L10 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L14 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `MultiElementJoinB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L15 in `good_E3022_multi_element_join_distinct_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `good_E9001_aws_cdk_metadata_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L8 in `good_W3010_getazs_not_flagged_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_W3010_getazs_not_flagged_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_W3010_getazs_not_flagged_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_W3010_getazs_not_flagged_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Authorizer1` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L19 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Deployment1` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L36 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L27 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.ResourceId` L26 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Method1` (AWS::ApiGateway::Method) → `Properties.RestApiId` L25 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L40 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Stage1` (AWS::ApiGateway::Stage) → `Properties.StageName` L42 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L9 in `good_aurora_dbinstance_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L7 in `good_aurora_dbinstance_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Engine` L6 in `good_aurora_dbinstance_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BucketLong` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `good_both_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketShort` (AWS::S3::Bucket) → `Properties.BucketName` L20 in `good_both_forms_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_complex_conditions_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L41 in `good_complex_conditions_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_complex_conditions_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L37 in `good_complex_conditions_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L39 in `good_complex_conditions_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DevBucket` (AWS::S3::Bucket) → `Properties.BucketName` L46 in `good_complex_conditions_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `good_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L96 in `good_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L91 in `good_core_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L31 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.SubnetId` L30 in `good_core_conditions_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L37 in `good_core_conditions_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L67 in `good_core_conditions_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L69 in `good_core_conditions_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L25 in `good_core_conditions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L26 in `good_core_conditions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_core_config_default_e3012_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myTable` (AWS::DynamoDB::Table) → `Properties.TableName` L11 in `good_core_config_default_e3012_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L63 in `good_core_resource_attributes_yaml` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.BucketName` L82 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DependsOnList` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.BucketName` L33 in `good_core_resource_attributes_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_is-defined_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_custom_is-not-defined_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-large_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L20 in `good_custom_numeric-inequalities-small_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L14 in `good_deletion_policies_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.Engine` L10 in `good_deletion_policies_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L11 in `good_deletion_policies_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L14 in `good_dynamodb_provisioned_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_provisioned_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_dynamodb_valid_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GoodTable` (AWS::DynamoDB::Table) → `Properties.TableName` L6 in `good_dynamodb_valid_attributes_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L7 in `good_ecs_awsvpc_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `Task` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L6 in `good_ecs_awsvpc_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L203 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L201 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L202 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L200 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L199 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L155 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L153 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L154 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L152 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L151 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L191 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L189 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L190 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L188 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L187 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L143 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L141 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Memory` L142 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L140 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L139 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.KeySchema` L177 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.KeySchema` L166 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.KeySchema` L112 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.TableName` L108 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L129 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L127 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Family` L123 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Memory` L128 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L126 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L124 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L70 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L67 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Family` L63 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Memory` L68 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L66 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L69 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L64 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L52 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Family` L48 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L51 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L49 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L81 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.TableName` L79 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.KeySchema` L97 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.TableName` L92 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L17 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L15 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Family` L11 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Memory` L16 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L14 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L12 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L37 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L35 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Family` L31 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Memory` L36 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L34 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L32 in `good_ecs_fargate_ddb_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L114 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L108 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Family` L105 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.Memory` L109 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.PlacementConstraints` L110 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'PlacementConstraints' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalRequiredProperties` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L106 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L32 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L27 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L24 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L28 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L26 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `EightVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L25 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L16 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L11 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L8 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L12 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L10 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `QuarterVcpuHalfGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L9 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L48 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L43 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L40 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L44 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L42 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `SixteenVcpuFortyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L41 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L80 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L75 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L72 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L76 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L74 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuOneTwentyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L73 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L64 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L59 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L56 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L60 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L58 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuSixtyGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L57 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L96 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L91 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Family` L88 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Memory` L92 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L90 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `ThirtyTwoVcpuTwoFortyFourGb` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L89 in `good_ecs_fargate_units_and_sizes_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_valid_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L7 in `good_ecs_fargate_valid_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_valid_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L8 in `good_ecs_fargate_valid_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_valid_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L10 in `good_ecs_fargate_valid_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `Service` (AWS::ECS::Service) → `Properties.LaunchType` L19 in `good_ecs_fargate_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L12 in `good_ecs_fargate_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L10 in `good_ecs_fargate_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Family` L6 in `good_ecs_fargate_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Memory` L11 in `good_ecs_fargate_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L9 in `good_ecs_fargate_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L7 in `good_ecs_fargate_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Subnets` L16 in `good_enum_case_insensitive_casing_yaml` + > Property 'ComputeResources.Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.ComputeResources.Type` L18 in `good_enum_case_insensitive_casing_yaml` + > Property 'ComputeResources.Type' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L20 in `good_enum_case_insensitive_casing_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `LowercaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L13 in `good_enum_case_insensitive_casing_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L27 in `good_enum_case_insensitive_casing_yaml` + > Property 'Tags' is create-only; updating it will cause resource replacement +- **I9001** `MixedCaseType` (AWS::Batch::ComputeEnvironment) → `Properties.Type` L25 in `good_enum_case_insensitive_casing_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L19 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L34 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L35 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L11 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Sg` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L12 in `good_functions_dynamic_reference_embedded_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster0` (AWS::ECS::Cluster) → `Properties.ClusterName` L14 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster1` (AWS::ECS::Cluster) → `Properties.ClusterName` L22 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L30 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L38 in `good_functions_findinmap_default_value_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.MeshName` L46 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.MeshName` L62 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L73 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.MeshName` L84 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.MeshName` L96 in `good_functions_findinmap_default_value_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::ECS::Cluster) → `Properties.ClusterName` L49 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster2` (AWS::ECS::Cluster) → `Properties.ClusterName` L81 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster3` (AWS::ECS::Cluster) → `Properties.ClusterName` L103 in `good_functions_findinmap_enhanced_yaml` + > Property 'ClusterName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh` (AWS::AppMesh::Mesh) → `Properties.MeshName` L23 in `good_functions_findinmap_enhanced_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.MeshName` L36 in `good_functions_findinmap_enhanced_yaml` + > Property 'MeshName' is create-only; updating it will cause resource replacement +- **I9001** `Queue` (AWS::SQS::Queue) → `Properties.QueueName` L62 in `good_functions_findinmap_enhanced_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `myInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L14 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L19 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L27 in `good_functions_findinmap_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.ApplicationId` L31 in `good_functions_relationship_conditions_sam_yaml` + > Property 'ApplicationId' is create-only; updating it will cause resource replacement +- **I9001** `InstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L31 in `good_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L26 in `good_functions_relationship_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_functions_select_string_index_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_functions_select_string_index_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L22 in `good_functions_select_string_index_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_functions_select_string_index_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L28 in `good_functions_select_string_index_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `TestRole` (AWS::IAM::Role) → `Properties.RoleName` L10 in `good_functions_sub_needed_custom_excludes_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L90 in `good_functions_sub_needed_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.ResourceId` L114 in `good_functions_sub_needed_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `GreetingRequest` (AWS::ApiGateway::Method) → `Properties.RestApiId` L115 in `good_functions_sub_needed_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `IOTPolicies` (AWS::IoT::Policy) → `Properties.PolicyName` L121 in `good_functions_sub_needed_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L57 in `good_functions_sub_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L58 in `good_functions_sub_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L60 in `good_functions_sub_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Name` L52 in `good_functions_sub_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L33 in `good_functions_sub_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.UserData` L35 in `good_functions_sub_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVPc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L73 in `good_functions_sub_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.AvailabilityZones` L125 in `good_generic_yaml` + > Property 'AvailabilityZones' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L133 in `good_generic_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L79 in `good_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.ImageId` L75 in `good_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L76 in `good_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.KeyName` L77 in `good_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L86 in `good_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.UserData` L88 in `good_generic_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L98 in `good_generic_yaml` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L95 in `good_generic_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L96 in `good_generic_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.KeyName` L97 in `good_generic_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L106 in `good_generic_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.UserData` L114 in `good_generic_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `RootInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L69 in `good_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L45 in `good_generic_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L12 in `good_getazs_resolves_current_regions_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L11 in `good_getazs_resolves_current_regions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.VpcId` L10 in `good_getazs_resolves_current_regions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L18 in `good_getazs_resolves_current_regions_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `good_getazs_resolves_current_regions_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `good_getazs_resolves_current_regions_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.PolicyName` L66 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyWithRefResource` (AWS::IAM::UserPolicy) → `Properties.UserName` L65 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.RoleName` L17 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.InstanceArn` L76 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'InstanceArn' is create-only; updating it will cause resource replacement +- **I9001** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Name` L77 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L5 in `good_lambda_permission_source_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L6 in `good_lambda_permission_source_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L7 in `good_lambda_permission_source_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L8 in `good_lambda_permission_source_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Action` L12 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.FunctionName` L13 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.Principal` L14 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `Perm` (AWS::Lambda::Permission) → `Properties.SourceArn` L15 in `good_lambda_permission_sourcearn_ref_no_account_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_snapstart_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFn` (AWS::Lambda::Function) → `Properties.FunctionName` L6 in `good_lambda_zipfile_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L23 in `good_mappings_used_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L21 in `good_mappings_used_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `good_no_value_yaml` + > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `good_no_value_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `good_no_value_yaml` + > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `good_no_value_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `good_no_value_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `good_no_value_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L145 in `good_no_value_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L148 in `good_no_value_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `good_no_value_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `good_no_value_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.AvailabilityZones` L12 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'AvailabilityZones' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.DBClusterIdentifier` L9 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::DocDB::DBCluster) → `Properties.MasterUsername` L10 in `good_no_w3010_on_unlisted_type_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L17 in `good_override_complete_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_complete_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `untaggedInstance` (AWS::EC2::Instance) → `Properties.ImageId` L13 in `good_override_complete_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `myS3Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_override_required_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L20 in `good_parameters_not_used_parameters_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L21 in `good_parameters_not_used_parameters_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L23 in `good_parameters_not_used_parameters_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L23 in `good_parameters_used_transforms_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L24 in `good_parameters_used_transforms_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L26 in `good_parameters_used_transforms_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.CidrBlock` L58 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet21` (AWS::EC2::Subnet) → `Properties.VpcId` L61 in `good_properties_ec2_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.CidrBlock` L65 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `mySubnet22` (AWS::EC2::Subnet) → `Properties.VpcId` L66 in `good_properties_ec2_vpc_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.CidrBlock` L32 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc1` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L33 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.CidrBlock` L38 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc2` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L37 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.CidrBlock` L43 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc3` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L42 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.CidrBlock` L48 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc4` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L47 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.CidrBlock` L53 in `good_properties_ec2_vpc_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `myVpc5` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L52 in `good_properties_ec2_vpc_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L41 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPrivateRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L43 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L32 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `AppSubnetPublicRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L34 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L64 in `good_properties_rt_association_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L70 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `CustomSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L71 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L49 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `ProxySubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L51 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L57 in `good_properties_rt_association_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L59 in `good_properties_rt_association_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NatGW` (AWS::EC2::NatGateway) → `Properties.SubnetId` L30 in `good_redshift_private_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L35 in `good_redshift_private_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Route1` (AWS::EC2::Route) → `Properties.RouteTableId` L34 in `good_redshift_private_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.VpcId` L21 in `good_redshift_private_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L7 in `good_redshift_private_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L6 in `good_redshift_private_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L26 in `good_redshift_private_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetRTAssoc` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L25 in `good_redshift_private_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `good_redshift_private_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.DBName` L9 in `good_redshift_valid_nodetype_yaml` + > Property 'DBName' is create-only; updating it will cause resource replacement +- **I9001** `Cluster` (AWS::Redshift::Cluster) → `Properties.MasterUsername` L7 in `good_redshift_valid_nodetype_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.ProjectArn` L14 in `good_region_conditional_resource_type_yaml` + > Property 'ProjectArn' is create-only; updating it will cause resource replacement +- **I9001** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Name` L8 in `good_resources_codepipeline_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_deletionpolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L13 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L38 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.KeySchema` L15 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema` L37 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema` L24 in `good_resources_dynamodb_attributes_transform_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `good_resources_dynamodb_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L47 in `good_resources_dynamodb_attributes_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CorrelatedIndex` (AWS::DynamoDB::Table) → `Properties.KeySchema` L31 in `good_resources_dynamodb_conditional_scenarios_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L55 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L60 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L126 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L130 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L109 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L113 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L27 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L35 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L44 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.CacheParameterGroupFamily` L19 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheParameterGroupFamily' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L74 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L80 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.AtRestEncryptionEnabled` L143 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'AtRestEncryptionEnabled' is create-only; updating it will cause resource replacement +- **I9001** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L147 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.CacheSubnetGroupName` L93 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'CacheSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Port` L99 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Property 'Port' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L7 in `good_resources_iam_managed_policy_description_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `SomeManagedPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L14 in `good_resources_iam_policy_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Path` L43 in `good_resources_iam_ref_with_path_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L80 in `good_resources_iam_ref_with_path_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupName` L79 in `good_resources_iam_ref_with_path_yaml` + > Property 'GroupName' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L81 in `good_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L75 in `good_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L74 in `good_resources_iam_ref_with_path_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `CodeBuildVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L64 in `good_resources_iam_ref_with_path_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Function3` (AWS::Lambda::Function) → `Properties.PackageType` L29 in `good_resources_lambda_required_properties_yaml` + > Property 'PackageType' is create-only; updating it will cause resource replacement +- **I9001** `myInstance` (AWS::EC2::Instance) → `Properties.ImageId` L6 in `good_resources_name_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Action` L92 in `good_resources_primary_identifiers_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.FunctionName` L91 in `good_resources_primary_identifiers_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission1` (AWS::Lambda::Permission) → `Properties.Principal` L93 in `good_resources_primary_identifiers_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Action` L98 in `good_resources_primary_identifiers_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.FunctionName` L97 in `good_resources_primary_identifiers_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionPermission2` (AWS::Lambda::Permission) → `Properties.Principal` L99 in `good_resources_primary_identifiers_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.Path` L17 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole` (AWS::IAM::Role) → `Properties.RoleName` L18 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.Path` L40 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole3` (AWS::IAM::Role) → `Properties.RoleName` L41 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.Path` L63 in `good_resources_primary_identifiers_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `RootRole4` (AWS::IAM::Role) → `Properties.RoleName` L64 in `good_resources_primary_identifiers_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.Path` L9 in `good_resources_properties_allowed_pattern_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `TESTROLE` (AWS::IAM::Role) → `Properties.RoleName` L8 in `good_resources_properties_allowed_pattern_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L8 in `good_resources_properties_az_cdk_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Subnet) → `Properties.VpcId` L7 in `good_resources_properties_az_cdk_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L12 in `good_resources_properties_exclusive_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.CidrIp` L6 in `good_resources_properties_exclusive_yaml` + > Property 'CidrIp' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.GroupId` L8 in `good_resources_properties_exclusive_yaml` + > Property 'GroupId' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.IpProtocol` L7 in `good_resources_properties_exclusive_yaml` + > Property 'IpProtocol' is create-only; updating it will cause resource replacement +- **I9001** `Ingress` (AWS::EC2::SecurityGroupIngress) → `Properties.SourceSecurityGroupId` L5 in `good_resources_properties_exclusive_yaml` + > Property 'SourceSecurityGroupId' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L18 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L39 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.PipelineName` L89 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'PipelineName' is create-only; updating it will cause resource replacement +- **I9001** `SampleBadBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `SampleRole` (AWS::IAM::Role) → `Properties.Path` L41 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `Authorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L6 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::BucketPolicy) → `Properties.Bucket` L20 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyDB` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L21 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `MyIAMUser` (AWS::IAM::User) → `Properties.UserName` L45 in `good_resources_properties_password_yaml` + > Property 'UserName' is create-only; updating it will cause resource replacement +- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Engine` L29 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myNewDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L30 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Engine` L38 in `good_resources_properties_password_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L39 in `good_resources_properties_password_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `AppSyncSchema` (AWS::AppSync::GraphQLSchema) → `Properties.ApiId` L10 in `good_resources_properties_templated_code_yaml` + > Property 'ApiId' is create-only; updating it will cause resource replacement +- **I9001** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Engine` L14 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Engine` L20 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Engine` L26 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Engine` L33 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Engine` L40 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Engine` L46 in `good_resources_rds_instance_sizes_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.Engine` L12 in `good_resources_rds_not_enum_master_username_parameter_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ParameterUsername` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L13 in `good_resources_rds_not_enum_master_username_parameter_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_resources_s3_access-control-obsolete_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `BucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L13 in `good_resources_s3_access-control-obsolete_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L15 in `good_resources_update_policy_supported_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L16 in `good_resources_update_policy_supported_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L11 in `good_resources_update_policy_supported_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.FunctionName` L23 in `good_resources_update_policy_supported_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `MyAlias` (AWS::Lambda::Alias) → `Properties.Name` L25 in `good_resources_update_policy_supported_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MyFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L29 in `good_resources_update_policy_supported_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L36 in `good_resources_updatereplacepolicy_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `GroupBothBranchesValid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L36 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupMutuallyExclusiveCnameItems` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L75 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `GroupUnreachableInvalid` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L51 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L13 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneBothBranchesValid` (AWS::Route53::RecordSet) → `Properties.Name` L14 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L65 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneMutuallyExclusiveCnameItems` (AWS::Route53::RecordSet) → `Properties.Name` L66 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L25 in `good_route53_conditional_record_arrays_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `StandaloneUnreachableInvalid` (AWS::Route53::RecordSet) → `Properties.Name` L26 in `good_route53_conditional_record_arrays_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Group` (AWS::Route53::RecordSetGroup) → `Properties.HostedZoneName` L21 in `good_route53_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L12 in `good_route53_conditional_record_items_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `Standalone` (AWS::Route53::RecordSet) → `Properties.Name` L13 in `good_route53_conditional_record_items_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L14 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalProperties` (AWS::Route53::RecordSet) → `Properties.Name` L15 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L61 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `LiteralNoValueAlias` (AWS::Route53::RecordSet) → `Properties.Name` L62 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.HostedZoneName` L30 in `good_route53_conditional_scenarios_yaml` + > Property 'HostedZoneName' is create-only; updating it will cause resource replacement +- **I9001** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.Name` L31 in `good_route53_conditional_scenarios_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.PolicyName` L16 in `good_schema_required_xor_resource_condition_yaml` + > Property 'PolicyName' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ResourceId` L19 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalableDimension` L20 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ScalableDimension' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ScalingTargetId` L18 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ScalingTargetId' is create-only; updating it will cause resource replacement +- **I9001** `Policy` (AWS::ApplicationAutoScaling::ScalingPolicy) → `Properties.ServiceNamespace` L21 in `good_schema_required_xor_resource_condition_yaml` + > Property 'ServiceNamespace' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `good_schema_valid_resources_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_simple_sub_prefix_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L25 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L37 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L48 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L76 in `good_some_logs_stream_lambda_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L7 in `good_sqs_fifo_valid_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `good_sqs_fifo_valid_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.Content` L7 in `good_ssm_document_valid_yaml` + > Property 'Content' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Doc` (AWS::SSM::Document) → `Properties.DocumentType` L6 in `good_ssm_document_valid_yaml` + > Property 'DocumentType' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L11 in `good_ssm_parameter_name_type_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.PermissionModel` L9 in `good_stackset_conditional_template_source_yaml` + > Property 'PermissionModel' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalTemplateSource` (AWS::CloudFormation::StackSet) → `Properties.StackSetName` L8 in `good_stackset_conditional_template_source_yaml` + > Property 'StackSetName' is create-only; updating it will cause resource replacement +- **I9001** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L25 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.BucketName` L17 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.BucketName` L44 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.BucketName` L38 in `good_string_length_unknowable_values_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L9 in `good_sub_not_needed_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L99 in `good_transform_language_extension_yaml` + > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L98 in `good_transform_language_extension_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MySubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L97 in `good_transform_language_extension_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Engine` L58 in `good_transform_language_extension_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L91 in `good_transform_language_extension_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L92 in `good_transform_language_extension_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `MyVPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L6 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L25 in `good_vpc_subnets_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L26 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L15 in `good_vpc_subnets_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L14 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L13 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L21 in `good_vpc_subnets_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L20 in `good_vpc_subnets_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `SubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L19 in `good_vpc_subnets_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L7 in `integration_availability-zones_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZoneId` L5 in `integration_availability-zones_yaml` + > Property 'AvailabilityZoneId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L10 in `integration_availability-zones_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L11 in `integration_availability-zones_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.KeySchema` L16 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table1` (AWS::DynamoDB::Table) → `Properties.TableName` L12 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.KeySchema` L35 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table2` (AWS::DynamoDB::Table) → `Properties.TableName` L31 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.KeySchema` L59 in `integration_aws-dynamodb-table_yaml` + > Property 'KeySchema' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Table3` (AWS::DynamoDB::Table) → `Properties.TableName` L50 in `integration_aws-dynamodb-table_yaml` + > Property 'TableName' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.ImageId` L11 in `integration_aws-ec2-instance_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.InstanceType` L12 in `integration_aws-ec2-instance_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L13 in `integration_aws-ec2-instance_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L7 in `integration_aws-ec2-instance_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L14 in `integration_aws-ec2-launchtemplate_yaml` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L14 in `integration_aws-ec2-networkinterface_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L9 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L10 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L8 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L14 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L19 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L18 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L24 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.Ipv6CidrBlock` L25 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv6CidrBlock' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L23 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.CidrBlock` L30 in `integration_aws-ec2-subnet_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4IpamPoolId` L31 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4IpamPoolId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.Ipv4NetmaskLength` L32 in `integration_aws-ec2-subnet_yaml` + > Property 'Ipv4NetmaskLength' is create-only; updating it will cause resource replacement +- **I9001** `Subnet5` (AWS::EC2::Subnet) → `Properties.VpcId` L29 in `integration_aws-ec2-subnet_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L112 in `integration_cfn-gather_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L113 in `integration_cfn-gather_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L28 in `integration_cfn-gather_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L27 in `integration_cfn-gather_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.DBClusterIdentifier` L118 in `integration_cfn-gather_yaml` + > Property 'DBClusterIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L120 in `integration_cfn-gather_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `CognitoAuthorizer` (AWS::ApiGateway::Authorizer) → `Properties.RestApiId` L57 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `Deployment` (AWS::ApiGateway::Deployment) → `Properties.RestApiId` L78 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `FargateService` (AWS::ECS::Service) → `Properties.LaunchType` L17 in `integration_cfn-gather_yaml` + > Property 'LaunchType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L105 in `integration_cfn-gather_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `FifoProcessor` (AWS::Lambda::Function) → `Properties.FunctionName` L94 in `integration_cfn-gather_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L40 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L41 in `integration_cfn-gather_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.HttpMethod` L67 in `integration_cfn-gather_yaml` + > Property 'HttpMethod' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.ResourceId` L66 in `integration_cfn-gather_yaml` + > Property 'ResourceId' is create-only; updating it will cause resource replacement +- **I9001** `MethodBadAuth` (AWS::ApiGateway::Method) → `Properties.RestApiId` L65 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L89 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L90 in `integration_cfn-gather_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.RestApiId` L82 in `integration_cfn-gather_yaml` + > Property 'RestApiId' is create-only; updating it will cause resource replacement +- **I9001** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.StageName` L84 in `integration_cfn-gather_yaml` + > Property 'StageName' is create-only; updating it will cause resource replacement +- **I9001** `StandardDLQ` (AWS::SQS::Queue) → `Properties.FifoQueue` L48 in `integration_cfn-gather_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L10 in `integration_cfn-gather_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L7 in `integration_cfn-gather_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L8 in `integration_cfn-gather_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `CustomResource` (AWS::CloudFormation::CustomResource) → `Properties.ServiceToken` L11 in `integration_custom-resources_yaml` + > Property 'ServiceToken' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Affinity` L34 in `integration_deployment-file-template_yaml` + > Property 'Affinity' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L35 in `integration_deployment-file-template_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L36 in `integration_deployment-file-template_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L37 in `integration_deployment-file-template_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.Tenancy` L38 in `integration_deployment-file-template_yaml` + > Property 'Tenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L28 in `integration_deployment-file-template_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L29 in `integration_deployment-file-template_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L30 in `integration_deployment-file-template_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L24 in `integration_deployment-file-template_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.BrokerName` L30 in `integration_dynamic-references_yaml` + > Property 'BrokerName' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.DeploymentMode` L24 in `integration_dynamic-references_yaml` + > Property 'DeploymentMode' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.EngineType` L25 in `integration_dynamic-references_yaml` + > Property 'EngineType' is create-only; updating it will cause resource replacement +- **I9001** `Broker` (AWS::AmazonMQ::Broker) → `Properties.PubliclyAccessible` L31 in `integration_dynamic-references_yaml` + > Property 'PubliclyAccessible' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L9 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L16 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.EventSourceArn` L37 in `integration_dynamic-references_yaml` + > Property 'EventSourceArn' is create-only; updating it will cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.ImageId` L28 in `integration_formats_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.InstanceType` L29 in `integration_formats_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Instance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L30 in `integration_formats_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L23 in `integration_formats_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L22 in `integration_formats_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L17 in `integration_formats_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet` (AWS::EC2::Subnet) → `Properties.VpcId` L16 in `integration_formats_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L11 in `integration_formats_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.AvailabilityZone` L10 in `integration_getatt-types_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstancePlatform` L13 in `integration_getatt-types_yaml` + > Property 'InstancePlatform' is create-only; updating it will cause resource replacement +- **I9001** `CapacityReservation` (AWS::EC2::CapacityReservation) → `Properties.InstanceType` L12 in `integration_getatt-types_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L57 in `integration_getatt-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L68 in `integration_getatt-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L69 in `integration_getatt-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Memory` L70 in `integration_getatt-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L71 in `integration_getatt-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L72 in `integration_getatt-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L74 in `integration_getatt-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L116 in `integration_ref-types_yaml` + > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L114 in `integration_ref-types_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L115 in `integration_ref-types_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `LaunchConfiguration` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L117 in `integration_ref-types_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Scheme` L59 in `integration_ref-types_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Type` L58 in `integration_ref-types_yaml` + > Property 'Type' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L49 in `integration_ref-types_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L50 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L54 in `integration_ref-types_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L39 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L40 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L44 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `Subnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L45 in `integration_ref-types_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L93 in `integration_ref-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L104 in `integration_ref-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L105 in `integration_ref-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Memory` L106 in `integration_ref-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L107 in `integration_ref-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L108 in `integration_ref-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L110 in `integration_ref-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ContainerDefinitions` L72 in `integration_ref-types_yaml` + > Property 'ContainerDefinitions' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Cpu` L83 in `integration_ref-types_yaml` + > Property 'Cpu' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.ExecutionRoleArn` L84 in `integration_ref-types_yaml` + > Property 'ExecutionRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Memory` L85 in `integration_ref-types_yaml` + > Property 'Memory' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.NetworkMode` L86 in `integration_ref-types_yaml` + > Property 'NetworkMode' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.RequiresCompatibilities` L87 in `integration_ref-types_yaml` + > Property 'RequiresCompatibilities' is create-only; updating it will cause resource replacement +- **I9001** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.TaskRoleArn` L89 in `integration_ref-types_yaml` + > Property 'TaskRoleArn' is create-only; updating it will cause resource replacement +- **I9001** `Vpc` (AWS::EC2::VPC) → `Properties.CidrBlock` L35 in `integration_ref-types_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `MyInstance` (AWS::EC2::Instance) → `Properties.ImageId` L94 in `integration_resources-cloudformation-init_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Description` L119 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L118 in `issues_sam_w_conditions_yaml` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `DeniedPolicies` (AWS::IAM::ManagedPolicy) → `Properties.Path` L120 in `issues_sam_w_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L345 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L343 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L334 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L332 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L391 in `issues_sam_w_conditions_yaml` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L390 in `issues_sam_w_conditions_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L392 in `issues_sam_w_conditions_yaml` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L393 in `issues_sam_w_conditions_yaml` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L139 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.ManagedPolicyName` L138 in `issues_sam_w_conditions_yaml` + > Property 'ManagedPolicyName' is create-only; updating it will cause resource replacement +- **I9001** `LogMonitoringPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Path` L140 in `issues_sam_w_conditions_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `TenantInfoReadPolicy` (AWS::IAM::ManagedPolicy) → `Properties.Description` L154 in `issues_sam_w_conditions_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L220 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsDeadLetterQueue` (AWS::SQS::Queue) → `Properties.QueueName` L218 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.FifoQueue` L209 in `issues_sam_w_conditions_yaml` + > Property 'FifoQueue' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.QueueName` L207 in `issues_sam_w_conditions_yaml` + > Property 'QueueName' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Endpoint` L266 in `issues_sam_w_conditions_yaml` + > Property 'Endpoint' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Protocol` L265 in `issues_sam_w_conditions_yaml` + > Property 'Protocol' is create-only; updating it will cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.Region` L267 in `issues_sam_w_conditions_yaml` + > Property 'Region' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VmdEventsSubscription` (AWS::SNS::Subscription) → `Properties.TopicArn` L268 in `issues_sam_w_conditions_yaml` + > Property 'TopicArn' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L567 in `lsp_comprehensive_json` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L569 in `lsp_comprehensive_json` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L583 in `lsp_comprehensive_json` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L492 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L494 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L674 in `lsp_comprehensive_json` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L636 in `lsp_comprehensive_json` + > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L647 in `lsp_comprehensive_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L664 in `lsp_comprehensive_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L681 in `lsp_comprehensive_json` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L658 in `lsp_comprehensive_json` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L848 in `lsp_comprehensive_json` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L719 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L737 in `lsp_comprehensive_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L804 in `lsp_comprehensive_json` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L510 in `lsp_comprehensive_json` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L403 in `lsp_comprehensive_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L395 in `lsp_comprehensive_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L392 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L879 in `lsp_comprehensive_json` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L364 in `lsp_comprehensive_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L444 in `lsp_comprehensive_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L446 in `lsp_comprehensive_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.AutoScalingGroupName` L238 in `lsp_comprehensive_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchTemplate` L239 in `lsp_comprehensive_yaml` + > Property 'LaunchTemplate' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AutoScalingGroup` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L243 in `lsp_comprehensive_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L205 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L206 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L280 in `lsp_comprehensive_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.DBInstanceIdentifier` L269 in `lsp_comprehensive_yaml` + > Property 'DBInstanceIdentifier' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L271 in `lsp_comprehensive_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L276 in `lsp_comprehensive_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L281 in `lsp_comprehensive_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L370 in `lsp_comprehensive_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L294 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L295 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `LambdaFunction` (AWS::Lambda::Function) → `Properties.FunctionName` L306 in `lsp_comprehensive_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaRole` (AWS::IAM::Role) → `Properties.RoleName` L344 in `lsp_comprehensive_yaml` + > Property 'RoleName' is create-only; updating it will cause resource replacement +- **I9001** `LaunchTemplate` (AWS::EC2::LaunchTemplate) → `Properties.LaunchTemplateName` L217 in `lsp_comprehensive_yaml` + > Property 'LaunchTemplateName' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L161 in `lsp_comprehensive_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.CidrBlock` L160 in `lsp_comprehensive_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet` (AWS::EC2::Subnet) → `Properties.VpcId` L159 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SNSTopic` (AWS::SNS::Topic) → `Properties.TopicName` L391 in `lsp_comprehensive_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L143 in `lsp_comprehensive_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L177 in `lsp_comprehensive_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `WebSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L178 in `lsp_comprehensive_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L106 in `lsp_condition-usage_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L95 in `lsp_condition-usage_json` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L96 in `lsp_condition-usage_json` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L87 in `lsp_condition-usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L59 in `lsp_condition-usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.InstanceType` L107 in `lsp_condition-usage_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ConditionalResource` (AWS::EC2::Instance) → `Properties.SecurityGroups` L109 in `lsp_condition-usage_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.Engine` L96 in `lsp_condition-usage_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `Database` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L97 in `lsp_condition-usage_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L143 in `lsp_condition-usage_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.BucketName` L89 in `lsp_condition-usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L171 in `lsp_condition-usage_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `NestedConditionResource` (AWS::S3::BucketPolicy) → `Properties.Bucket` L150 in `lsp_condition-usage_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `ProductionBucket` (AWS::S3::Bucket) → `Properties.BucketName` L57 in `lsp_condition-usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L137 in `lsp_condition-usage_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L28 in `lsp_constants_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L43 in `lsp_constants_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L18 in `lsp_constants_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PersonalS3` (AWS::S3::Bucket) → `Properties.BucketName` L26 in `lsp_constants_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L34 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L50 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L58 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L66 in `lsp_parameter_usage_json` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket1` (AWS::S3::Bucket) → `Properties.BucketName` L29 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket2` (AWS::S3::Bucket) → `Properties.BucketName` L36 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket3` (AWS::S3::Bucket) → `Properties.BucketName` L42 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket4` (AWS::S3::Bucket) → `Properties.BucketName` L48 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket5` (AWS::S3::Bucket) → `Properties.BucketName` L53 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket6` (AWS::S3::Bucket) → `Properties.BucketName` L59 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `Bucket7` (AWS::S3::Bucket) → `Properties.BucketName` L64 in `lsp_parameter_usage_yaml` + > Property 'BucketName' is create-only; updating it will cause resource replacement +- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L133 in `public_lambda-poller_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L192 in `public_lambda-poller_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L194 in `public_lambda-poller_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L196 in `public_lambda-poller_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L198 in `public_lambda-poller_json` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L37 in `public_lambda-poller_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Path` L172 in `public_lambda-poller_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Action` L197 in `public_lambda-poller_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L198 in `public_lambda-poller_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.Principal` L199 in `public_lambda-poller_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionEventInvokePermission` (AWS::Lambda::Permission) → `Properties.SourceArn` L200 in `public_lambda-poller_yaml` + > Property 'SourceArn' is create-only; updating it will cause resource replacement +- **I9001** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Path` L27 in `public_lambda-poller_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.DatabaseName` L23 in `public_rds-cluster_yaml` + > Property 'DatabaseName' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.Engine` L24 in `public_rds-cluster_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.EngineMode` L25 in `public_rds-cluster_yaml` + > Property 'EngineMode' is create-only; updating it will cause resource replacement +- **I9001** `DBCluster` (AWS::RDS::DBCluster) → `Properties.MasterUsername` L21 in `public_rds-cluster_yaml` + > Property 'MasterUsername' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.BlockDeviceMappings` L1342 in `public_watchmaker_json` + > Property 'BlockDeviceMappings' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.ImageId` L1399 in `public_watchmaker_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L1402 in `public_watchmaker_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.KeyName` L1405 in `public_watchmaker_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1407 in `public_watchmaker_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `WatchmakerInstance` (AWS::EC2::Instance) → `Properties.UserData` L1452 in `public_watchmaker_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.LogGroupName` L1691 in `public_watchmaker_json` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2046 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L2202 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `BillingChangesCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L2187 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1985 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Action` L1090 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1089 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailBucketLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1091 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Action` L974 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L973 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLambda` (AWS::Lambda::Permission) → `Properties.Principal` L975 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Action` L1187 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1186 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateCloudTrailLogIntegrityLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1188 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Action` L1366 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1365 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateKeyRotationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1367 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Action` L768 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L767 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluatePolicyPermissionsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L769 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Action` L858 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L857 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallEvaluateUserPolicyAssociationLambda` (AWS::Lambda::Permission) → `Properties.Principal` L859 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Action` L1269 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1268 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallInstanceRoleUseLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1270 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Action` L674 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L673 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallMfaForUsersLambda` (AWS::Lambda::Permission) → `Properties.Principal` L675 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Action` L559 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L558 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcDefaultSecurityGroupsLambda` (AWS::Lambda::Permission) → `Properties.Principal` L560 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Action` L489 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L488 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcFlowLogLambda` (AWS::Lambda::Permission) → `Properties.Principal` L490 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Action` L1558 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.FunctionName` L1557 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigPermissionToCallVpcPeeringRouteTablesLambda` (AWS::Lambda::Permission) → `Properties.Principal` L1559 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEncryptedVolumes` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L373 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L983 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrailBucket` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1099 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateCloudTrailLogIntegrity` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1197 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateConfigInAllRegions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1481 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateKeyRotations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1376 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluatePolicyPermissions` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L777 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateRootAccount` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L328 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForEvaluateUserPolicyAssociations` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L867 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForIamPasswordPolicy` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L202 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForInstanceRoleUses` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1279 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForMfaForUsers` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L681 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L342 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForRestrictedSsh` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L389 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L405 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcDefaultSecurityGroupss` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L569 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcFlowLogs` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L588 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConfigRuleForVpcPeeringRouteTabless` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L1568 in `quickstart_cis_benchmark_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1775 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleLoginFailureCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1761 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1738 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `ConsoleSigninWithoutMfaCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1722 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Name` L1938 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Name` L1907 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2070 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L1473 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L1472 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateConfigInAllRegionsFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L1474 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Action` L318 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.FunctionName` L317 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `EvaluateRootAccountFunctionPermission` (AWS::Lambda::Permission) → `Properties.Principal` L319 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1003 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1120 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.FunctionName` L890 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1398 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1302 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L703 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.FunctionName` L231 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.FunctionName` L799 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1217 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.FunctionName` L610 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.FunctionName` L501 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.FunctionName` L425 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.FunctionName` L1503 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.FunctionName` L2255 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.FunctionName` L1860 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.FunctionName` L124 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.FunctionName` L1603 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1700 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `IAMRootActivityCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1685 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2008 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1812 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `KMSCustomerKeyDeletionCloudWatchMetric` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1798 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L1963 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Action` L1898 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.FunctionName` L1897 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForCloudTrailCloudWatchEventRules` (AWS::Lambda::Permission) → `Properties.Principal` L1899 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Action` L2343 in `quickstart_cis_benchmark_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.FunctionName` L2342 in `quickstart_cis_benchmark_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `LambdaPermissionForDisableUnusedCredentials` (AWS::Lambda::Permission) → `Properties.Principal` L2344 in `quickstart_cis_benchmark_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2121 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2151 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Name` L2349 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Name` L2093 in `quickstart_cis_benchmark_yaml` + > Property 'Name' is create-only; updating it will cause resource replacement +- **I9001** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.TopicName` L1589 in `quickstart_cis_benchmark_yaml` + > Property 'TopicName' is create-only; updating it will cause resource replacement +- **I9001** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L1662 in `quickstart_cis_benchmark_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `UnauthorizedAttemptsCloudWatchFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L1651 in `quickstart_cis_benchmark_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L233 in `quickstart_config-rules_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L231 in `quickstart_config-rules_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L234 in `quickstart_config-rules_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L325 in `quickstart_config-rules_json` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L323 in `quickstart_config-rules_json` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L326 in `quickstart_config-rules_json` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L301 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L63 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L48 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L83 in `quickstart_config-rules_json` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L133 in `quickstart_config-rules_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L110 in `quickstart_config-rules_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L141 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L213 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L326 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L47 in `quickstart_iam_json` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L144 in `quickstart_nat-instance_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociateEipNat` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L150 in `quickstart_nat-instance_json` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.ImageId` L130 in `quickstart_nat-instance_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L97 in `quickstart_nat-instance_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.KeyName` L101 in `quickstart_nat-instance_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L132 in `quickstart_nat-instance_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rNatInstance` (AWS::EC2::Instance) → `Properties.UserData` L112 in `quickstart_nat-instance_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNatInstanceEni` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L79 in `quickstart_nat-instance_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L157 in `quickstart_nat-instance_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatInstance` (AWS::EC2::Route) → `Properties.RouteTableId` L159 in `quickstart_nat-instance_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L379 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L381 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L383 in `quickstart_nist_application_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L384 in `quickstart_nist_application_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigApp` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L387 in `quickstart_nist_application_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.AssociatePublicIpAddress` L509 in `quickstart_nist_application_yaml` + > Property 'AssociatePublicIpAddress' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L511 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L513 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L515 in `quickstart_nist_application_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L516 in `quickstart_nist_application_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingConfigWeb` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L519 in `quickstart_nist_application_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingDownApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L564 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingDownWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L572 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L585 in `quickstart_nist_application_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupApp` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L598 in `quickstart_nist_application_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L611 in `quickstart_nist_application_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingGroupWeb` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L624 in `quickstart_nist_application_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rAutoScalingUpApp` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L632 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rAutoScalingUpWeb` (AWS::AutoScaling::ScalingPolicy) → `Properties.AutoScalingGroupName` L640 in `quickstart_nist_application_yaml` + > Property 'AutoScalingGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L734 in `quickstart_nist_application_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L745 in `quickstart_nist_application_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `rELBApp` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L748 in `quickstart_nist_application_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L770 in `quickstart_nist_application_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rELBWeb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L783 in `quickstart_nist_application_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.ImageId` L801 in `quickstart_nist_application_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L803 in `quickstart_nist_application_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SecurityGroupIds` L804 in `quickstart_nist_application_yaml` + > Property 'SecurityGroupIds' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.SubnetId` L807 in `quickstart_nist_application_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstance` (AWS::EC2::Instance) → `Properties.UserData` L812 in `quickstart_nist_application_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rPostProcInstanceProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L955 in `quickstart_nist_application_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Path` L970 in `quickstart_nist_application_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L1022 in `quickstart_nist_application_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBName` L1012 in `quickstart_nist_application_yaml` + > Property 'DBName' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L1014 in `quickstart_nist_application_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Engine` L1015 in `quickstart_nist_application_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L1019 in `quickstart_nist_application_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L1020 in `quickstart_nist_application_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L1021 in `quickstart_nist_application_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rS3AccessLogsPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1030 in `quickstart_nist_application_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1067 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupApp` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1090 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1094 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupAppInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1118 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1122 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupRDS` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1136 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1140 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1147 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1151 in `quickstart_nist_application_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupWebInstance` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1175 in `quickstart_nist_application_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rWebContentS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L1201 in `quickstart_nist_application_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Action` L165 in `quickstart_nist_config_rules_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.FunctionName` L167 in `quickstart_nist_config_rules_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaAMICompliance` (AWS::Lambda::Permission) → `Properties.Principal` L170 in `quickstart_nist_config_rules_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Action` L174 in `quickstart_nist_config_rules_yaml` + > Property 'Action' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.FunctionName` L176 in `quickstart_nist_config_rules_yaml` + > Property 'FunctionName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigPermissionToCallLambdaCloudTrail` (AWS::Lambda::Permission) → `Properties.Principal` L179 in `quickstart_nist_config_rules_yaml` + > Property 'Principal' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForAMICompliance` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L185 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForCloudTrail` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L205 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForRequiredTags` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L223 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForSSH` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L238 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRuleForUnrestrictedPorts` (AWS::Config::ConfigRule) → `Properties.ConfigRuleName` L251 in `quickstart_nist_config_rules_yaml` + > Property 'ConfigRuleName' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L277 in `quickstart_nist_config_rules_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Path` L292 in `quickstart_nist_config_rules_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L59 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rInstanceOpsProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L139 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rReadOnlyAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L238 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rSysAdminProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L314 in `quickstart_nist_iam_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rArchiveLogsBucketPolicy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L64 in `quickstart_nist_logging_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailChange` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L136 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L149 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L182 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Path` L196 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rCloudTrailS3Policy` (AWS::S3::BucketPolicy) → `Properties.Bucket` L235 in `quickstart_nist_logging_yaml` + > Property 'Bucket' is create-only; updating it will cause resource replacement +- **I9001** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Path` L334 in `quickstart_nist_logging_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rIAMCreateAccessKey` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L384 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L397 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L412 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMPolicyChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L425 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rIAMRootActivity` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L436 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L448 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rNetworkAclChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L464 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L476 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L499 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupChangesMetricFilter` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L515 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.AlarmName` L527 in `quickstart_nist_logging_yaml` + > Property 'AlarmName' is create-only; updating it will cause resource replacement +- **I9001** `rUnauthorizedAttempts` (AWS::Logs::MetricFilter) → `Properties.LogGroupName` L540 in `quickstart_nist_logging_yaml` + > Property 'LogGroupName' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L306 in `quickstart_nist_vpc_management_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L310 in `quickstart_nist_vpc_management_yaml` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L315 in `quickstart_nist_vpc_management_yaml` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L317 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L322 in `quickstart_nist_vpc_management_yaml` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L326 in `quickstart_nist_vpc_management_yaml` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L411 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L422 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L433 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L435 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L440 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L445 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L447 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L452 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L457 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L459 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L464 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L469 in `quickstart_nist_vpc_management_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L471 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L476 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L513 in `quickstart_nist_vpc_management_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L515 in `quickstart_nist_vpc_management_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L517 in `quickstart_nist_vpc_management_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L518 in `quickstart_nist_vpc_management_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L526 in `quickstart_nist_vpc_management_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L550 in `quickstart_nist_vpc_management_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L554 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L589 in `quickstart_nist_vpc_management_yaml` + > Property 'PeerVpcId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L594 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L599 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L601 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L606 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L608 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L613 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L615 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L619 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L623 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L629 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L631 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L639 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L641 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L649 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L651 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L659 in `quickstart_nist_vpc_management_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L661 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L671 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L679 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L683 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L699 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L703 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L713 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L717 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L728 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L732 in `quickstart_nist_vpc_management_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L748 in `quickstart_nist_vpc_management_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L753 in `quickstart_nist_vpc_management_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L756 in `quickstart_nist_vpc_management_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L765 in `quickstart_nist_vpc_management_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L767 in `quickstart_nist_vpc_management_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L181 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L183 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L191 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L196 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L198 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L203 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetAssociationB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L205 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L210 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L212 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rAppPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L220 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L225 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L227 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L235 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L240 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L242 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDBPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L250 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L255 in `quickstart_nist_vpc_production_yaml` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocProd` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L257 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L262 in `quickstart_nist_vpc_production_yaml` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L263 in `quickstart_nist_vpc_production_yaml` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L275 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L277 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L285 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L290 in `quickstart_nist_vpc_production_yaml` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L292 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L300 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentProdIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L313 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L327 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L329 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L334 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocAppPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L336 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L341 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L343 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L348 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDBPrivSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L350 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L355 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetA` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L357 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L362 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLAssocDMZPubSubnetB` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L364 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L369 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L374 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L379 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L381 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLEgressPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L387 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L392 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L394 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowALLfromPrivEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L400 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L406 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L412 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L419 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternal` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L425 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L430 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L432 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowAllTCPInternalEgress` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L438 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L444 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowBastionSSHAccess` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L450 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L455 in `quickstart_nist_vpc_production_yaml` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L457 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowEgressReturnTCP` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L463 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L469 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPSPublic` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L475 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L482 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowHTTPfromProd` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L488 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L495 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowMgmtAccessSSHtoPrivate` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L501 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L507 in `quickstart_nist_vpc_production_yaml` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `rNACLRuleAllowReturnTCPPriv` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L513 in `quickstart_nist_vpc_production_yaml` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L520 in `quickstart_nist_vpc_production_yaml` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L524 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L558 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L560 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L565 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocDBPrivateB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L567 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L572 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L574 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L579 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocProdDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L581 in `quickstart_nist_vpc_production_yaml` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L586 in `quickstart_nist_vpc_production_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L590 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L595 in `quickstart_nist_vpc_production_yaml` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdPrivateNatGateway` (AWS::EC2::Route) → `Properties.RouteTableId` L599 in `quickstart_nist_vpc_production_yaml` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMain` (AWS::EC2::RouteTable) → `Properties.VpcId` L607 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableProdPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L615 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L619 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupMgmtBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L633 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L637 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromProd` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L651 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L655 in `quickstart_nist_vpc_production_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L674 in `quickstart_nist_vpc_production_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.CidrBlock` L679 in `quickstart_nist_vpc_production_yaml` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCProduction` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L682 in `quickstart_nist_vpc_production_yaml` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L356 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.InstanceType` L361 in `quickstart_openshift_yaml` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.KeyName` L363 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L364 in `quickstart_openshift_yaml` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.UserData` L376 in `quickstart_openshift_yaml` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L751 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L768 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Path` L824 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L847 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftEtcdASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L855 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L902 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L907 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L909 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L913 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L915 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L917 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L918 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftEtcdLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L921 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1056 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1061 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1069 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1079 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1127 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1132 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1134 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1138 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1140 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1142 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1143 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterASLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1146 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1286 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1311 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1321 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1340 in `quickstart_openshift_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1343 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.LaunchConfigurationName` L1354 in `quickstart_openshift_yaml` + > Property 'LaunchConfigurationName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.VPCZoneIdentifier` L1364 in `quickstart_openshift_yaml` + > Property 'VPCZoneIdentifier' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.HealthCheck` L1371 in `quickstart_openshift_yaml` + > Property 'HealthCheck' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Scheme` L1386 in `quickstart_openshift_yaml` + > Property 'Scheme' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Subnets` L1389 in `quickstart_openshift_yaml` + > Property 'Subnets' is conditionally create-only; updating it may cause resource replacement +- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1396 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1412 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.BlockDeviceMappings` L1456 in `quickstart_openshift_yaml` + > Property 'BlockDeviceMappings' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.IamInstanceProfile` L1466 in `quickstart_openshift_yaml` + > Property 'IamInstanceProfile' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.ImageId` L1468 in `quickstart_openshift_yaml` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceMonitoring` L1472 in `quickstart_openshift_yaml` + > Property 'InstanceMonitoring' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.InstanceType` L1474 in `quickstart_openshift_yaml` + > Property 'InstanceType' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.KeyName` L1476 in `quickstart_openshift_yaml` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.SecurityGroups` L1477 in `quickstart_openshift_yaml` + > Property 'SecurityGroups' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftNodesLaunchConfig` (AWS::AutoScaling::LaunchConfiguration) → `Properties.UserData` L1480 in `quickstart_openshift_yaml` + > Property 'UserData' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L1638 in `quickstart_openshift_yaml` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L1654 in `quickstart_openshift_yaml` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `SetupRole` (AWS::IAM::Role) → `Properties.Path` L1666 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `SetupRoleProfile` (AWS::IAM::InstanceProfile) → `Properties.Path` L1689 in `quickstart_openshift_yaml` + > Property 'Path' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.AutoMinorVersionUpgrade` L128 in `quickstart_test_yaml` + > Property 'AutoMinorVersionUpgrade' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.BackupRetentionPeriod` L129 in `quickstart_test_yaml` + > Property 'BackupRetentionPeriod' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBParameterGroupName` L132 in `quickstart_test_yaml` + > Property 'DBParameterGroupName' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.DBSubnetGroupName` L133 in `quickstart_test_yaml` + > Property 'DBSubnetGroupName' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.Engine` L134 in `quickstart_test_yaml` + > Property 'Engine' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MasterUsername` L138 in `quickstart_test_yaml` + > Property 'MasterUsername' is create-only; updating it will cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.MultiAZ` L141 in `quickstart_test_yaml` + > Property 'MultiAZ' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rDBServerInstance` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L144 in `quickstart_test_yaml` + > Property 'StorageEncrypted' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Description` L59 in `quickstart_test_yaml` + > Property 'Description' is create-only; updating it will cause resource replacement +- **I9001** `rParameterGroup` (AWS::RDS::DBParameterGroup) → `Properties.Family` L60 in `quickstart_test_yaml` + > Property 'Family' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.AllocationId` L732 in `quickstart_vpc-management_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `AssociaterEIPProdBastion` (AWS::EC2::EIPAssociation) → `Properties.NetworkInterfaceId` L738 in `quickstart_vpc-management_json` + > Property 'NetworkInterfaceId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L835 in `quickstart_vpc-management_json` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPOptionsAssocMgmt` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L832 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L542 in `quickstart_vpc-management_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `rDHCPoptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L546 in `quickstart_vpc-management_json` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `rENIProductionBastion` (AWS::EC2::NetworkInterface) → `Properties.SubnetId` L789 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rGWAttachmentMgmtIGW` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L370 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L472 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L469 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L475 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L490 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L487 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementDMZSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L493 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L508 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.CidrBlock` L505 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetA` (AWS::EC2::Subnet) → `Properties.VpcId` L511 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L526 in `quickstart_vpc-management_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.CidrBlock` L523 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rManagementPrivateSubnetB` (AWS::EC2::Subnet) → `Properties.VpcId` L529 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.ImageId` L650 in `quickstart_vpc-management_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.InstanceType` L640 in `quickstart_vpc-management_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.KeyName` L643 in `quickstart_vpc-management_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L652 in `quickstart_vpc-management_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `rMgmtBastionInstance` (AWS::EC2::Instance) → `Properties.UserData` L659 in `quickstart_vpc-management_json` + > Property 'UserData' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.AllocationId` L777 in `quickstart_vpc-management_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.SubnetId` L780 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.PeerVpcId` L844 in `quickstart_vpc-management_json` + > Property 'PeerVpcId' is create-only; updating it will cause resource replacement +- **I9001** `rPeeringConnectionProduction` (AWS::EC2::VPCPeeringConnection) → `Properties.VpcId` L847 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L595 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtDMZA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L598 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L617 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivA` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L620 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L628 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteAssocMgmtPrivB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L631 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L588 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtIGW` (AWS::EC2::Route) → `Properties.RouteTableId` L583 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L911 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdDMZ` (AWS::EC2::Route) → `Properties.RouteTableId` L905 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L866 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteMgmtProdPrivate` (AWS::EC2::Route) → `Properties.RouteTableId` L860 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L881 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmt` (AWS::EC2::Route) → `Properties.RouteTableId` L875 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L896 in `quickstart_vpc-management_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rRouteProdMgmtPublic` (AWS::EC2::Route) → `Properties.RouteTableId` L890 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtDMZ` (AWS::EC2::RouteTable) → `Properties.VpcId` L571 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rRouteTableMgmtPrivate` (AWS::EC2::RouteTable) → `Properties.VpcId` L559 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L804 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupBastion` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L806 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L421 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L423 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L745 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupSSHFromMgmt` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L747 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L440 in `quickstart_vpc-management_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `rSecurityGroupVpcNat` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L442 in `quickstart_vpc-management_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.CidrBlock` L343 in `quickstart_vpc-management_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `rVPCManagement` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L345 in `quickstart_vpc-management_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L606 in `quickstart_vpc-management_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `rrRouteAssocMgmtDMZB` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L609 in `quickstart_vpc-management_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainName` L485 in `quickstart_vpc_json` + > Property 'DomainName' is create-only; updating it will cause resource replacement +- **I9001** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.DomainNameServers` L501 in `quickstart_vpc_json` + > Property 'DomainNameServers' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1827 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1833 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1843 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1849 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1859 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1865 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.AllocationId` L1875 in `quickstart_vpc_json` + > Property 'AllocationId' is create-only; updating it will cause resource replacement +- **I9001** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.SubnetId` L1881 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.ImageId` L1891 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.InstanceType` L1900 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.KeyName` L1924 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance1` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1908 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.ImageId` L1943 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.InstanceType` L1952 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.KeyName` L1976 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance2` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L1960 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.ImageId` L1995 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.InstanceType` L2004 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.KeyName` L2028 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance3` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2012 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.ImageId` L2047 in `quickstart_vpc_json` + > Property 'ImageId' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.InstanceType` L2056 in `quickstart_vpc_json` + > Property 'InstanceType' is conditionally create-only; updating it may cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.KeyName` L2080 in `quickstart_vpc_json` + > Property 'KeyName' is create-only; updating it will cause resource replacement +- **I9001** `NATInstance4` (AWS::EC2::Instance) → `Properties.NetworkInterfaces` L2064 in `quickstart_vpc_json` + > Property 'NetworkInterfaces' is create-only; updating it will cause resource replacement +- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.GroupDescription` L2097 in `quickstart_vpc_json` + > Property 'GroupDescription' is create-only; updating it will cause resource replacement +- **I9001** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.VpcId` L2099 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L577 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L574 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1A` (AWS::EC2::Subnet) → `Properties.VpcId` L571 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L954 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L952 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L933 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L987 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L984 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L607 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L604 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1B` (AWS::EC2::Subnet) → `Properties.VpcId` L601 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1248 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1298 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1295 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1267 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1269 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1273 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1281 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1283 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1287 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1206 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1204 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1185 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1239 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet1BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1236 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L637 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L634 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2A` (AWS::EC2::Subnet) → `Properties.VpcId` L631 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1017 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1015 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L996 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1050 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1047 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L667 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L664 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2B` (AWS::EC2::Subnet) → `Properties.VpcId` L661 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1370 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1420 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1417 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1389 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1391 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1395 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1403 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1405 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1409 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1328 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1326 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1307 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1361 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet2BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1358 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L697 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L694 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3A` (AWS::EC2::Subnet) → `Properties.VpcId` L691 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1080 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1078 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1059 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1113 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1110 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L727 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L724 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3B` (AWS::EC2::Subnet) → `Properties.VpcId` L721 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1492 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1542 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1539 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1511 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1513 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1517 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1525 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1527 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1531 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1450 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1448 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1429 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1483 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet3BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1480 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L757 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.CidrBlock` L754 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4A` (AWS::EC2::Subnet) → `Properties.VpcId` L751 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1143 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1141 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1122 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1176 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4ARouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1173 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L787 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.CidrBlock` L784 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4B` (AWS::EC2::Subnet) → `Properties.VpcId` L781 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAcl` (AWS::EC2::NetworkAcl) → `Properties.VpcId` L1614 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.NetworkAclId` L1664 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclAssociation` (AWS::EC2::SubnetNetworkAclAssociation) → `Properties.SubnetId` L1661 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1633 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1635 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryInbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1639 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.Egress` L1647 in `quickstart_vpc_json` + > Property 'Egress' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.NetworkAclId` L1649 in `quickstart_vpc_json` + > Property 'NetworkAclId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BNetworkAclEntryOutbound` (AWS::EC2::NetworkAclEntry) → `Properties.RuleNumber` L1653 in `quickstart_vpc_json` + > Property 'RuleNumber' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1572 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1570 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1551 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1605 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PrivateSubnet4BRouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1602 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L816 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.CidrBlock` L813 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1` (AWS::EC2::Subnet) → `Properties.VpcId` L810 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1706 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet1RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1703 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L846 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.CidrBlock` L843 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2` (AWS::EC2::Subnet) → `Properties.VpcId` L840 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1717 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet2RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1714 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L877 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.CidrBlock` L874 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3` (AWS::EC2::Subnet) → `Properties.VpcId` L871 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1729 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet3RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1726 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.AvailabilityZone` L908 in `quickstart_vpc_json` + > Property 'AvailabilityZone' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.CidrBlock` L905 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4` (AWS::EC2::Subnet) → `Properties.VpcId` L902 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.RouteTableId` L1741 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnet4RouteTableAssociation` (AWS::EC2::SubnetRouteTableAssociation) → `Properties.SubnetId` L1738 in `quickstart_vpc_json` + > Property 'SubnetId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.DestinationCidrBlock` L1693 in `quickstart_vpc_json` + > Property 'DestinationCidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRoute` (AWS::EC2::Route) → `Properties.RouteTableId` L1691 in `quickstart_vpc_json` + > Property 'RouteTableId' is create-only; updating it will cause resource replacement +- **I9001** `PublicSubnetRouteTable` (AWS::EC2::RouteTable) → `Properties.VpcId` L1672 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.ServiceName` L2203 in `quickstart_vpc_json` + > Property 'ServiceName' is create-only; updating it will cause resource replacement +- **I9001** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.VpcId` L2215 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.CidrBlock` L510 in `quickstart_vpc_json` + > Property 'CidrBlock' is create-only; updating it will cause resource replacement +- **I9001** `VPC` (AWS::EC2::VPC) → `Properties.InstanceTenancy` L513 in `quickstart_vpc_json` + > Property 'InstanceTenancy' is conditionally create-only; updating it may cause resource replacement +- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.DhcpOptionsId` L534 in `quickstart_vpc_json` + > Property 'DhcpOptionsId' is create-only; updating it will cause resource replacement +- **I9001** `VPCDHCPOptionsAssociation` (AWS::EC2::VPCDHCPOptionsAssociation) → `Properties.VpcId` L531 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement +- **I9001** `VPCGatewayAttachment` (AWS::EC2::VPCGatewayAttachment) → `Properties.VpcId` L559 in `quickstart_vpc_json` + > Property 'VpcId' is create-only; updating it will cause resource replacement + +### I9040 - 2297 findings + +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_E1150_network_interfaces_groupset_multi_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `A` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_E3019_four_way_group_yaml` + > Resource 'A' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `B` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_E3019_four_way_group_yaml` + > Resource 'B' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `C` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E3019_four_way_group_yaml` + > Resource 'C' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `D` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_E3019_four_way_group_yaml` + > Resource 'D' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ExplicitSubBucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'ExplicitSubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `JoinBucket` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'JoinBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LiteralA` (AWS::S3::Bucket) → `Properties.Tags` L25 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'LiteralA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LiteralB` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'LiteralB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RefBucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'RefBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubBucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_E3019_identity_reference_forms_yaml` + > Resource 'SubBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_authorizer_literal_and_param_rest_api_yaml` + > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApiA` (AWS::ApiGateway::RestApi) → `Properties.Tags` L10 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Resource 'RestApiA' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApiB` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `bad_E3699_method_authorizer_rest_api_mismatch_yaml` + > Resource 'RestApiB' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_E8007_condition_undefined_in_expr_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `bad_E9106_condition_cycle_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_F2002_ssm_parameter_type_invalid_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `GoodFunction` (AWS::Serverless::Function) → `Properties.Tags` L27 in `bad_F3006_invalid_aws_namespaces_yaml` + > Resource 'GoodFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MissingTemplateSourceInOneWorld` (AWS::CloudFormation::StackSet) → `Properties.Tags` L7 in `bad_F3018_conditional_required_novalue_yaml` + > Resource 'MissingTemplateSourceInOneWorld' of type 'AWS::CloudFormation::StackSet' supports Tags but none are configured +- **I9040** `InvalidLiteralName` (AWS::Logs::LogGroup) → `Properties.Tags` L7 in `bad_F3031_log_group_name_dollar_brace_yaml` + > Resource 'InvalidLiteralName' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1019_sub_unused_key_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_W1028_allowedvalues_excludes_literal_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyConnection` (AWS::DMS::Endpoint) → `Properties.Tags` L5 in `bad_W1051_secretsmanager_at_arn_yaml` + > Resource 'MyConnection' of type 'AWS::DMS::Endpoint' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_W1053_dynref_spaces_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_W1054_raw_pseudo_param_yaml` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Asg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_W3010_full_coverage_yaml` + > Resource 'Asg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L44 in `bad_W3010_full_coverage_yaml` + > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L16 in `bad_W3010_full_coverage_yaml` + > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L21 in `bad_W3010_full_coverage_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Rds` (AWS::RDS::DBInstance) → `Properties.Tags` L62 in `bad_W3010_full_coverage_yaml` + > Resource 'Rds' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L33 in `bad_W3010_full_coverage_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Tg` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L53 in `bad_W3010_full_coverage_yaml` + > Resource 'Tg' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `Volume` (AWS::EC2::Volume) → `Properties.Tags` L39 in `bad_W3010_full_coverage_yaml` + > Resource 'Volume' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_W9006_every_allowed_value_too_long_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_W9007_duplicate_objects_different_key_order_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_W9053_equivalent_conditions_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_aurora_with_allocated_storage_yaml` + > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Dist` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_alias_yaml` + > Resource 'Dist' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_cloudfront_bad_origin_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifact_counts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_codepipeline_bad_artifacts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `DummyBucket` (AWS::S3::Bucket) → `Properties.Tags` L35 in `bad_conditions_condition_functions_json` + > Resource 'DummyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `bad_conditions_properties_fn_if_json` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L85 in `bad_conditions_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `NewVolume` (AWS::EC2::Volume) → `Properties.Tags` L79 in `bad_conditions_yaml` + > Resource 'NewVolume' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `BadConditionType` (AWS::S3::Bucket) → `Properties.Tags` L21 in `bad_core_E3001_resource_shape_yaml` + > Resource 'BadConditionType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BadDependsOnType` (AWS::S3::Bucket) → `Properties.Tags` L26 in `bad_core_E3001_resource_shape_yaml` + > Resource 'BadDependsOnType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `UnknownAttribute` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_E3001_resource_shape_yaml` + > Resource 'UnknownAttribute' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ValidResource` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_core_E3001_resource_shape_yaml` + > Resource 'ValidResource' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L97 in `bad_core_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_core_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `bad_core_conditions_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `bad_core_conditions_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L51 in `bad_core_conditions_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L64 in `bad_core_conditions_yaml` + > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `bad_core_conditions_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `bad_core_config_configure_e3012_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_directives_yaml` + > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L34 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_core_directives_yaml` + > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_directives_yaml` + > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFail` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastFail` (AWS::S3::Bucket) → `Properties.Tags` L29 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFirstAndLastFail' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.Tags` L22 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketFirstAndLastPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myBucketPass` (AWS::S3::Bucket) → `Properties.Tags` L12 in `bad_core_mandatory_checks_yaml` + > Resource 'myBucketPass' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ScalarCreationPolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L6 in `bad_core_resource_attributes_yaml` + > Resource 'ScalarCreationPolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `ScalarUpdatePolicy` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L9 in `bad_core_resource_attributes_yaml` + > Resource 'ScalarUpdatePolicy' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `StandardVersion` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_core_resource_attributes_yaml` + > Resource 'StandardVersion' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `UnsupportedAttributes` (AWS::S3::Bucket) → `Properties.Tags` L18 in `bad_core_resource_attributes_yaml` + > Resource 'UnsupportedAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L28 in `bad_cross_resource_task10_yaml` + > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `BadASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L7 in `bad_cross_resource_task10_yaml` + > Resource 'BadASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `BadEnvLambda` (AWS::Lambda::Function) → `Properties.Tags` L41 in `bad_cross_resource_task10_yaml` + > Resource 'BadEnvLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BadFargateService` (AWS::ECS::Service) → `Properties.Tags` L75 in `bad_cross_resource_task10_yaml` + > Resource 'BadFargateService' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BadImageLambda` (AWS::Lambda::Function) → `Properties.Tags` L54 in `bad_cross_resource_task10_yaml` + > Resource 'BadImageLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BadListener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L19 in `bad_cross_resource_task10_yaml` + > Resource 'BadListener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `BadRestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L64 in `bad_cross_resource_task10_yaml` + > Resource 'BadRestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `bad_cross_resource_task10_yaml` + > Resource 'BadValkey' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `TG` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L34 in `bad_cross_resource_task10_yaml` + > Resource 'TG' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_cross_resource_task10_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyEipNat` (AWS::EC2::EIP) → `Properties.Tags` L13 in `bad_duplicate_json` + > Resource 'MyEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `MySNSTopic` (AWS::SNS::Topic) → `Properties.Tags` L25 in `bad_duplicate_json` + > Resource 'MySNSTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_duplicate_primary_id_multi_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_duplicate_primary_id_multi_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_duplicate_primary_id_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_duplicate_primary_id_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_duplicate_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_duplicate_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BadTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_attribute_mismatch_yaml` + > Resource 'BadTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` + > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Repo` (AWS::ECR::Repository) → `Properties.Tags` L5 in `bad_ecr_policy_no_statement_yaml` + > Resource 'Repo' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_awsvpc_port_mismatch_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L21 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L14 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_dynamic_port_no_traffic_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L16 in `bad_ecs_fargate_mismatch_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_ecs_fargate_mismatch_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ExecRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `bad_ecs_role_no_boundary_yaml` + > Resource 'ExecRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `bad_ecs_role_no_boundary_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_ecs_role_no_boundary_yaml` + > Resource 'TaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Listener` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L5 in `bad_elb_http_443_yaml` + > Resource 'Listener' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_equals_wrong_arity_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `bad_fargate_bad_cpu_memory_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L23 in `bad_fargate_daemon_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateDaemon` (AWS::ECS::Service) → `Properties.Tags` L5 in `bad_fargate_daemon_yaml` + > Resource 'FargateDaemon' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `bad_fargate_daemon_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `bad_formatters_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_base64_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_findinmap_default_value_no_transform_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L10 in `bad_functions_findinmap_enhanced_invalid_key_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_json` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_functions_get_stack_output_json` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_json` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_functions_get_stack_output_json` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L13 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L20 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L26 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic5` (AWS::SQS::Queue) → `Properties.Tags` L35 in `bad_functions_get_stack_output_yaml` + > Resource 'Topic5' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `mySubnet1` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `bad_functions_getaz_yaml` + > Resource 'mySubnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet2` (AWS::EC2::Subnet) → `Properties.Tags` L21 in `bad_functions_getaz_yaml` + > Resource 'mySubnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet3` (AWS::EC2::Subnet) → `Properties.Tags` L30 in `bad_functions_getaz_yaml` + > Resource 'mySubnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `subnet` (AWS::EC2::Subnet) → `Properties.Tags` L8 in `bad_functions_import_value_yaml` + > Resource 'subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_join_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L18 in `bad_functions_join_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L12 in `bad_functions_length_no_transform_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L50 in `bad_functions_ref_yaml` + > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_functions_ref_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `bad_functions_ref_yaml` + > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_functions_ref_yaml` + > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L35 in `bad_functions_relationship_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `bad_functions_relationship_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SubCondGetAttParam` (AWS::SSM::Parameter) → `Properties.Tags` L57 in `bad_functions_relationship_conditions_yaml` + > Resource 'SubCondGetAttParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `SubCondRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L51 in `bad_functions_relationship_conditions_yaml` + > Resource 'SubCondRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_functions_select_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L16 in `bad_functions_select_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_functions_select_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L33 in `bad_functions_select_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `TestBadStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L37 in `bad_functions_sub_needed_yaml` + > Resource 'TestBadStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `TestBadStateMachine2` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L58 in `bad_functions_sub_needed_yaml` + > Resource 'TestBadStateMachine2' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L10 in `bad_functions_sub_needed_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L32 in `bad_functions_sub_needed_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_functions_tojsonstring_no_transform_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L112 in `bad_generic_yaml` + > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L42 in `bad_generic_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L62 in `bad_generic_yaml` + > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEc2BlockDevice` (AWS::EC2::Instance) → `Properties.Tags` L218 in `bad_generic_yaml` + > Resource 'MyEc2BlockDevice' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L71 in `bad_generic_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdaMap1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L195 in `bad_generic_yaml` + > Resource 'lambdaMap1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdaMap2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L203 in `bad_generic_yaml` + > Resource 'lambdaMap2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `myEc2Instance4` (AWS::EC2::Instance) → `Properties.Tags` L67 in `bad_generic_yaml` + > Resource 'myEc2Instance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myIamProfile` (AWS::IAM::Role) → `Properties.Tags` L25 in `bad_generic_yaml` + > Resource 'myIamProfile' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myIamProfile2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_generic_yaml` + > Resource 'myIamProfile2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myIamProfile3` (AWS::IAM::Role) → `Properties.Tags` L32 in `bad_generic_yaml` + > Resource 'myIamProfile3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myLambdaTwo` (AWS::Lambda::Function) → `Properties.Tags` L146 in `bad_generic_yaml` + > Resource 'myLambdaTwo' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_getatt_object_attribute_member_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Param` (AWS::SSM::Parameter) → `Properties.Tags` L13 in `bad_getatt_object_attribute_member_yaml` + > Resource 'Param' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hard_coded_arn_properties_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L26 in `bad_hard_coded_arn_properties_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_hardcoded_partition_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_hardcoded_partition_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Project` (AWS::CodeBuild::Project) → `Properties.Tags` L16 in `bad_iam_ref_with_path_yaml` + > Resource 'Project' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L5 in `bad_iam_ref_with_path_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `NotActionUser` (AWS::IAM::User) → `Properties.Tags` L36 in `bad_iam_wildcard_all_types_yaml` + > Resource 'NotActionUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `WildcardUser` (AWS::IAM::User) → `Properties.Tags` L5 in `bad_iam_wildcard_all_types_yaml` + > Resource 'WildcardUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_if_wrong_arity_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_deletion_policy_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L6 in `bad_invalid_mapping_structure_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_invalid_update_replace_policy_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RDSOptionGroup` (AWS::RDS::OptionGroup) → `Properties.Tags` L5 in `bad_issues_yaml` + > Resource 'RDSOptionGroup' of type 'AWS::RDS::OptionGroup' supports Tags but none are configured +- **I9040** `Fn` (AWS::Lambda::Function) → `Properties.Tags` L10 in `bad_lambda_image_handler_intrinsic_yaml` + > Resource 'Fn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_no_snapstart_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_bad_runtime_yaml` + > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_snapstart_no_version_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ESM` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L19 in `bad_lambda_sqs_timeout_yaml` + > Resource 'ESM' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L9 in `bad_lambda_sqs_timeout_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_lambda_sqs_timeout_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Func` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zip_no_handler_yaml` + > Resource 'Func' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_lambda_zipfile_java_yaml` + > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BothBranchesInvalid` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'BothBranchesInvalid' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalInvalidDeletion` (AWS::S3::Bucket) → `Properties.Tags` L16 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalInvalidDeletion' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalInvalidUpdate` (AWS::S3::Bucket) → `Properties.Tags` L20 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalInvalidUpdate' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L33 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'ConditionalNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DirectNoValuePolicies` (AWS::S3::Bucket) → `Properties.Tags` L28 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'DirectNoValuePolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DynamicObjectPolicy` (AWS::S3::Bucket) → `Properties.Tags` L38 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Resource 'DynamicObjectPolicy' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `Properties.Tags` L27 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'CreationNoValueOnUnsupportedType' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ListPolicies` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'ListPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `Properties.Tags` L36 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'NoValuePoliciesWithoutTransform' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `ObjectPolicies` (AWS::S3::Bucket) → `Properties.Tags` L13 in `bad_lifecycle_policy_shapes_yaml` + > Resource 'ObjectPolicies' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Resource1` (AWS::SNS::Topic) → `Properties.Tags` L405 in `bad_limit_numbers_yaml` + > Resource 'Resource1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource10` (AWS::SNS::Topic) → `Properties.Tags` L423 in `bad_limit_numbers_yaml` + > Resource 'Resource10' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource100` (AWS::SNS::Topic) → `Properties.Tags` L603 in `bad_limit_numbers_yaml` + > Resource 'Resource100' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource101` (AWS::SNS::Topic) → `Properties.Tags` L605 in `bad_limit_numbers_yaml` + > Resource 'Resource101' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource102` (AWS::SNS::Topic) → `Properties.Tags` L607 in `bad_limit_numbers_yaml` + > Resource 'Resource102' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource103` (AWS::SNS::Topic) → `Properties.Tags` L609 in `bad_limit_numbers_yaml` + > Resource 'Resource103' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource104` (AWS::SNS::Topic) → `Properties.Tags` L611 in `bad_limit_numbers_yaml` + > Resource 'Resource104' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource105` (AWS::SNS::Topic) → `Properties.Tags` L613 in `bad_limit_numbers_yaml` + > Resource 'Resource105' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource106` (AWS::SNS::Topic) → `Properties.Tags` L615 in `bad_limit_numbers_yaml` + > Resource 'Resource106' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource107` (AWS::SNS::Topic) → `Properties.Tags` L617 in `bad_limit_numbers_yaml` + > Resource 'Resource107' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource108` (AWS::SNS::Topic) → `Properties.Tags` L619 in `bad_limit_numbers_yaml` + > Resource 'Resource108' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource109` (AWS::SNS::Topic) → `Properties.Tags` L621 in `bad_limit_numbers_yaml` + > Resource 'Resource109' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource11` (AWS::SNS::Topic) → `Properties.Tags` L425 in `bad_limit_numbers_yaml` + > Resource 'Resource11' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource110` (AWS::SNS::Topic) → `Properties.Tags` L623 in `bad_limit_numbers_yaml` + > Resource 'Resource110' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource111` (AWS::SNS::Topic) → `Properties.Tags` L625 in `bad_limit_numbers_yaml` + > Resource 'Resource111' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource112` (AWS::SNS::Topic) → `Properties.Tags` L627 in `bad_limit_numbers_yaml` + > Resource 'Resource112' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource113` (AWS::SNS::Topic) → `Properties.Tags` L629 in `bad_limit_numbers_yaml` + > Resource 'Resource113' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource114` (AWS::SNS::Topic) → `Properties.Tags` L631 in `bad_limit_numbers_yaml` + > Resource 'Resource114' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource115` (AWS::SNS::Topic) → `Properties.Tags` L633 in `bad_limit_numbers_yaml` + > Resource 'Resource115' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource116` (AWS::SNS::Topic) → `Properties.Tags` L635 in `bad_limit_numbers_yaml` + > Resource 'Resource116' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource117` (AWS::SNS::Topic) → `Properties.Tags` L637 in `bad_limit_numbers_yaml` + > Resource 'Resource117' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource118` (AWS::SNS::Topic) → `Properties.Tags` L639 in `bad_limit_numbers_yaml` + > Resource 'Resource118' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource119` (AWS::SNS::Topic) → `Properties.Tags` L641 in `bad_limit_numbers_yaml` + > Resource 'Resource119' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource12` (AWS::SNS::Topic) → `Properties.Tags` L427 in `bad_limit_numbers_yaml` + > Resource 'Resource12' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource120` (AWS::SNS::Topic) → `Properties.Tags` L643 in `bad_limit_numbers_yaml` + > Resource 'Resource120' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource121` (AWS::SNS::Topic) → `Properties.Tags` L645 in `bad_limit_numbers_yaml` + > Resource 'Resource121' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource122` (AWS::SNS::Topic) → `Properties.Tags` L647 in `bad_limit_numbers_yaml` + > Resource 'Resource122' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource123` (AWS::SNS::Topic) → `Properties.Tags` L649 in `bad_limit_numbers_yaml` + > Resource 'Resource123' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource124` (AWS::SNS::Topic) → `Properties.Tags` L651 in `bad_limit_numbers_yaml` + > Resource 'Resource124' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource125` (AWS::SNS::Topic) → `Properties.Tags` L653 in `bad_limit_numbers_yaml` + > Resource 'Resource125' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource126` (AWS::SNS::Topic) → `Properties.Tags` L655 in `bad_limit_numbers_yaml` + > Resource 'Resource126' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource127` (AWS::SNS::Topic) → `Properties.Tags` L657 in `bad_limit_numbers_yaml` + > Resource 'Resource127' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource128` (AWS::SNS::Topic) → `Properties.Tags` L659 in `bad_limit_numbers_yaml` + > Resource 'Resource128' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource129` (AWS::SNS::Topic) → `Properties.Tags` L661 in `bad_limit_numbers_yaml` + > Resource 'Resource129' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource13` (AWS::SNS::Topic) → `Properties.Tags` L429 in `bad_limit_numbers_yaml` + > Resource 'Resource13' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource130` (AWS::SNS::Topic) → `Properties.Tags` L663 in `bad_limit_numbers_yaml` + > Resource 'Resource130' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource131` (AWS::SNS::Topic) → `Properties.Tags` L665 in `bad_limit_numbers_yaml` + > Resource 'Resource131' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource132` (AWS::SNS::Topic) → `Properties.Tags` L667 in `bad_limit_numbers_yaml` + > Resource 'Resource132' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource133` (AWS::SNS::Topic) → `Properties.Tags` L669 in `bad_limit_numbers_yaml` + > Resource 'Resource133' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource134` (AWS::SNS::Topic) → `Properties.Tags` L671 in `bad_limit_numbers_yaml` + > Resource 'Resource134' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource135` (AWS::SNS::Topic) → `Properties.Tags` L673 in `bad_limit_numbers_yaml` + > Resource 'Resource135' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource136` (AWS::SNS::Topic) → `Properties.Tags` L675 in `bad_limit_numbers_yaml` + > Resource 'Resource136' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource137` (AWS::SNS::Topic) → `Properties.Tags` L677 in `bad_limit_numbers_yaml` + > Resource 'Resource137' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource138` (AWS::SNS::Topic) → `Properties.Tags` L679 in `bad_limit_numbers_yaml` + > Resource 'Resource138' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource139` (AWS::SNS::Topic) → `Properties.Tags` L681 in `bad_limit_numbers_yaml` + > Resource 'Resource139' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource14` (AWS::SNS::Topic) → `Properties.Tags` L431 in `bad_limit_numbers_yaml` + > Resource 'Resource14' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource140` (AWS::SNS::Topic) → `Properties.Tags` L683 in `bad_limit_numbers_yaml` + > Resource 'Resource140' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource141` (AWS::SNS::Topic) → `Properties.Tags` L685 in `bad_limit_numbers_yaml` + > Resource 'Resource141' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource142` (AWS::SNS::Topic) → `Properties.Tags` L687 in `bad_limit_numbers_yaml` + > Resource 'Resource142' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource143` (AWS::SNS::Topic) → `Properties.Tags` L689 in `bad_limit_numbers_yaml` + > Resource 'Resource143' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource144` (AWS::SNS::Topic) → `Properties.Tags` L691 in `bad_limit_numbers_yaml` + > Resource 'Resource144' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource145` (AWS::SNS::Topic) → `Properties.Tags` L693 in `bad_limit_numbers_yaml` + > Resource 'Resource145' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource146` (AWS::SNS::Topic) → `Properties.Tags` L695 in `bad_limit_numbers_yaml` + > Resource 'Resource146' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource147` (AWS::SNS::Topic) → `Properties.Tags` L697 in `bad_limit_numbers_yaml` + > Resource 'Resource147' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource148` (AWS::SNS::Topic) → `Properties.Tags` L699 in `bad_limit_numbers_yaml` + > Resource 'Resource148' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource149` (AWS::SNS::Topic) → `Properties.Tags` L701 in `bad_limit_numbers_yaml` + > Resource 'Resource149' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource15` (AWS::SNS::Topic) → `Properties.Tags` L433 in `bad_limit_numbers_yaml` + > Resource 'Resource15' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource150` (AWS::SNS::Topic) → `Properties.Tags` L703 in `bad_limit_numbers_yaml` + > Resource 'Resource150' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource151` (AWS::SNS::Topic) → `Properties.Tags` L705 in `bad_limit_numbers_yaml` + > Resource 'Resource151' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource152` (AWS::SNS::Topic) → `Properties.Tags` L707 in `bad_limit_numbers_yaml` + > Resource 'Resource152' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource153` (AWS::SNS::Topic) → `Properties.Tags` L709 in `bad_limit_numbers_yaml` + > Resource 'Resource153' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource154` (AWS::SNS::Topic) → `Properties.Tags` L711 in `bad_limit_numbers_yaml` + > Resource 'Resource154' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource155` (AWS::SNS::Topic) → `Properties.Tags` L713 in `bad_limit_numbers_yaml` + > Resource 'Resource155' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource156` (AWS::SNS::Topic) → `Properties.Tags` L715 in `bad_limit_numbers_yaml` + > Resource 'Resource156' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource157` (AWS::SNS::Topic) → `Properties.Tags` L717 in `bad_limit_numbers_yaml` + > Resource 'Resource157' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource158` (AWS::SNS::Topic) → `Properties.Tags` L719 in `bad_limit_numbers_yaml` + > Resource 'Resource158' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource159` (AWS::SNS::Topic) → `Properties.Tags` L721 in `bad_limit_numbers_yaml` + > Resource 'Resource159' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource16` (AWS::SNS::Topic) → `Properties.Tags` L435 in `bad_limit_numbers_yaml` + > Resource 'Resource16' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource160` (AWS::SNS::Topic) → `Properties.Tags` L723 in `bad_limit_numbers_yaml` + > Resource 'Resource160' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource161` (AWS::SNS::Topic) → `Properties.Tags` L725 in `bad_limit_numbers_yaml` + > Resource 'Resource161' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource162` (AWS::SNS::Topic) → `Properties.Tags` L727 in `bad_limit_numbers_yaml` + > Resource 'Resource162' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource163` (AWS::SNS::Topic) → `Properties.Tags` L729 in `bad_limit_numbers_yaml` + > Resource 'Resource163' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource164` (AWS::SNS::Topic) → `Properties.Tags` L731 in `bad_limit_numbers_yaml` + > Resource 'Resource164' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource165` (AWS::SNS::Topic) → `Properties.Tags` L733 in `bad_limit_numbers_yaml` + > Resource 'Resource165' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource166` (AWS::SNS::Topic) → `Properties.Tags` L735 in `bad_limit_numbers_yaml` + > Resource 'Resource166' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource167` (AWS::SNS::Topic) → `Properties.Tags` L737 in `bad_limit_numbers_yaml` + > Resource 'Resource167' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource168` (AWS::SNS::Topic) → `Properties.Tags` L739 in `bad_limit_numbers_yaml` + > Resource 'Resource168' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource169` (AWS::SNS::Topic) → `Properties.Tags` L741 in `bad_limit_numbers_yaml` + > Resource 'Resource169' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource17` (AWS::SNS::Topic) → `Properties.Tags` L437 in `bad_limit_numbers_yaml` + > Resource 'Resource17' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource170` (AWS::SNS::Topic) → `Properties.Tags` L743 in `bad_limit_numbers_yaml` + > Resource 'Resource170' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource171` (AWS::SNS::Topic) → `Properties.Tags` L745 in `bad_limit_numbers_yaml` + > Resource 'Resource171' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource172` (AWS::SNS::Topic) → `Properties.Tags` L747 in `bad_limit_numbers_yaml` + > Resource 'Resource172' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource173` (AWS::SNS::Topic) → `Properties.Tags` L749 in `bad_limit_numbers_yaml` + > Resource 'Resource173' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource174` (AWS::SNS::Topic) → `Properties.Tags` L751 in `bad_limit_numbers_yaml` + > Resource 'Resource174' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource175` (AWS::SNS::Topic) → `Properties.Tags` L753 in `bad_limit_numbers_yaml` + > Resource 'Resource175' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource176` (AWS::SNS::Topic) → `Properties.Tags` L755 in `bad_limit_numbers_yaml` + > Resource 'Resource176' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource177` (AWS::SNS::Topic) → `Properties.Tags` L757 in `bad_limit_numbers_yaml` + > Resource 'Resource177' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource178` (AWS::SNS::Topic) → `Properties.Tags` L759 in `bad_limit_numbers_yaml` + > Resource 'Resource178' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource179` (AWS::SNS::Topic) → `Properties.Tags` L761 in `bad_limit_numbers_yaml` + > Resource 'Resource179' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource18` (AWS::SNS::Topic) → `Properties.Tags` L439 in `bad_limit_numbers_yaml` + > Resource 'Resource18' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource180` (AWS::SNS::Topic) → `Properties.Tags` L763 in `bad_limit_numbers_yaml` + > Resource 'Resource180' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource181` (AWS::SNS::Topic) → `Properties.Tags` L765 in `bad_limit_numbers_yaml` + > Resource 'Resource181' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource182` (AWS::SNS::Topic) → `Properties.Tags` L767 in `bad_limit_numbers_yaml` + > Resource 'Resource182' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource183` (AWS::SNS::Topic) → `Properties.Tags` L769 in `bad_limit_numbers_yaml` + > Resource 'Resource183' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource184` (AWS::SNS::Topic) → `Properties.Tags` L771 in `bad_limit_numbers_yaml` + > Resource 'Resource184' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource185` (AWS::SNS::Topic) → `Properties.Tags` L773 in `bad_limit_numbers_yaml` + > Resource 'Resource185' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource186` (AWS::SNS::Topic) → `Properties.Tags` L775 in `bad_limit_numbers_yaml` + > Resource 'Resource186' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource187` (AWS::SNS::Topic) → `Properties.Tags` L777 in `bad_limit_numbers_yaml` + > Resource 'Resource187' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource188` (AWS::SNS::Topic) → `Properties.Tags` L779 in `bad_limit_numbers_yaml` + > Resource 'Resource188' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource189` (AWS::SNS::Topic) → `Properties.Tags` L781 in `bad_limit_numbers_yaml` + > Resource 'Resource189' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource19` (AWS::SNS::Topic) → `Properties.Tags` L441 in `bad_limit_numbers_yaml` + > Resource 'Resource19' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource190` (AWS::SNS::Topic) → `Properties.Tags` L783 in `bad_limit_numbers_yaml` + > Resource 'Resource190' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource191` (AWS::SNS::Topic) → `Properties.Tags` L785 in `bad_limit_numbers_yaml` + > Resource 'Resource191' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource192` (AWS::SNS::Topic) → `Properties.Tags` L787 in `bad_limit_numbers_yaml` + > Resource 'Resource192' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource193` (AWS::SNS::Topic) → `Properties.Tags` L789 in `bad_limit_numbers_yaml` + > Resource 'Resource193' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource194` (AWS::SNS::Topic) → `Properties.Tags` L791 in `bad_limit_numbers_yaml` + > Resource 'Resource194' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource195` (AWS::SNS::Topic) → `Properties.Tags` L793 in `bad_limit_numbers_yaml` + > Resource 'Resource195' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource196` (AWS::SNS::Topic) → `Properties.Tags` L795 in `bad_limit_numbers_yaml` + > Resource 'Resource196' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource197` (AWS::SNS::Topic) → `Properties.Tags` L797 in `bad_limit_numbers_yaml` + > Resource 'Resource197' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource198` (AWS::SNS::Topic) → `Properties.Tags` L799 in `bad_limit_numbers_yaml` + > Resource 'Resource198' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource199` (AWS::SNS::Topic) → `Properties.Tags` L801 in `bad_limit_numbers_yaml` + > Resource 'Resource199' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L407 in `bad_limit_numbers_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource20` (AWS::SNS::Topic) → `Properties.Tags` L443 in `bad_limit_numbers_yaml` + > Resource 'Resource20' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource200` (AWS::SNS::Topic) → `Properties.Tags` L803 in `bad_limit_numbers_yaml` + > Resource 'Resource200' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource201` (AWS::SNS::Topic) → `Properties.Tags` L805 in `bad_limit_numbers_yaml` + > Resource 'Resource201' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource202` (AWS::SNS::Topic) → `Properties.Tags` L807 in `bad_limit_numbers_yaml` + > Resource 'Resource202' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource203` (AWS::SNS::Topic) → `Properties.Tags` L809 in `bad_limit_numbers_yaml` + > Resource 'Resource203' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource204` (AWS::SNS::Topic) → `Properties.Tags` L811 in `bad_limit_numbers_yaml` + > Resource 'Resource204' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource205` (AWS::SNS::Topic) → `Properties.Tags` L813 in `bad_limit_numbers_yaml` + > Resource 'Resource205' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource206` (AWS::SNS::Topic) → `Properties.Tags` L815 in `bad_limit_numbers_yaml` + > Resource 'Resource206' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource207` (AWS::SNS::Topic) → `Properties.Tags` L817 in `bad_limit_numbers_yaml` + > Resource 'Resource207' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource208` (AWS::SNS::Topic) → `Properties.Tags` L819 in `bad_limit_numbers_yaml` + > Resource 'Resource208' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource209` (AWS::SNS::Topic) → `Properties.Tags` L821 in `bad_limit_numbers_yaml` + > Resource 'Resource209' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource21` (AWS::SNS::Topic) → `Properties.Tags` L445 in `bad_limit_numbers_yaml` + > Resource 'Resource21' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource210` (AWS::SNS::Topic) → `Properties.Tags` L823 in `bad_limit_numbers_yaml` + > Resource 'Resource210' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource211` (AWS::SNS::Topic) → `Properties.Tags` L825 in `bad_limit_numbers_yaml` + > Resource 'Resource211' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource212` (AWS::SNS::Topic) → `Properties.Tags` L827 in `bad_limit_numbers_yaml` + > Resource 'Resource212' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource213` (AWS::SNS::Topic) → `Properties.Tags` L829 in `bad_limit_numbers_yaml` + > Resource 'Resource213' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource214` (AWS::SNS::Topic) → `Properties.Tags` L831 in `bad_limit_numbers_yaml` + > Resource 'Resource214' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource215` (AWS::SNS::Topic) → `Properties.Tags` L833 in `bad_limit_numbers_yaml` + > Resource 'Resource215' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource216` (AWS::SNS::Topic) → `Properties.Tags` L835 in `bad_limit_numbers_yaml` + > Resource 'Resource216' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource217` (AWS::SNS::Topic) → `Properties.Tags` L837 in `bad_limit_numbers_yaml` + > Resource 'Resource217' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource218` (AWS::SNS::Topic) → `Properties.Tags` L839 in `bad_limit_numbers_yaml` + > Resource 'Resource218' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource219` (AWS::SNS::Topic) → `Properties.Tags` L841 in `bad_limit_numbers_yaml` + > Resource 'Resource219' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource22` (AWS::SNS::Topic) → `Properties.Tags` L447 in `bad_limit_numbers_yaml` + > Resource 'Resource22' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource220` (AWS::SNS::Topic) → `Properties.Tags` L843 in `bad_limit_numbers_yaml` + > Resource 'Resource220' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource221` (AWS::SNS::Topic) → `Properties.Tags` L845 in `bad_limit_numbers_yaml` + > Resource 'Resource221' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource222` (AWS::SNS::Topic) → `Properties.Tags` L847 in `bad_limit_numbers_yaml` + > Resource 'Resource222' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource223` (AWS::SNS::Topic) → `Properties.Tags` L849 in `bad_limit_numbers_yaml` + > Resource 'Resource223' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource224` (AWS::SNS::Topic) → `Properties.Tags` L851 in `bad_limit_numbers_yaml` + > Resource 'Resource224' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource225` (AWS::SNS::Topic) → `Properties.Tags` L853 in `bad_limit_numbers_yaml` + > Resource 'Resource225' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource226` (AWS::SNS::Topic) → `Properties.Tags` L855 in `bad_limit_numbers_yaml` + > Resource 'Resource226' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource227` (AWS::SNS::Topic) → `Properties.Tags` L857 in `bad_limit_numbers_yaml` + > Resource 'Resource227' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource228` (AWS::SNS::Topic) → `Properties.Tags` L859 in `bad_limit_numbers_yaml` + > Resource 'Resource228' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource229` (AWS::SNS::Topic) → `Properties.Tags` L861 in `bad_limit_numbers_yaml` + > Resource 'Resource229' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource23` (AWS::SNS::Topic) → `Properties.Tags` L449 in `bad_limit_numbers_yaml` + > Resource 'Resource23' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource230` (AWS::SNS::Topic) → `Properties.Tags` L863 in `bad_limit_numbers_yaml` + > Resource 'Resource230' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource231` (AWS::SNS::Topic) → `Properties.Tags` L865 in `bad_limit_numbers_yaml` + > Resource 'Resource231' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource232` (AWS::SNS::Topic) → `Properties.Tags` L867 in `bad_limit_numbers_yaml` + > Resource 'Resource232' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource233` (AWS::SNS::Topic) → `Properties.Tags` L869 in `bad_limit_numbers_yaml` + > Resource 'Resource233' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource234` (AWS::SNS::Topic) → `Properties.Tags` L871 in `bad_limit_numbers_yaml` + > Resource 'Resource234' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource235` (AWS::SNS::Topic) → `Properties.Tags` L873 in `bad_limit_numbers_yaml` + > Resource 'Resource235' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource236` (AWS::SNS::Topic) → `Properties.Tags` L875 in `bad_limit_numbers_yaml` + > Resource 'Resource236' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource237` (AWS::SNS::Topic) → `Properties.Tags` L877 in `bad_limit_numbers_yaml` + > Resource 'Resource237' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource238` (AWS::SNS::Topic) → `Properties.Tags` L879 in `bad_limit_numbers_yaml` + > Resource 'Resource238' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource239` (AWS::SNS::Topic) → `Properties.Tags` L881 in `bad_limit_numbers_yaml` + > Resource 'Resource239' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource24` (AWS::SNS::Topic) → `Properties.Tags` L451 in `bad_limit_numbers_yaml` + > Resource 'Resource24' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource240` (AWS::SNS::Topic) → `Properties.Tags` L883 in `bad_limit_numbers_yaml` + > Resource 'Resource240' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource241` (AWS::SNS::Topic) → `Properties.Tags` L885 in `bad_limit_numbers_yaml` + > Resource 'Resource241' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource242` (AWS::SNS::Topic) → `Properties.Tags` L887 in `bad_limit_numbers_yaml` + > Resource 'Resource242' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource243` (AWS::SNS::Topic) → `Properties.Tags` L889 in `bad_limit_numbers_yaml` + > Resource 'Resource243' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource244` (AWS::SNS::Topic) → `Properties.Tags` L891 in `bad_limit_numbers_yaml` + > Resource 'Resource244' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource245` (AWS::SNS::Topic) → `Properties.Tags` L893 in `bad_limit_numbers_yaml` + > Resource 'Resource245' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource246` (AWS::SNS::Topic) → `Properties.Tags` L895 in `bad_limit_numbers_yaml` + > Resource 'Resource246' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource247` (AWS::SNS::Topic) → `Properties.Tags` L897 in `bad_limit_numbers_yaml` + > Resource 'Resource247' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource248` (AWS::SNS::Topic) → `Properties.Tags` L899 in `bad_limit_numbers_yaml` + > Resource 'Resource248' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource249` (AWS::SNS::Topic) → `Properties.Tags` L901 in `bad_limit_numbers_yaml` + > Resource 'Resource249' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource25` (AWS::SNS::Topic) → `Properties.Tags` L453 in `bad_limit_numbers_yaml` + > Resource 'Resource25' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource250` (AWS::SNS::Topic) → `Properties.Tags` L903 in `bad_limit_numbers_yaml` + > Resource 'Resource250' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource251` (AWS::SNS::Topic) → `Properties.Tags` L905 in `bad_limit_numbers_yaml` + > Resource 'Resource251' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource252` (AWS::SNS::Topic) → `Properties.Tags` L907 in `bad_limit_numbers_yaml` + > Resource 'Resource252' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource253` (AWS::SNS::Topic) → `Properties.Tags` L909 in `bad_limit_numbers_yaml` + > Resource 'Resource253' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource254` (AWS::SNS::Topic) → `Properties.Tags` L911 in `bad_limit_numbers_yaml` + > Resource 'Resource254' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource255` (AWS::SNS::Topic) → `Properties.Tags` L913 in `bad_limit_numbers_yaml` + > Resource 'Resource255' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource256` (AWS::SNS::Topic) → `Properties.Tags` L915 in `bad_limit_numbers_yaml` + > Resource 'Resource256' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource257` (AWS::SNS::Topic) → `Properties.Tags` L917 in `bad_limit_numbers_yaml` + > Resource 'Resource257' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource258` (AWS::SNS::Topic) → `Properties.Tags` L919 in `bad_limit_numbers_yaml` + > Resource 'Resource258' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource259` (AWS::SNS::Topic) → `Properties.Tags` L921 in `bad_limit_numbers_yaml` + > Resource 'Resource259' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource26` (AWS::SNS::Topic) → `Properties.Tags` L455 in `bad_limit_numbers_yaml` + > Resource 'Resource26' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource260` (AWS::SNS::Topic) → `Properties.Tags` L923 in `bad_limit_numbers_yaml` + > Resource 'Resource260' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource261` (AWS::SNS::Topic) → `Properties.Tags` L925 in `bad_limit_numbers_yaml` + > Resource 'Resource261' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource262` (AWS::SNS::Topic) → `Properties.Tags` L927 in `bad_limit_numbers_yaml` + > Resource 'Resource262' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource263` (AWS::SNS::Topic) → `Properties.Tags` L929 in `bad_limit_numbers_yaml` + > Resource 'Resource263' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource264` (AWS::SNS::Topic) → `Properties.Tags` L931 in `bad_limit_numbers_yaml` + > Resource 'Resource264' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource265` (AWS::SNS::Topic) → `Properties.Tags` L933 in `bad_limit_numbers_yaml` + > Resource 'Resource265' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource266` (AWS::SNS::Topic) → `Properties.Tags` L935 in `bad_limit_numbers_yaml` + > Resource 'Resource266' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource267` (AWS::SNS::Topic) → `Properties.Tags` L937 in `bad_limit_numbers_yaml` + > Resource 'Resource267' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource268` (AWS::SNS::Topic) → `Properties.Tags` L939 in `bad_limit_numbers_yaml` + > Resource 'Resource268' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource269` (AWS::SNS::Topic) → `Properties.Tags` L941 in `bad_limit_numbers_yaml` + > Resource 'Resource269' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource27` (AWS::SNS::Topic) → `Properties.Tags` L457 in `bad_limit_numbers_yaml` + > Resource 'Resource27' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource270` (AWS::SNS::Topic) → `Properties.Tags` L943 in `bad_limit_numbers_yaml` + > Resource 'Resource270' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource271` (AWS::SNS::Topic) → `Properties.Tags` L945 in `bad_limit_numbers_yaml` + > Resource 'Resource271' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource272` (AWS::SNS::Topic) → `Properties.Tags` L947 in `bad_limit_numbers_yaml` + > Resource 'Resource272' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource273` (AWS::SNS::Topic) → `Properties.Tags` L949 in `bad_limit_numbers_yaml` + > Resource 'Resource273' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource274` (AWS::SNS::Topic) → `Properties.Tags` L951 in `bad_limit_numbers_yaml` + > Resource 'Resource274' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource275` (AWS::SNS::Topic) → `Properties.Tags` L953 in `bad_limit_numbers_yaml` + > Resource 'Resource275' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource276` (AWS::SNS::Topic) → `Properties.Tags` L955 in `bad_limit_numbers_yaml` + > Resource 'Resource276' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource277` (AWS::SNS::Topic) → `Properties.Tags` L957 in `bad_limit_numbers_yaml` + > Resource 'Resource277' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource278` (AWS::SNS::Topic) → `Properties.Tags` L959 in `bad_limit_numbers_yaml` + > Resource 'Resource278' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource279` (AWS::SNS::Topic) → `Properties.Tags` L961 in `bad_limit_numbers_yaml` + > Resource 'Resource279' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource28` (AWS::SNS::Topic) → `Properties.Tags` L459 in `bad_limit_numbers_yaml` + > Resource 'Resource28' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource280` (AWS::SNS::Topic) → `Properties.Tags` L963 in `bad_limit_numbers_yaml` + > Resource 'Resource280' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource281` (AWS::SNS::Topic) → `Properties.Tags` L965 in `bad_limit_numbers_yaml` + > Resource 'Resource281' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource282` (AWS::SNS::Topic) → `Properties.Tags` L967 in `bad_limit_numbers_yaml` + > Resource 'Resource282' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource283` (AWS::SNS::Topic) → `Properties.Tags` L969 in `bad_limit_numbers_yaml` + > Resource 'Resource283' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource284` (AWS::SNS::Topic) → `Properties.Tags` L971 in `bad_limit_numbers_yaml` + > Resource 'Resource284' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource285` (AWS::SNS::Topic) → `Properties.Tags` L973 in `bad_limit_numbers_yaml` + > Resource 'Resource285' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource286` (AWS::SNS::Topic) → `Properties.Tags` L975 in `bad_limit_numbers_yaml` + > Resource 'Resource286' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource287` (AWS::SNS::Topic) → `Properties.Tags` L977 in `bad_limit_numbers_yaml` + > Resource 'Resource287' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource288` (AWS::SNS::Topic) → `Properties.Tags` L979 in `bad_limit_numbers_yaml` + > Resource 'Resource288' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource289` (AWS::SNS::Topic) → `Properties.Tags` L981 in `bad_limit_numbers_yaml` + > Resource 'Resource289' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource29` (AWS::SNS::Topic) → `Properties.Tags` L461 in `bad_limit_numbers_yaml` + > Resource 'Resource29' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource290` (AWS::SNS::Topic) → `Properties.Tags` L983 in `bad_limit_numbers_yaml` + > Resource 'Resource290' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource291` (AWS::SNS::Topic) → `Properties.Tags` L985 in `bad_limit_numbers_yaml` + > Resource 'Resource291' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource292` (AWS::SNS::Topic) → `Properties.Tags` L987 in `bad_limit_numbers_yaml` + > Resource 'Resource292' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource293` (AWS::SNS::Topic) → `Properties.Tags` L989 in `bad_limit_numbers_yaml` + > Resource 'Resource293' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource294` (AWS::SNS::Topic) → `Properties.Tags` L991 in `bad_limit_numbers_yaml` + > Resource 'Resource294' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource295` (AWS::SNS::Topic) → `Properties.Tags` L993 in `bad_limit_numbers_yaml` + > Resource 'Resource295' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource296` (AWS::SNS::Topic) → `Properties.Tags` L995 in `bad_limit_numbers_yaml` + > Resource 'Resource296' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource297` (AWS::SNS::Topic) → `Properties.Tags` L997 in `bad_limit_numbers_yaml` + > Resource 'Resource297' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource298` (AWS::SNS::Topic) → `Properties.Tags` L999 in `bad_limit_numbers_yaml` + > Resource 'Resource298' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource299` (AWS::SNS::Topic) → `Properties.Tags` L1001 in `bad_limit_numbers_yaml` + > Resource 'Resource299' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L409 in `bad_limit_numbers_yaml` + > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource30` (AWS::SNS::Topic) → `Properties.Tags` L463 in `bad_limit_numbers_yaml` + > Resource 'Resource30' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource300` (AWS::SNS::Topic) → `Properties.Tags` L1003 in `bad_limit_numbers_yaml` + > Resource 'Resource300' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource301` (AWS::SNS::Topic) → `Properties.Tags` L1005 in `bad_limit_numbers_yaml` + > Resource 'Resource301' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource302` (AWS::SNS::Topic) → `Properties.Tags` L1007 in `bad_limit_numbers_yaml` + > Resource 'Resource302' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource303` (AWS::SNS::Topic) → `Properties.Tags` L1009 in `bad_limit_numbers_yaml` + > Resource 'Resource303' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource304` (AWS::SNS::Topic) → `Properties.Tags` L1011 in `bad_limit_numbers_yaml` + > Resource 'Resource304' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource305` (AWS::SNS::Topic) → `Properties.Tags` L1013 in `bad_limit_numbers_yaml` + > Resource 'Resource305' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource306` (AWS::SNS::Topic) → `Properties.Tags` L1015 in `bad_limit_numbers_yaml` + > Resource 'Resource306' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource307` (AWS::SNS::Topic) → `Properties.Tags` L1017 in `bad_limit_numbers_yaml` + > Resource 'Resource307' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource308` (AWS::SNS::Topic) → `Properties.Tags` L1019 in `bad_limit_numbers_yaml` + > Resource 'Resource308' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource309` (AWS::SNS::Topic) → `Properties.Tags` L1021 in `bad_limit_numbers_yaml` + > Resource 'Resource309' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource31` (AWS::SNS::Topic) → `Properties.Tags` L465 in `bad_limit_numbers_yaml` + > Resource 'Resource31' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource310` (AWS::SNS::Topic) → `Properties.Tags` L1023 in `bad_limit_numbers_yaml` + > Resource 'Resource310' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource311` (AWS::SNS::Topic) → `Properties.Tags` L1025 in `bad_limit_numbers_yaml` + > Resource 'Resource311' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource312` (AWS::SNS::Topic) → `Properties.Tags` L1027 in `bad_limit_numbers_yaml` + > Resource 'Resource312' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource313` (AWS::SNS::Topic) → `Properties.Tags` L1029 in `bad_limit_numbers_yaml` + > Resource 'Resource313' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource314` (AWS::SNS::Topic) → `Properties.Tags` L1031 in `bad_limit_numbers_yaml` + > Resource 'Resource314' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource315` (AWS::SNS::Topic) → `Properties.Tags` L1033 in `bad_limit_numbers_yaml` + > Resource 'Resource315' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource316` (AWS::SNS::Topic) → `Properties.Tags` L1035 in `bad_limit_numbers_yaml` + > Resource 'Resource316' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource317` (AWS::SNS::Topic) → `Properties.Tags` L1037 in `bad_limit_numbers_yaml` + > Resource 'Resource317' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource318` (AWS::SNS::Topic) → `Properties.Tags` L1039 in `bad_limit_numbers_yaml` + > Resource 'Resource318' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource319` (AWS::SNS::Topic) → `Properties.Tags` L1041 in `bad_limit_numbers_yaml` + > Resource 'Resource319' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource32` (AWS::SNS::Topic) → `Properties.Tags` L467 in `bad_limit_numbers_yaml` + > Resource 'Resource32' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource320` (AWS::SNS::Topic) → `Properties.Tags` L1043 in `bad_limit_numbers_yaml` + > Resource 'Resource320' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource321` (AWS::SNS::Topic) → `Properties.Tags` L1045 in `bad_limit_numbers_yaml` + > Resource 'Resource321' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource322` (AWS::SNS::Topic) → `Properties.Tags` L1047 in `bad_limit_numbers_yaml` + > Resource 'Resource322' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource323` (AWS::SNS::Topic) → `Properties.Tags` L1049 in `bad_limit_numbers_yaml` + > Resource 'Resource323' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource324` (AWS::SNS::Topic) → `Properties.Tags` L1051 in `bad_limit_numbers_yaml` + > Resource 'Resource324' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource325` (AWS::SNS::Topic) → `Properties.Tags` L1053 in `bad_limit_numbers_yaml` + > Resource 'Resource325' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource326` (AWS::SNS::Topic) → `Properties.Tags` L1055 in `bad_limit_numbers_yaml` + > Resource 'Resource326' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource327` (AWS::SNS::Topic) → `Properties.Tags` L1057 in `bad_limit_numbers_yaml` + > Resource 'Resource327' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource328` (AWS::SNS::Topic) → `Properties.Tags` L1059 in `bad_limit_numbers_yaml` + > Resource 'Resource328' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource329` (AWS::SNS::Topic) → `Properties.Tags` L1061 in `bad_limit_numbers_yaml` + > Resource 'Resource329' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource33` (AWS::SNS::Topic) → `Properties.Tags` L469 in `bad_limit_numbers_yaml` + > Resource 'Resource33' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource330` (AWS::SNS::Topic) → `Properties.Tags` L1063 in `bad_limit_numbers_yaml` + > Resource 'Resource330' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource331` (AWS::SNS::Topic) → `Properties.Tags` L1065 in `bad_limit_numbers_yaml` + > Resource 'Resource331' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource332` (AWS::SNS::Topic) → `Properties.Tags` L1067 in `bad_limit_numbers_yaml` + > Resource 'Resource332' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource333` (AWS::SNS::Topic) → `Properties.Tags` L1069 in `bad_limit_numbers_yaml` + > Resource 'Resource333' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource334` (AWS::SNS::Topic) → `Properties.Tags` L1071 in `bad_limit_numbers_yaml` + > Resource 'Resource334' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource335` (AWS::SNS::Topic) → `Properties.Tags` L1073 in `bad_limit_numbers_yaml` + > Resource 'Resource335' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource336` (AWS::SNS::Topic) → `Properties.Tags` L1075 in `bad_limit_numbers_yaml` + > Resource 'Resource336' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource337` (AWS::SNS::Topic) → `Properties.Tags` L1077 in `bad_limit_numbers_yaml` + > Resource 'Resource337' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource338` (AWS::SNS::Topic) → `Properties.Tags` L1079 in `bad_limit_numbers_yaml` + > Resource 'Resource338' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource339` (AWS::SNS::Topic) → `Properties.Tags` L1081 in `bad_limit_numbers_yaml` + > Resource 'Resource339' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource34` (AWS::SNS::Topic) → `Properties.Tags` L471 in `bad_limit_numbers_yaml` + > Resource 'Resource34' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource340` (AWS::SNS::Topic) → `Properties.Tags` L1083 in `bad_limit_numbers_yaml` + > Resource 'Resource340' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource341` (AWS::SNS::Topic) → `Properties.Tags` L1085 in `bad_limit_numbers_yaml` + > Resource 'Resource341' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource342` (AWS::SNS::Topic) → `Properties.Tags` L1087 in `bad_limit_numbers_yaml` + > Resource 'Resource342' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource343` (AWS::SNS::Topic) → `Properties.Tags` L1089 in `bad_limit_numbers_yaml` + > Resource 'Resource343' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource344` (AWS::SNS::Topic) → `Properties.Tags` L1091 in `bad_limit_numbers_yaml` + > Resource 'Resource344' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource345` (AWS::SNS::Topic) → `Properties.Tags` L1093 in `bad_limit_numbers_yaml` + > Resource 'Resource345' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource346` (AWS::SNS::Topic) → `Properties.Tags` L1095 in `bad_limit_numbers_yaml` + > Resource 'Resource346' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource347` (AWS::SNS::Topic) → `Properties.Tags` L1097 in `bad_limit_numbers_yaml` + > Resource 'Resource347' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource348` (AWS::SNS::Topic) → `Properties.Tags` L1099 in `bad_limit_numbers_yaml` + > Resource 'Resource348' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource349` (AWS::SNS::Topic) → `Properties.Tags` L1101 in `bad_limit_numbers_yaml` + > Resource 'Resource349' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource35` (AWS::SNS::Topic) → `Properties.Tags` L473 in `bad_limit_numbers_yaml` + > Resource 'Resource35' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource350` (AWS::SNS::Topic) → `Properties.Tags` L1103 in `bad_limit_numbers_yaml` + > Resource 'Resource350' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource351` (AWS::SNS::Topic) → `Properties.Tags` L1105 in `bad_limit_numbers_yaml` + > Resource 'Resource351' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource352` (AWS::SNS::Topic) → `Properties.Tags` L1107 in `bad_limit_numbers_yaml` + > Resource 'Resource352' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource353` (AWS::SNS::Topic) → `Properties.Tags` L1109 in `bad_limit_numbers_yaml` + > Resource 'Resource353' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource354` (AWS::SNS::Topic) → `Properties.Tags` L1111 in `bad_limit_numbers_yaml` + > Resource 'Resource354' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource355` (AWS::SNS::Topic) → `Properties.Tags` L1113 in `bad_limit_numbers_yaml` + > Resource 'Resource355' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource356` (AWS::SNS::Topic) → `Properties.Tags` L1115 in `bad_limit_numbers_yaml` + > Resource 'Resource356' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource357` (AWS::SNS::Topic) → `Properties.Tags` L1117 in `bad_limit_numbers_yaml` + > Resource 'Resource357' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource358` (AWS::SNS::Topic) → `Properties.Tags` L1119 in `bad_limit_numbers_yaml` + > Resource 'Resource358' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource359` (AWS::SNS::Topic) → `Properties.Tags` L1121 in `bad_limit_numbers_yaml` + > Resource 'Resource359' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource36` (AWS::SNS::Topic) → `Properties.Tags` L475 in `bad_limit_numbers_yaml` + > Resource 'Resource36' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource360` (AWS::SNS::Topic) → `Properties.Tags` L1123 in `bad_limit_numbers_yaml` + > Resource 'Resource360' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource361` (AWS::SNS::Topic) → `Properties.Tags` L1125 in `bad_limit_numbers_yaml` + > Resource 'Resource361' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource362` (AWS::SNS::Topic) → `Properties.Tags` L1127 in `bad_limit_numbers_yaml` + > Resource 'Resource362' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource363` (AWS::SNS::Topic) → `Properties.Tags` L1129 in `bad_limit_numbers_yaml` + > Resource 'Resource363' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource364` (AWS::SNS::Topic) → `Properties.Tags` L1131 in `bad_limit_numbers_yaml` + > Resource 'Resource364' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource365` (AWS::SNS::Topic) → `Properties.Tags` L1133 in `bad_limit_numbers_yaml` + > Resource 'Resource365' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource366` (AWS::SNS::Topic) → `Properties.Tags` L1135 in `bad_limit_numbers_yaml` + > Resource 'Resource366' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource367` (AWS::SNS::Topic) → `Properties.Tags` L1137 in `bad_limit_numbers_yaml` + > Resource 'Resource367' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource368` (AWS::SNS::Topic) → `Properties.Tags` L1139 in `bad_limit_numbers_yaml` + > Resource 'Resource368' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource369` (AWS::SNS::Topic) → `Properties.Tags` L1141 in `bad_limit_numbers_yaml` + > Resource 'Resource369' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource37` (AWS::SNS::Topic) → `Properties.Tags` L477 in `bad_limit_numbers_yaml` + > Resource 'Resource37' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource370` (AWS::SNS::Topic) → `Properties.Tags` L1143 in `bad_limit_numbers_yaml` + > Resource 'Resource370' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource371` (AWS::SNS::Topic) → `Properties.Tags` L1145 in `bad_limit_numbers_yaml` + > Resource 'Resource371' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource372` (AWS::SNS::Topic) → `Properties.Tags` L1147 in `bad_limit_numbers_yaml` + > Resource 'Resource372' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource373` (AWS::SNS::Topic) → `Properties.Tags` L1149 in `bad_limit_numbers_yaml` + > Resource 'Resource373' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource374` (AWS::SNS::Topic) → `Properties.Tags` L1151 in `bad_limit_numbers_yaml` + > Resource 'Resource374' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource375` (AWS::SNS::Topic) → `Properties.Tags` L1153 in `bad_limit_numbers_yaml` + > Resource 'Resource375' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource376` (AWS::SNS::Topic) → `Properties.Tags` L1155 in `bad_limit_numbers_yaml` + > Resource 'Resource376' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource377` (AWS::SNS::Topic) → `Properties.Tags` L1157 in `bad_limit_numbers_yaml` + > Resource 'Resource377' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource378` (AWS::SNS::Topic) → `Properties.Tags` L1159 in `bad_limit_numbers_yaml` + > Resource 'Resource378' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource379` (AWS::SNS::Topic) → `Properties.Tags` L1161 in `bad_limit_numbers_yaml` + > Resource 'Resource379' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource38` (AWS::SNS::Topic) → `Properties.Tags` L479 in `bad_limit_numbers_yaml` + > Resource 'Resource38' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource380` (AWS::SNS::Topic) → `Properties.Tags` L1163 in `bad_limit_numbers_yaml` + > Resource 'Resource380' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource381` (AWS::SNS::Topic) → `Properties.Tags` L1165 in `bad_limit_numbers_yaml` + > Resource 'Resource381' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource382` (AWS::SNS::Topic) → `Properties.Tags` L1167 in `bad_limit_numbers_yaml` + > Resource 'Resource382' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource383` (AWS::SNS::Topic) → `Properties.Tags` L1169 in `bad_limit_numbers_yaml` + > Resource 'Resource383' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource384` (AWS::SNS::Topic) → `Properties.Tags` L1171 in `bad_limit_numbers_yaml` + > Resource 'Resource384' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource385` (AWS::SNS::Topic) → `Properties.Tags` L1173 in `bad_limit_numbers_yaml` + > Resource 'Resource385' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource386` (AWS::SNS::Topic) → `Properties.Tags` L1175 in `bad_limit_numbers_yaml` + > Resource 'Resource386' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource387` (AWS::SNS::Topic) → `Properties.Tags` L1177 in `bad_limit_numbers_yaml` + > Resource 'Resource387' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource388` (AWS::SNS::Topic) → `Properties.Tags` L1179 in `bad_limit_numbers_yaml` + > Resource 'Resource388' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource389` (AWS::SNS::Topic) → `Properties.Tags` L1181 in `bad_limit_numbers_yaml` + > Resource 'Resource389' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource39` (AWS::SNS::Topic) → `Properties.Tags` L481 in `bad_limit_numbers_yaml` + > Resource 'Resource39' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource390` (AWS::SNS::Topic) → `Properties.Tags` L1183 in `bad_limit_numbers_yaml` + > Resource 'Resource390' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource391` (AWS::SNS::Topic) → `Properties.Tags` L1185 in `bad_limit_numbers_yaml` + > Resource 'Resource391' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource392` (AWS::SNS::Topic) → `Properties.Tags` L1187 in `bad_limit_numbers_yaml` + > Resource 'Resource392' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource393` (AWS::SNS::Topic) → `Properties.Tags` L1189 in `bad_limit_numbers_yaml` + > Resource 'Resource393' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource394` (AWS::SNS::Topic) → `Properties.Tags` L1191 in `bad_limit_numbers_yaml` + > Resource 'Resource394' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource395` (AWS::SNS::Topic) → `Properties.Tags` L1193 in `bad_limit_numbers_yaml` + > Resource 'Resource395' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource396` (AWS::SNS::Topic) → `Properties.Tags` L1195 in `bad_limit_numbers_yaml` + > Resource 'Resource396' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource397` (AWS::SNS::Topic) → `Properties.Tags` L1197 in `bad_limit_numbers_yaml` + > Resource 'Resource397' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource398` (AWS::SNS::Topic) → `Properties.Tags` L1199 in `bad_limit_numbers_yaml` + > Resource 'Resource398' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource399` (AWS::SNS::Topic) → `Properties.Tags` L1201 in `bad_limit_numbers_yaml` + > Resource 'Resource399' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L411 in `bad_limit_numbers_yaml` + > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource40` (AWS::SNS::Topic) → `Properties.Tags` L483 in `bad_limit_numbers_yaml` + > Resource 'Resource40' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource400` (AWS::SNS::Topic) → `Properties.Tags` L1203 in `bad_limit_numbers_yaml` + > Resource 'Resource400' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource401` (AWS::SNS::Topic) → `Properties.Tags` L1205 in `bad_limit_numbers_yaml` + > Resource 'Resource401' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource402` (AWS::SNS::Topic) → `Properties.Tags` L1207 in `bad_limit_numbers_yaml` + > Resource 'Resource402' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource403` (AWS::SNS::Topic) → `Properties.Tags` L1209 in `bad_limit_numbers_yaml` + > Resource 'Resource403' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource404` (AWS::SNS::Topic) → `Properties.Tags` L1211 in `bad_limit_numbers_yaml` + > Resource 'Resource404' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource405` (AWS::SNS::Topic) → `Properties.Tags` L1213 in `bad_limit_numbers_yaml` + > Resource 'Resource405' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource406` (AWS::SNS::Topic) → `Properties.Tags` L1215 in `bad_limit_numbers_yaml` + > Resource 'Resource406' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource407` (AWS::SNS::Topic) → `Properties.Tags` L1217 in `bad_limit_numbers_yaml` + > Resource 'Resource407' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource408` (AWS::SNS::Topic) → `Properties.Tags` L1219 in `bad_limit_numbers_yaml` + > Resource 'Resource408' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource409` (AWS::SNS::Topic) → `Properties.Tags` L1221 in `bad_limit_numbers_yaml` + > Resource 'Resource409' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource41` (AWS::SNS::Topic) → `Properties.Tags` L485 in `bad_limit_numbers_yaml` + > Resource 'Resource41' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource410` (AWS::SNS::Topic) → `Properties.Tags` L1223 in `bad_limit_numbers_yaml` + > Resource 'Resource410' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource411` (AWS::SNS::Topic) → `Properties.Tags` L1225 in `bad_limit_numbers_yaml` + > Resource 'Resource411' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource412` (AWS::SNS::Topic) → `Properties.Tags` L1227 in `bad_limit_numbers_yaml` + > Resource 'Resource412' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource413` (AWS::SNS::Topic) → `Properties.Tags` L1229 in `bad_limit_numbers_yaml` + > Resource 'Resource413' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource414` (AWS::SNS::Topic) → `Properties.Tags` L1231 in `bad_limit_numbers_yaml` + > Resource 'Resource414' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource415` (AWS::SNS::Topic) → `Properties.Tags` L1233 in `bad_limit_numbers_yaml` + > Resource 'Resource415' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource416` (AWS::SNS::Topic) → `Properties.Tags` L1235 in `bad_limit_numbers_yaml` + > Resource 'Resource416' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource417` (AWS::SNS::Topic) → `Properties.Tags` L1237 in `bad_limit_numbers_yaml` + > Resource 'Resource417' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource418` (AWS::SNS::Topic) → `Properties.Tags` L1239 in `bad_limit_numbers_yaml` + > Resource 'Resource418' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource419` (AWS::SNS::Topic) → `Properties.Tags` L1241 in `bad_limit_numbers_yaml` + > Resource 'Resource419' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource42` (AWS::SNS::Topic) → `Properties.Tags` L487 in `bad_limit_numbers_yaml` + > Resource 'Resource42' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource420` (AWS::SNS::Topic) → `Properties.Tags` L1243 in `bad_limit_numbers_yaml` + > Resource 'Resource420' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource421` (AWS::SNS::Topic) → `Properties.Tags` L1245 in `bad_limit_numbers_yaml` + > Resource 'Resource421' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource422` (AWS::SNS::Topic) → `Properties.Tags` L1247 in `bad_limit_numbers_yaml` + > Resource 'Resource422' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource423` (AWS::SNS::Topic) → `Properties.Tags` L1249 in `bad_limit_numbers_yaml` + > Resource 'Resource423' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource424` (AWS::SNS::Topic) → `Properties.Tags` L1251 in `bad_limit_numbers_yaml` + > Resource 'Resource424' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource425` (AWS::SNS::Topic) → `Properties.Tags` L1253 in `bad_limit_numbers_yaml` + > Resource 'Resource425' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource426` (AWS::SNS::Topic) → `Properties.Tags` L1255 in `bad_limit_numbers_yaml` + > Resource 'Resource426' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource427` (AWS::SNS::Topic) → `Properties.Tags` L1257 in `bad_limit_numbers_yaml` + > Resource 'Resource427' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource428` (AWS::SNS::Topic) → `Properties.Tags` L1259 in `bad_limit_numbers_yaml` + > Resource 'Resource428' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource429` (AWS::SNS::Topic) → `Properties.Tags` L1261 in `bad_limit_numbers_yaml` + > Resource 'Resource429' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource43` (AWS::SNS::Topic) → `Properties.Tags` L489 in `bad_limit_numbers_yaml` + > Resource 'Resource43' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource430` (AWS::SNS::Topic) → `Properties.Tags` L1263 in `bad_limit_numbers_yaml` + > Resource 'Resource430' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource431` (AWS::SNS::Topic) → `Properties.Tags` L1265 in `bad_limit_numbers_yaml` + > Resource 'Resource431' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource432` (AWS::SNS::Topic) → `Properties.Tags` L1267 in `bad_limit_numbers_yaml` + > Resource 'Resource432' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource433` (AWS::SNS::Topic) → `Properties.Tags` L1269 in `bad_limit_numbers_yaml` + > Resource 'Resource433' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource434` (AWS::SNS::Topic) → `Properties.Tags` L1271 in `bad_limit_numbers_yaml` + > Resource 'Resource434' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource435` (AWS::SNS::Topic) → `Properties.Tags` L1273 in `bad_limit_numbers_yaml` + > Resource 'Resource435' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource436` (AWS::SNS::Topic) → `Properties.Tags` L1275 in `bad_limit_numbers_yaml` + > Resource 'Resource436' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource437` (AWS::SNS::Topic) → `Properties.Tags` L1277 in `bad_limit_numbers_yaml` + > Resource 'Resource437' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource438` (AWS::SNS::Topic) → `Properties.Tags` L1279 in `bad_limit_numbers_yaml` + > Resource 'Resource438' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource439` (AWS::SNS::Topic) → `Properties.Tags` L1281 in `bad_limit_numbers_yaml` + > Resource 'Resource439' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource44` (AWS::SNS::Topic) → `Properties.Tags` L491 in `bad_limit_numbers_yaml` + > Resource 'Resource44' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource440` (AWS::SNS::Topic) → `Properties.Tags` L1283 in `bad_limit_numbers_yaml` + > Resource 'Resource440' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource441` (AWS::SNS::Topic) → `Properties.Tags` L1285 in `bad_limit_numbers_yaml` + > Resource 'Resource441' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource442` (AWS::SNS::Topic) → `Properties.Tags` L1287 in `bad_limit_numbers_yaml` + > Resource 'Resource442' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource443` (AWS::SNS::Topic) → `Properties.Tags` L1289 in `bad_limit_numbers_yaml` + > Resource 'Resource443' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource444` (AWS::SNS::Topic) → `Properties.Tags` L1291 in `bad_limit_numbers_yaml` + > Resource 'Resource444' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource445` (AWS::SNS::Topic) → `Properties.Tags` L1293 in `bad_limit_numbers_yaml` + > Resource 'Resource445' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource446` (AWS::SNS::Topic) → `Properties.Tags` L1295 in `bad_limit_numbers_yaml` + > Resource 'Resource446' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource447` (AWS::SNS::Topic) → `Properties.Tags` L1297 in `bad_limit_numbers_yaml` + > Resource 'Resource447' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource448` (AWS::SNS::Topic) → `Properties.Tags` L1299 in `bad_limit_numbers_yaml` + > Resource 'Resource448' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource449` (AWS::SNS::Topic) → `Properties.Tags` L1301 in `bad_limit_numbers_yaml` + > Resource 'Resource449' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource45` (AWS::SNS::Topic) → `Properties.Tags` L493 in `bad_limit_numbers_yaml` + > Resource 'Resource45' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource450` (AWS::SNS::Topic) → `Properties.Tags` L1303 in `bad_limit_numbers_yaml` + > Resource 'Resource450' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource451` (AWS::SNS::Topic) → `Properties.Tags` L1305 in `bad_limit_numbers_yaml` + > Resource 'Resource451' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource452` (AWS::SNS::Topic) → `Properties.Tags` L1307 in `bad_limit_numbers_yaml` + > Resource 'Resource452' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource453` (AWS::SNS::Topic) → `Properties.Tags` L1309 in `bad_limit_numbers_yaml` + > Resource 'Resource453' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource454` (AWS::SNS::Topic) → `Properties.Tags` L1311 in `bad_limit_numbers_yaml` + > Resource 'Resource454' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource455` (AWS::SNS::Topic) → `Properties.Tags` L1313 in `bad_limit_numbers_yaml` + > Resource 'Resource455' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource456` (AWS::SNS::Topic) → `Properties.Tags` L1315 in `bad_limit_numbers_yaml` + > Resource 'Resource456' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource457` (AWS::SNS::Topic) → `Properties.Tags` L1317 in `bad_limit_numbers_yaml` + > Resource 'Resource457' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource458` (AWS::SNS::Topic) → `Properties.Tags` L1319 in `bad_limit_numbers_yaml` + > Resource 'Resource458' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource459` (AWS::SNS::Topic) → `Properties.Tags` L1321 in `bad_limit_numbers_yaml` + > Resource 'Resource459' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource46` (AWS::SNS::Topic) → `Properties.Tags` L495 in `bad_limit_numbers_yaml` + > Resource 'Resource46' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource460` (AWS::SNS::Topic) → `Properties.Tags` L1323 in `bad_limit_numbers_yaml` + > Resource 'Resource460' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource461` (AWS::SNS::Topic) → `Properties.Tags` L1325 in `bad_limit_numbers_yaml` + > Resource 'Resource461' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource462` (AWS::SNS::Topic) → `Properties.Tags` L1327 in `bad_limit_numbers_yaml` + > Resource 'Resource462' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource463` (AWS::SNS::Topic) → `Properties.Tags` L1329 in `bad_limit_numbers_yaml` + > Resource 'Resource463' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource464` (AWS::SNS::Topic) → `Properties.Tags` L1331 in `bad_limit_numbers_yaml` + > Resource 'Resource464' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource465` (AWS::SNS::Topic) → `Properties.Tags` L1333 in `bad_limit_numbers_yaml` + > Resource 'Resource465' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource466` (AWS::SNS::Topic) → `Properties.Tags` L1335 in `bad_limit_numbers_yaml` + > Resource 'Resource466' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource467` (AWS::SNS::Topic) → `Properties.Tags` L1337 in `bad_limit_numbers_yaml` + > Resource 'Resource467' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource468` (AWS::SNS::Topic) → `Properties.Tags` L1339 in `bad_limit_numbers_yaml` + > Resource 'Resource468' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource469` (AWS::SNS::Topic) → `Properties.Tags` L1341 in `bad_limit_numbers_yaml` + > Resource 'Resource469' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource47` (AWS::SNS::Topic) → `Properties.Tags` L497 in `bad_limit_numbers_yaml` + > Resource 'Resource47' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource470` (AWS::SNS::Topic) → `Properties.Tags` L1343 in `bad_limit_numbers_yaml` + > Resource 'Resource470' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource471` (AWS::SNS::Topic) → `Properties.Tags` L1345 in `bad_limit_numbers_yaml` + > Resource 'Resource471' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource472` (AWS::SNS::Topic) → `Properties.Tags` L1347 in `bad_limit_numbers_yaml` + > Resource 'Resource472' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource473` (AWS::SNS::Topic) → `Properties.Tags` L1349 in `bad_limit_numbers_yaml` + > Resource 'Resource473' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource474` (AWS::SNS::Topic) → `Properties.Tags` L1351 in `bad_limit_numbers_yaml` + > Resource 'Resource474' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource475` (AWS::SNS::Topic) → `Properties.Tags` L1353 in `bad_limit_numbers_yaml` + > Resource 'Resource475' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource476` (AWS::SNS::Topic) → `Properties.Tags` L1355 in `bad_limit_numbers_yaml` + > Resource 'Resource476' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource477` (AWS::SNS::Topic) → `Properties.Tags` L1357 in `bad_limit_numbers_yaml` + > Resource 'Resource477' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource478` (AWS::SNS::Topic) → `Properties.Tags` L1359 in `bad_limit_numbers_yaml` + > Resource 'Resource478' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource479` (AWS::SNS::Topic) → `Properties.Tags` L1361 in `bad_limit_numbers_yaml` + > Resource 'Resource479' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource48` (AWS::SNS::Topic) → `Properties.Tags` L499 in `bad_limit_numbers_yaml` + > Resource 'Resource48' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource480` (AWS::SNS::Topic) → `Properties.Tags` L1363 in `bad_limit_numbers_yaml` + > Resource 'Resource480' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource481` (AWS::SNS::Topic) → `Properties.Tags` L1365 in `bad_limit_numbers_yaml` + > Resource 'Resource481' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource482` (AWS::SNS::Topic) → `Properties.Tags` L1367 in `bad_limit_numbers_yaml` + > Resource 'Resource482' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource483` (AWS::SNS::Topic) → `Properties.Tags` L1369 in `bad_limit_numbers_yaml` + > Resource 'Resource483' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource484` (AWS::SNS::Topic) → `Properties.Tags` L1371 in `bad_limit_numbers_yaml` + > Resource 'Resource484' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource485` (AWS::SNS::Topic) → `Properties.Tags` L1373 in `bad_limit_numbers_yaml` + > Resource 'Resource485' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource486` (AWS::SNS::Topic) → `Properties.Tags` L1375 in `bad_limit_numbers_yaml` + > Resource 'Resource486' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource487` (AWS::SNS::Topic) → `Properties.Tags` L1377 in `bad_limit_numbers_yaml` + > Resource 'Resource487' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource488` (AWS::SNS::Topic) → `Properties.Tags` L1379 in `bad_limit_numbers_yaml` + > Resource 'Resource488' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource489` (AWS::SNS::Topic) → `Properties.Tags` L1381 in `bad_limit_numbers_yaml` + > Resource 'Resource489' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource49` (AWS::SNS::Topic) → `Properties.Tags` L501 in `bad_limit_numbers_yaml` + > Resource 'Resource49' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource490` (AWS::SNS::Topic) → `Properties.Tags` L1383 in `bad_limit_numbers_yaml` + > Resource 'Resource490' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource491` (AWS::SNS::Topic) → `Properties.Tags` L1385 in `bad_limit_numbers_yaml` + > Resource 'Resource491' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource492` (AWS::SNS::Topic) → `Properties.Tags` L1387 in `bad_limit_numbers_yaml` + > Resource 'Resource492' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource493` (AWS::SNS::Topic) → `Properties.Tags` L1389 in `bad_limit_numbers_yaml` + > Resource 'Resource493' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource494` (AWS::SNS::Topic) → `Properties.Tags` L1391 in `bad_limit_numbers_yaml` + > Resource 'Resource494' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource495` (AWS::SNS::Topic) → `Properties.Tags` L1393 in `bad_limit_numbers_yaml` + > Resource 'Resource495' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource496` (AWS::SNS::Topic) → `Properties.Tags` L1395 in `bad_limit_numbers_yaml` + > Resource 'Resource496' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource497` (AWS::SNS::Topic) → `Properties.Tags` L1397 in `bad_limit_numbers_yaml` + > Resource 'Resource497' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource498` (AWS::SNS::Topic) → `Properties.Tags` L1399 in `bad_limit_numbers_yaml` + > Resource 'Resource498' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource499` (AWS::SNS::Topic) → `Properties.Tags` L1401 in `bad_limit_numbers_yaml` + > Resource 'Resource499' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L413 in `bad_limit_numbers_yaml` + > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource50` (AWS::SNS::Topic) → `Properties.Tags` L503 in `bad_limit_numbers_yaml` + > Resource 'Resource50' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource500` (AWS::SNS::Topic) → `Properties.Tags` L1403 in `bad_limit_numbers_yaml` + > Resource 'Resource500' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource501` (AWS::SNS::Topic) → `Properties.Tags` L1405 in `bad_limit_numbers_yaml` + > Resource 'Resource501' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource51` (AWS::SNS::Topic) → `Properties.Tags` L505 in `bad_limit_numbers_yaml` + > Resource 'Resource51' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource52` (AWS::SNS::Topic) → `Properties.Tags` L507 in `bad_limit_numbers_yaml` + > Resource 'Resource52' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource53` (AWS::SNS::Topic) → `Properties.Tags` L509 in `bad_limit_numbers_yaml` + > Resource 'Resource53' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource54` (AWS::SNS::Topic) → `Properties.Tags` L511 in `bad_limit_numbers_yaml` + > Resource 'Resource54' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource55` (AWS::SNS::Topic) → `Properties.Tags` L513 in `bad_limit_numbers_yaml` + > Resource 'Resource55' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource56` (AWS::SNS::Topic) → `Properties.Tags` L515 in `bad_limit_numbers_yaml` + > Resource 'Resource56' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource57` (AWS::SNS::Topic) → `Properties.Tags` L517 in `bad_limit_numbers_yaml` + > Resource 'Resource57' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource58` (AWS::SNS::Topic) → `Properties.Tags` L519 in `bad_limit_numbers_yaml` + > Resource 'Resource58' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource59` (AWS::SNS::Topic) → `Properties.Tags` L521 in `bad_limit_numbers_yaml` + > Resource 'Resource59' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L415 in `bad_limit_numbers_yaml` + > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource60` (AWS::SNS::Topic) → `Properties.Tags` L523 in `bad_limit_numbers_yaml` + > Resource 'Resource60' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource61` (AWS::SNS::Topic) → `Properties.Tags` L525 in `bad_limit_numbers_yaml` + > Resource 'Resource61' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource62` (AWS::SNS::Topic) → `Properties.Tags` L527 in `bad_limit_numbers_yaml` + > Resource 'Resource62' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource63` (AWS::SNS::Topic) → `Properties.Tags` L529 in `bad_limit_numbers_yaml` + > Resource 'Resource63' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource64` (AWS::SNS::Topic) → `Properties.Tags` L531 in `bad_limit_numbers_yaml` + > Resource 'Resource64' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource65` (AWS::SNS::Topic) → `Properties.Tags` L533 in `bad_limit_numbers_yaml` + > Resource 'Resource65' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource66` (AWS::SNS::Topic) → `Properties.Tags` L535 in `bad_limit_numbers_yaml` + > Resource 'Resource66' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource67` (AWS::SNS::Topic) → `Properties.Tags` L537 in `bad_limit_numbers_yaml` + > Resource 'Resource67' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource68` (AWS::SNS::Topic) → `Properties.Tags` L539 in `bad_limit_numbers_yaml` + > Resource 'Resource68' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource69` (AWS::SNS::Topic) → `Properties.Tags` L541 in `bad_limit_numbers_yaml` + > Resource 'Resource69' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L417 in `bad_limit_numbers_yaml` + > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource70` (AWS::SNS::Topic) → `Properties.Tags` L543 in `bad_limit_numbers_yaml` + > Resource 'Resource70' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource71` (AWS::SNS::Topic) → `Properties.Tags` L545 in `bad_limit_numbers_yaml` + > Resource 'Resource71' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource72` (AWS::SNS::Topic) → `Properties.Tags` L547 in `bad_limit_numbers_yaml` + > Resource 'Resource72' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource73` (AWS::SNS::Topic) → `Properties.Tags` L549 in `bad_limit_numbers_yaml` + > Resource 'Resource73' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource74` (AWS::SNS::Topic) → `Properties.Tags` L551 in `bad_limit_numbers_yaml` + > Resource 'Resource74' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource75` (AWS::SNS::Topic) → `Properties.Tags` L553 in `bad_limit_numbers_yaml` + > Resource 'Resource75' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource76` (AWS::SNS::Topic) → `Properties.Tags` L555 in `bad_limit_numbers_yaml` + > Resource 'Resource76' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource77` (AWS::SNS::Topic) → `Properties.Tags` L557 in `bad_limit_numbers_yaml` + > Resource 'Resource77' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource78` (AWS::SNS::Topic) → `Properties.Tags` L559 in `bad_limit_numbers_yaml` + > Resource 'Resource78' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource79` (AWS::SNS::Topic) → `Properties.Tags` L561 in `bad_limit_numbers_yaml` + > Resource 'Resource79' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L419 in `bad_limit_numbers_yaml` + > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource80` (AWS::SNS::Topic) → `Properties.Tags` L563 in `bad_limit_numbers_yaml` + > Resource 'Resource80' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource81` (AWS::SNS::Topic) → `Properties.Tags` L565 in `bad_limit_numbers_yaml` + > Resource 'Resource81' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource82` (AWS::SNS::Topic) → `Properties.Tags` L567 in `bad_limit_numbers_yaml` + > Resource 'Resource82' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource83` (AWS::SNS::Topic) → `Properties.Tags` L569 in `bad_limit_numbers_yaml` + > Resource 'Resource83' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource84` (AWS::SNS::Topic) → `Properties.Tags` L571 in `bad_limit_numbers_yaml` + > Resource 'Resource84' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource85` (AWS::SNS::Topic) → `Properties.Tags` L573 in `bad_limit_numbers_yaml` + > Resource 'Resource85' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource86` (AWS::SNS::Topic) → `Properties.Tags` L575 in `bad_limit_numbers_yaml` + > Resource 'Resource86' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource87` (AWS::SNS::Topic) → `Properties.Tags` L577 in `bad_limit_numbers_yaml` + > Resource 'Resource87' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource88` (AWS::SNS::Topic) → `Properties.Tags` L579 in `bad_limit_numbers_yaml` + > Resource 'Resource88' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource89` (AWS::SNS::Topic) → `Properties.Tags` L581 in `bad_limit_numbers_yaml` + > Resource 'Resource89' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L421 in `bad_limit_numbers_yaml` + > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource90` (AWS::SNS::Topic) → `Properties.Tags` L583 in `bad_limit_numbers_yaml` + > Resource 'Resource90' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource91` (AWS::SNS::Topic) → `Properties.Tags` L585 in `bad_limit_numbers_yaml` + > Resource 'Resource91' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource92` (AWS::SNS::Topic) → `Properties.Tags` L587 in `bad_limit_numbers_yaml` + > Resource 'Resource92' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource93` (AWS::SNS::Topic) → `Properties.Tags` L589 in `bad_limit_numbers_yaml` + > Resource 'Resource93' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource94` (AWS::SNS::Topic) → `Properties.Tags` L591 in `bad_limit_numbers_yaml` + > Resource 'Resource94' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource95` (AWS::SNS::Topic) → `Properties.Tags` L593 in `bad_limit_numbers_yaml` + > Resource 'Resource95' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource96` (AWS::SNS::Topic) → `Properties.Tags` L595 in `bad_limit_numbers_yaml` + > Resource 'Resource96' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource97` (AWS::SNS::Topic) → `Properties.Tags` L597 in `bad_limit_numbers_yaml` + > Resource 'Resource97' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource98` (AWS::SNS::Topic) → `Properties.Tags` L599 in `bad_limit_numbers_yaml` + > Resource 'Resource98' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource99` (AWS::SNS::Topic) → `Properties.Tags` L601 in `bad_limit_numbers_yaml` + > Resource 'Resource99' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `bad_mappings_used_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SNSTopicWithSecretNameInRef` (AWS::SNS::Topic) → `Properties.Tags` L10 in `bad_noecho_yaml` + > Resource 'SNSTopicWithSecretNameInRef' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SNSTopicWithSecretNameInSub` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_noecho_yaml` + > Resource 'SNSTopicWithSecretNameInSub' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `BadDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L6 in `bad_opensearch_instance_type_yaml` + > Resource 'BadDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured +- **I9040** `ValidDomain` (AWS::OpenSearchService::Domain) → `Properties.Tags` L11 in `bad_opensearch_instance_type_yaml` + > Resource 'ValidDomain' of type 'AWS::OpenSearchService::Domain' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_references_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_output_invalid_targets_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L13 in `bad_output_value_not_string_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L17 in `bad_override_complete_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_complete_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L23 in `bad_override_complete_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `mySpotFleet` (AWS::EC2::SpotFleet) → `Properties.Tags` L20 in `bad_override_complete_yaml` + > Resource 'mySpotFleet' of type 'AWS::EC2::SpotFleet' supports Tags but none are configured +- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L13 in `bad_override_complete_yaml` + > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myGameLift` (AWS::GameLift::Alias) → `Properties.Tags` L8 in `bad_override_exclude_yaml` + > Resource 'myGameLift' of type 'AWS::GameLift::Alias' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L14 in `bad_override_exclude_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L16 in `bad_override_exclude_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_override_include_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L27 in `bad_override_include_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L8 in `bad_override_include_yaml` + > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_override_required_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L24 in `bad_param_constraints_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L62 in `bad_parameters_configuration_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `bad_pipeline_no_source_first_stage_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_previous_gen_instance_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `CacheCluster` (AWS::ElastiCache::CacheCluster) → `Properties.Tags` L15 in `bad_previous_generation_instances_yaml` + > Resource 'CacheCluster' of type 'AWS::ElastiCache::CacheCluster' supports Tags but none are configured +- **I9040** `DBInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L11 in `bad_previous_generation_instances_yaml` + > Resource 'DBInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Domain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L2 in `bad_previous_generation_instances_yaml` + > Resource 'Domain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `Domain2` (AWS::Elasticsearch::Domain) → `Properties.Tags` L21 in `bad_previous_generation_instances_yaml` + > Resource 'Domain2' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `Host` (AWS::EC2::Host) → `Properties.Tags` L26 in `bad_previous_generation_instances_yaml` + > Resource 'Host' of type 'AWS::EC2::Host' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_previous_generation_instances_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L8 in `bad_properties_ebs_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance3` (AWS::EC2::Instance) → `Properties.Tags` L31 in `bad_properties_ebs_yaml` + > Resource 'MyEC2Instance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_properties_password_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyNewDB` (AWS::RDS::DBInstance) → `Properties.Tags` L27 in `bad_properties_password_yaml` + > Resource 'MyNewDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L36 in `bad_properties_password_yaml` + > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L78 in `bad_properties_sg_ingress_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySecurityGroupNonVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L22 in `bad_properties_sg_ingress_yaml` + > Resource 'mySecurityGroupNonVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc` (AWS::EC2::SecurityGroup) → `Properties.Tags` L30 in `bad_properties_sg_ingress_yaml` + > Resource 'mySecurityGroupVpc' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` + > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `Db` (AWS::RDS::DBInstance) → `Properties.Tags` L7 in `bad_rds_dbinstanceclass_mixed_case_engine_yaml` + > Resource 'Db' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `bad_rds_public_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `IGW` (AWS::EC2::InternetGateway) → `Properties.Tags` L29 in `bad_redshift_internet_accessible_yaml` + > Resource 'IGW' of type 'AWS::EC2::InternetGateway' supports Tags but none are configured +- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `bad_redshift_internet_accessible_yaml` + > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured +- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `bad_redshift_internet_accessible_yaml` + > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `bad_redshift_internet_accessible_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_redshift_internet_accessible_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `AnotherInstance` (AWS::EC2::Instance) → `Properties.Tags` L25 in `bad_refs_yaml` + > Resource 'AnotherInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L6 in `bad_refs_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Policy` (AWS::KMS::Key) → `Properties.Tags` L5 in `bad_resource_policy_no_statement_yaml` + > Resource 'Policy' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L9 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource3` (AWS::SNS::Topic) → `Properties.Tags` L14 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource4` (AWS::SNS::Topic) → `Properties.Tags` L19 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource5` (AWS::SNS::Topic) → `Properties.Tags` L24 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource6` (AWS::SNS::Topic) → `Properties.Tags` L29 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource7` (AWS::SNS::Topic) → `Properties.Tags` L34 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource8` (AWS::SNS::Topic) → `Properties.Tags` L39 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource9` (AWS::SNS::Topic) → `Properties.Tags` L42 in `bad_resources_circular_dependency_2_yaml` + > Resource 'Resource9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource` (AWS::SNS::Topic) → `Properties.Tags` L4 in `bad_resources_circular_dependency_dependson_yaml` + > Resource 'Resource' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Resource2` (AWS::SNS::Topic) → `Properties.Tags` L7 in `bad_resources_circular_dependency_dependson_yaml` + > Resource 'Resource2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L65 in `bad_resources_circular_dependency_yaml` + > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L52 in `bad_resources_circular_dependency_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstanceSub` (AWS::EC2::Instance) → `Properties.Tags` L215 in `bad_resources_circular_dependency_yaml` + > Resource 'myInstanceSub' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myKms` (AWS::KMS::Key) → `Properties.Tags` L155 in `bad_resources_circular_dependency_yaml` + > Resource 'myKms' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `myRoleToWriteToS3` (AWS::IAM::Role) → `Properties.Tags` L99 in `bad_resources_circular_dependency_yaml` + > Resource 'myRoleToWriteToS3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L25 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L35 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `mySecurityGroupVpc3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L43 in `bad_resources_circular_dependency_yaml` + > Resource 'mySecurityGroupVpc3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `taskdefinition` (AWS::ECS::TaskDefinition) → `Properties.Tags` L222 in `bad_resources_circular_dependency_yaml` + > Resource 'taskdefinition' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L16 in `bad_resources_cloudformation_stacks_yaml` + > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `bad_resources_cloudformation_stacks_yaml` + > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `bad_resources_cloudfront_invalid_aliases_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `bad_resources_codepipeline_stages_second_stage_yaml` + > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_resources_creation_policy_unsupported_e3055_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_deletionpolicy_yaml` + > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_deletionpolicy_yaml` + > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_deletionpolicy_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_deletionpolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ConditionalGSI` (AWS::DynamoDB::Table) → `Properties.Tags` L22 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'ConditionalGSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ConditionalLSI` (AWS::DynamoDB::Table) → `Properties.Tags` L37 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'ConditionalLSI' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `MissingDefaultThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L12 in `bad_resources_dynamodb_conditional_scenarios_yaml` + > Resource 'MissingDefaultThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L23 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L82 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'DefaultValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitRemovedThenValue` (AWS::DynamoDB::Table) → `Properties.Tags` L61 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitRemovedThenValue' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ExplicitValueThenRemoved` (AWS::DynamoDB::Table) → `Properties.Tags` L50 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'ExplicitValueThenRemoved' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `NullThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L35 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` + > Resource 'NullThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_undefined_attribute_definition_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_1_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `bad_resources_dynamodb_unused_attribute_definition_2_yaml` + > Resource 'dynamoDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `InvalidDriverInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L36 in `bad_resources_ecs_fargate_conditional_properties_yaml` + > Resource 'InvalidDriverInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `PlacementInFargateBranch` (AWS::ECS::TaskDefinition) → `Properties.Tags` L15 in `bad_resources_ecs_fargate_conditional_properties_yaml` + > Resource 'PlacementInFargateBranch' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ConditionalEc2ThenFargateMissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L202 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'ConditionalEc2ThenFargateMissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ConditionalFargateThenEc2MissingNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L191 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'ConditionalFargateThenEc2MissingNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L133 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L161 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalMemory` (AWS::ECS::TaskDefinition) → `Properties.Tags` L147 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalMemory' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateConditionalPlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L175 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateConditionalPlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateInvalidCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L37 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateInvalidCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateMissingAll` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateMissingAll' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L87 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateNullCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L102 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargatePlacementConstraints` (AWS::ECS::TaskDefinition) → `Properties.Tags` L52 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargatePlacementConstraints' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateUnsupportedLogDriver` (AWS::ECS::TaskDefinition) → `Properties.Tags` L70 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateUnsupportedLogDriver' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateWrongNetworkMode` (AWS::ECS::TaskDefinition) → `Properties.Tags` L22 in `bad_resources_ecs_fargate_properties_e3048_yaml` + > Resource 'FargateWrongNetworkMode' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CpuInvalidThenValid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L98 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'CpuInvalidThenValid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CpuValidThenInvalid` (AWS::ECS::TaskDefinition) → `Properties.Tags` L111 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'CpuValidThenInvalid' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `EightVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L7 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'EightVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MalformedCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L59 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'MalformedCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `NonCanonicalCpuUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L72 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'NonCanonicalCpuUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `OverflowingMemoryUnits` (AWS::ECS::TaskDefinition) → `Properties.Tags` L85 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'OverflowingMemoryUnits' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `SixteenVcpuInvalidStep` (AWS::ECS::TaskDefinition) → `Properties.Tags` L20 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'SixteenVcpuInvalidStep' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ThirtyTwoVcpuUnsupportedSixtyFourGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L33 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'ThirtyTwoVcpuUnsupportedSixtyFourGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ThirtyTwoVcpuUnsupportedTwoFortyGb` (AWS::ECS::TaskDefinition) → `Properties.Tags` L46 in `bad_resources_ecs_fargate_task_sizes_e3047_yaml` + > Resource 'ThirtyTwoVcpuUnsupportedTwoFortyGb' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L36 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FourtReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L91 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FourtReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L20 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L28 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L12 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L55 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L74 in `bad_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `RoleConditionalPolicies` (AWS::IAM::Role) → `Properties.Tags` L18 in `bad_resources_iam_iam_policy_conditional_policies_yaml` + > Resource 'RoleConditionalPolicies' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RoleNotActionConditional` (AWS::IAM::Role) → `Properties.Tags` L53 in `bad_resources_iam_iam_policy_conditional_policies_yaml` + > Resource 'RoleNotActionConditional' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIamRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `bad_resources_iam_iam_policy_yaml` + > Resource 'rIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PermissionSetBadPolicy` (AWS::SSO::PermissionSet) → `Properties.Tags` L88 in `bad_resources_iam_identity_policy_e3510_yaml` + > Resource 'PermissionSetBadPolicy' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured +- **I9040** `UserInlinePolicy` (AWS::IAM::User) → `Properties.Tags` L101 in `bad_resources_iam_identity_policy_e3510_yaml` + > Resource 'UserInlinePolicy' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `bad_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `ecr1` (AWS::ECR::Repository) → `Properties.Tags` L6 in `bad_resources_iam_resource_policy_yaml` + > Resource 'ecr1' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `ecr2` (AWS::ECR::Repository) → `Properties.Tags` L19 in `bad_resources_iam_resource_policy_yaml` + > Resource 'ecr2' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `myLambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L8 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myLambdaFunction2` (AWS::Lambda::Function) → `Properties.Tags` L18 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myLambdaFunction3` (AWS::Lambda::Function) → `Properties.Tags` L28 in `bad_resources_lambda_function_property_value_limits_yaml` + > Resource 'myLambdaFunction3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_resources_lambda_required_properties_yaml` + > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `my.Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_resources_name_yaml` + > Resource 'my.Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `my_Instance` (AWS::EC2::Instance) → `Properties.Tags` L9 in `bad_resources_name_yaml` + > Resource 'my_Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L142 in `bad_resources_primary_identifiers_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L149 in `bad_resources_primary_identifiers_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Project1` (AWS::CodeBuild::Project) → `Properties.Tags` L167 in `bad_resources_primary_identifiers_yaml` + > Resource 'Project1' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `Project2` (AWS::CodeBuild::Project) → `Properties.Tags` L187 in `bad_resources_primary_identifiers_yaml` + > Resource 'Project2' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole2` (AWS::IAM::Role) → `Properties.Tags` L29 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L52 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L75 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole5` (AWS::IAM::Role) → `Properties.Tags` L98 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole6` (AWS::IAM::Role) → `Properties.Tags` L120 in `bad_resources_primary_identifiers_yaml` + > Resource 'RootRole6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ExampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_primitive_types_map_yaml` + > Resource 'ExampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ExampleLambda1` (AWS::Lambda::Function) → `Properties.Tags` L23 in `bad_resources_properties_primitive_types_map_yaml` + > Resource 'ExampleLambda1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L14 in `bad_resources_properties_string_size_yaml` + > Resource 'CloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `bad_resources_properties_string_size_yaml` + > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `myRepository2` (AWS::CodeCommit::Repository) → `Properties.Tags` L10 in `bad_resources_properties_string_size_yaml` + > Resource 'myRepository2' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `SampleLambda` (AWS::Lambda::Function) → `Properties.Tags` L6 in `bad_resources_properties_templated_code_yaml` + > Resource 'SampleLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L25 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance7` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance7' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance8` (AWS::RDS::DBInstance) → `Properties.Tags` L51 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance8' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance9` (AWS::RDS::DBInstance) → `Properties.Tags` L58 in `bad_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance9' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBCluster) → `Properties.Tags` L5 in `bad_resources_rds_not_enum_master_username_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L10 in `bad_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L6 in `bad_resources_sns_topic_name_yaml` + > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Name` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_resources_uniqueNames_yaml` + > Resource 'Name' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `MyBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_resources_update_policy_unsupported_e3016_yaml` + > Resource 'MyBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `InvalidMapping` (AWS::RDS::DBInstance) → `Properties.Tags` L40 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'InvalidMapping' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MadeUpPolicy` (AWS::RDS::DBInstance) → `Properties.Tags` L20 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'MadeUpPolicy' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L27 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L13 in `bad_resources_updatereplacepolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_s3_tiering_bad_days_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Cluster` (AWS::SageMaker::Cluster) → `Properties.Tags` L44 in `bad_sagemaker_instance_types_yaml` + > Resource 'Cluster' of type 'AWS::SageMaker::Cluster' supports Tags but none are configured +- **I9040** `InferenceExperiment` (AWS::SageMaker::InferenceExperiment) → `Properties.Tags` L22 in `bad_sagemaker_instance_types_yaml` + > Resource 'InferenceExperiment' of type 'AWS::SageMaker::InferenceExperiment' supports Tags but none are configured +- **I9040** `ModelPackage` (AWS::SageMaker::ModelPackage) → `Properties.Tags` L34 in `bad_sagemaker_instance_types_yaml` + > Resource 'ModelPackage' of type 'AWS::SageMaker::ModelPackage' supports Tags but none are configured +- **I9040** `ModelQualityJobDefinition` (AWS::SageMaker::ModelQualityJobDefinition) → `Properties.Tags` L14 in `bad_sagemaker_instance_types_yaml` + > Resource 'ModelQualityJobDefinition' of type 'AWS::SageMaker::ModelQualityJobDefinition' supports Tags but none are configured +- **I9040** `MonitoringSchedule` (AWS::SageMaker::MonitoringSchedule) → `Properties.Tags` L6 in `bad_sagemaker_instance_types_yaml` + > Resource 'MonitoringSchedule' of type 'AWS::SageMaker::MonitoringSchedule' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_bogus_name_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `bad_sam_transform_wrong_date_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_additional_props_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NoAZ` (AWS::EC2::Volume) → `Properties.Tags` L13 in `bad_schema_composition_yaml` + > Resource 'NoAZ' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `NoImage` (AWS::AppStream::ImageBuilder) → `Properties.Tags` L6 in `bad_schema_composition_yaml` + > Resource 'NoImage' of type 'AWS::AppStream::ImageBuilder' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L11 in `bad_schema_conditional_type_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_enum_violation_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `bad_schema_format_violation_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `DeprecatedLambda` (AWS::Lambda::Function) → `Properties.Tags` L36 in `bad_schema_lifecycle_yaml` + > Resource 'DeprecatedLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EolLambda` (AWS::Lambda::Function) → `Properties.Tags` L25 in `bad_schema_lifecycle_yaml` + > Resource 'EolLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SunsetResource` (AWS::AppMesh::Mesh) → `Properties.Tags` L12 in `bad_schema_lifecycle_yaml` + > Resource 'SunsetResource' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_schema_numeric_bounds_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DeprecatedProp` (AWS::Athena::WorkGroup) → `Properties.Tags` L21 in `bad_schema_property_constraints_yaml` + > Resource 'DeprecatedProp' of type 'AWS::Athena::WorkGroup' supports Tags but none are configured +- **I9040** `PatternBucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_property_constraints_yaml` + > Resource 'PatternBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Lambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `bad_schema_string_length_yaml` + > Resource 'Lambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AlarmBothStats` (AWS::CloudWatch::Alarm) → `Properties.Tags` L6 in `bad_schema_structural_yaml` + > Resource 'AlarmBothStats' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `SubnetNoCidr` (AWS::EC2::Subnet) → `Properties.Tags` L19 in `bad_schema_structural_yaml` + > Resource 'SubnetNoCidr' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_schema_type_mismatch_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_security_issues_yaml` + > Resource 'OpenSSH' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_bad_port_range_yaml` + > Resource 'SG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenSG` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `bad_sg_open_egress_yaml` + > Resource 'OpenSG' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_simple_sub_param_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L5 in `bad_sns_cross_account_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `bad_some_logs_stream_lambda_yaml` + > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `bad_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L80 in `bad_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_no_suffix_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DLQ` (AWS::SQS::Queue) → `Properties.Tags` L5 in `bad_sqs_fifo_standard_dlq_yaml` + > Resource 'DLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `MainQueue` (AWS::SQS::Queue) → `Properties.Tags` L9 in `bad_sqs_fifo_standard_dlq_yaml` + > Resource 'MainQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `bad_ssm_document_invalid_yaml` + > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_bad_start_at_yaml` + > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachine` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `bad_stepfunctions_invalid_state_yaml` + > Resource 'StateMachine' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `bad_sub_needed_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `bad_sub_nested_intrinsic_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `OtherBucket` (AWS::S3::Bucket) → `Properties.Tags` L7 in `bad_sub_nested_intrinsic_yaml` + > Resource 'OtherBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubnetOutside` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_outside_vpc_yaml` + > Resource 'SubnetOutside' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_outside_vpc_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L14 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetC` (AWS::EC2::Subnet) → `Properties.Tags` L26 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetC' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetD` (AWS::EC2::Subnet) → `Properties.Tags` L32 in `bad_subnet_overlap_multi_yaml` + > Resource 'SubnetD' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `bad_subnet_overlap_multi_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `bad_subnet_overlap_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `bad_subnet_overlap_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L5 in `bad_subnet_overlap_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L3 in `bad_undefined_condition_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L9 in `bad_unknown_properties_yaml` + > Resource 'BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AppFunction` (AWS::Lambda::Function) → `Properties.Tags` L52 in `cdk_DemoStack.template_json` + > Resource 'AppFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AppRole` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_DemoStack.template_json` + > Resource 'AppRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L94 in `cdk_DemoStack.template_json` + > Resource 'AppSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DataBucket` (AWS::S3::Bucket) → `Properties.Tags` L40 in `cdk_DemoStack.template_json` + > Resource 'DataBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DataTable` (AWS::DynamoDB::Table) → `Properties.Tags` L72 in `cdk_DemoStack.template_json` + > Resource 'DataTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `QueueMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L126 in `cdk_DemoStack.template_json` + > Resource 'QueueMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `TaskQueue` (AWS::SQS::Queue) → `Properties.Tags` L117 in `cdk_DemoStack.template_json` + > Resource 'TaskQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `AdminSecretB9452750` (AWS::SecretsManager::Secret) → `Properties.Tags` L5 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'AdminSecretB9452750' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured +- **I9040** `ConsumerLambdaLogGroupD33C6265` (AWS::Logs::LogGroup) → `Properties.Tags` L68 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'ConsumerLambdaLogGroupD33C6265' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `RabbitMqBrokerE7F26F68` (AWS::AmazonMQ::Broker) → `Properties.Tags` L22 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'RabbitMqBrokerE7F26F68' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionBD0C2D50` (AWS::Lambda::Function) → `Properties.Tags` L165 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionBD0C2D50' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L201 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1CA0799D4' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` (AWS::IAM::Role) → `Properties.Tags` L615 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` (AWS::Lambda::Function) → `Properties.Tags` L732 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` (AWS::Lambda::Function) → `Properties.Tags` L561 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` (AWS::IAM::Role) → `Properties.Tags` L437 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` (AWS::Lambda::Function) → `Properties.Tags` L900 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` (AWS::IAM::Role) → `Properties.Tags` L783 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1036 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` (AWS::IAM::Role) → `Properties.Tags` L951 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLamb +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` (AWS::Lambda::Function) → `Properties.Tags` L402 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A` (AWS::IAM::Role) → `Properties.Tags` L344 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteServiceRole046BF68A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` (AWS::Lambda::Function) → `Properties.Tags` L309 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54` (AWS::IAM::Role) → `Properties.Tags` L229 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventServiceRole606F1C54' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `consumerlambdaFunctionServiceRole095C1C28` (AWS::IAM::Role) → `Properties.Tags` L80 in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json` + > Resource 'consumerlambdaFunctionServiceRole095C1C28' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MasterBranch` (AWS::Amplify::Branch) → `Properties.Tags` L16 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Resource 'MasterBranch' of type 'AWS::Amplify::Branch' supports Tags but none are configured +- **I9040** `testapp` (AWS::Amplify::App) → `Properties.Tags` L5 in `cdk_amplify-console-app--AmplifyConsoleApp.template_json` + > Resource 'testapp' of type 'AWS::Amplify::App' supports Tags but none are configured +- **I9040** `createItemFunction8D47E48A` (AWS::Lambda::Function) → `Properties.Tags` L379 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'createItemFunction8D47E48A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `createItemFunctionServiceRole1BBF2178` (AWS::IAM::Role) → `Properties.Tags` L288 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'createItemFunctionServiceRole1BBF2178' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `deleteItemFunction2918B1B0` (AWS::Lambda::Function) → `Properties.Tags` L635 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'deleteItemFunction2918B1B0' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `deleteItemFunctionServiceRole5C201FCC` (AWS::IAM::Role) → `Properties.Tags` L544 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'deleteItemFunctionServiceRole5C201FCC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `getAllItemsFunction0B7A913E` (AWS::Lambda::Function) → `Properties.Tags` L251 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getAllItemsFunction0B7A913E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `getAllItemsFunctionServiceRoleCC084440` (AWS::IAM::Role) → `Properties.Tags` L160 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getAllItemsFunctionServiceRoleCC084440' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `getOneItemFunctionE3257B22` (AWS::Lambda::Function) → `Properties.Tags` L123 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getOneItemFunctionE3257B22' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `getOneItemFunctionServiceRoleCFD54796` (AWS::IAM::Role) → `Properties.Tags` L32 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'getOneItemFunctionServiceRoleCFD54796' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `items07D08F4B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'items07D08F4B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemsApi28111E1C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L672 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApi28111E1C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `itemsApiCloudWatchRoleB5C7B431` (AWS::IAM::Role) → `Properties.Tags` L681 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApiCloudWatchRoleB5C7B431' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemsApiDeploymentStageprodE77B897D` (AWS::ApiGateway::Stage) → `Properties.Tags` L760 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'itemsApiDeploymentStageprodE77B897D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `updateItemFunction59415205` (AWS::Lambda::Function) → `Properties.Tags` L507 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'updateItemFunction59415205' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `updateItemFunctionServiceRole40035396` (AWS::IAM::Role) → `Properties.Tags` L416 in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json` + > Resource 'updateItemFunctionServiceRole40035396' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayDynamoRole447127F0` (AWS::IAM::Role) → `Properties.Tags` L511 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'ApiGatewayDynamoRole447127F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigw3449931B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L164 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigw3449931B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwCloudWatchRoleC01BF930` (AWS::IAM::Role) → `Properties.Tags` L173 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwCloudWatchRoleC01BF930' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwDeploymentStageprodAE3424CD` (AWS::ApiGateway::Stage) → `Properties.Tags` L247 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwDeploymentStageprodAE3424CD' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `apigwasynclambdaapigwloggroup1E36CCD4` (AWS::Logs::LogGroup) → `Properties.Tags` L153 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdaapigwloggroup1E36CCD4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `apigwasynclambdafnAD6250E4` (AWS::Lambda::Function) → `Properties.Tags` L112 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnAD6250E4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `apigwasynclambdafnServiceRole607675A2` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnServiceRole607675A2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `apigwasynclambdafnloggroup3D262524` (AWS::Logs::LogGroup) → `Properties.Tags` L32 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdafnloggroup3D262524' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `apigwasynclambdatable1075CD30` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json` + > Resource 'apigwasynclambdatable1075CD30' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L178 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L101 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `authenticationlambdaDD3A2252` (AWS::Lambda::Function) → `Properties.Tags` L242 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'authenticationlambdaDD3A2252' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `authenticationlambdaServiceRole9798A92B` (AWS::IAM::Role) → `Properties.Tags` L208 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'authenticationlambdaServiceRole9798A92B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `operationallambdaFE43E13E` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'operationallambdaFE43E13E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `operationallambdaServiceRole14B56EA5` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'operationallambdaServiceRole14B56EA5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `restapigatewayDeploymentStagedevB80C9CD7` (AWS::ApiGateway::Stage) → `Properties.Tags` L447 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'restapigatewayDeploymentStagedevB80C9CD7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `restapigatewayE22E31C5` (AWS::ApiGateway::RestApi) → `Properties.Tags` L420 in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json` + > Resource 'restapigatewayE22E31C5' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L272 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L211 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction1A09FC241` (AWS::Lambda::Function) → `Properties.Tags` L111 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1A09FC241' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunction1SecurityGroupF7DF9E6F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L86 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1SecurityGroupF7DF9E6F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdafunction1ServiceRoleA9EAFFE5` (AWS::IAM::Role) → `Properties.Tags` L37 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction1ServiceRoleA9EAFFE5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction2F899168D` (AWS::Lambda::Function) → `Properties.Tags` L376 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2F899168D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunction2SecurityGroup7268045A` (AWS::EC2::SecurityGroup) → `Properties.Tags` L351 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2SecurityGroup7268045A' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `lambdafunction2ServiceRole380A1BE9` (AWS::IAM::Role) → `Properties.Tags` L302 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'lambdafunction2ServiceRole380A1BE9' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapi4C7BF186` (AWS::ApiGateway::RestApi) → `Properties.Tags` L658 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapi4C7BF186' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `myapiANYStartSyncExecutionRole7935C5BB` (AWS::IAM::Role) → `Properties.Tags` L759 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiANYStartSyncExecutionRole7935C5BB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapiCloudWatchRole095452E5` (AWS::IAM::Role) → `Properties.Tags` L668 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiCloudWatchRole095452E5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myapiDeploymentStagedevB1704B15` (AWS::ApiGateway::Stage) → `Properties.Tags` L741 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'myapiDeploymentStagedevB1704B15' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `mystatemachine15ECA539` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L592 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'mystatemachine15ECA539' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `mystatemachineRole70AA91FD` (AWS::IAM::Role) → `Properties.Tags` L487 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'mystatemachineRole70AA91FD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'nestedstacklambdaNestedStacknestedstacklambdaNestedStackResource113B56AF' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `stepfunctionsloggroup6EBF6C71` (AWS::Logs::LogGroup) → `Properties.Tags` L476 in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json` + > Resource 'stepfunctionsloggroup6EBF6C71' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `chatappapi` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L5 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapi' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `chatappapiiamrole2977C2A3` (AWS::IAM::Role) → `Properties.Tags` L440 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapiiamrole2977C2A3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `chatappapistage` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L690 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapistage' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `chatappapitable5244EF8B` (AWS::DynamoDB::Table) → `Properties.Tags` L16 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'chatappapitable5244EF8B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `connectlambdaFFAE59F3` (AWS::Lambda::Function) → `Properties.Tags` L134 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'connectlambdaFFAE59F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `connectlambdaServiceRole04DCF570` (AWS::IAM::Role) → `Properties.Tags` L43 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'connectlambdaServiceRole04DCF570' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `disconnectlambdaAC22A441` (AWS::Lambda::Function) → `Properties.Tags` L261 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'disconnectlambdaAC22A441' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `disconnectlambdaServiceRole2779F08C` (AWS::IAM::Role) → `Properties.Tags` L170 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'disconnectlambdaServiceRole2779F08C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `messagelambda16C1C2A3` (AWS::Lambda::Function) → `Properties.Tags` L404 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'messagelambda16C1C2A3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `messagelambdaServiceRole544EC18A` (AWS::IAM::Role) → `Properties.Tags` L297 in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json` + > Resource 'messagelambdaServiceRole544EC18A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L697 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LBListener49E825B4` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L780 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBListener49E825B4' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `LBListenerTargetGroupF04FCF6D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L801 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBListenerTargetGroupF04FCF6D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L735 in `cdk_application-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CarApiCarsDataSourceServiceRole82F3FC8A` (AWS::IAM::Role) → `Properties.Tags` L107 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiCarsDataSourceServiceRole82F3FC8A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CarApiDefectsDataSourceServiceRole7EDF6907` (AWS::IAM::Role) → `Properties.Tags` L197 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiDefectsDataSourceServiceRole7EDF6907' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CarApiE5E7ACF5` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L81 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarApiE5E7ACF5' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `CarTableA597893A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'CarTableA597893A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefectsTable2A57950B` (AWS::DynamoDB::Table) → `Properties.Tags` L32 in `cdk_appsync-graphql-dynamodb--CdkAppsyncDemoStack.template_json` + > Resource 'DefectsTable2A57950B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `AppSync2EventBridgeApi` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSync2EventBridgeApi' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `AppSyncEventBridgeRle2A25B9B1` (AWS::Events::Rule) → `Properties.Tags` L211 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSyncEventBridgeRle2A25B9B1' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `AppSyncEventBridgeRoleE2F34FE0` (AWS::IAM::Role) → `Properties.Tags` L44 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'AppSyncEventBridgeRoleE2F34FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `echoFunction5207BE9B` (AWS::Lambda::Function) → `Properties.Tags` L189 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'echoFunction5207BE9B' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `echoFunctionServiceRole1EBD6DF0` (AWS::IAM::Role) → `Properties.Tags` L155 in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json` + > Resource 'echoFunctionServiceRole1EBD6DF0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PostsApiCdk` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L5 in `cdk_appsync-graphql-http--AppSyncGraphQLHTTPExample.template_json` + > Resource 'PostsApiCdk' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `Construct1FunctionWithReservedCEs6458B719` (AWS::Lambda::Function) → `Properties.Tags` L95 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1FunctionWithReservedCEs6458B719' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct1FunctionWithReservedCEsServiceRole21C8F977` (AWS::IAM::Role) → `Properties.Tags` L61 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1FunctionWithReservedCEsServiceRole21C8F977' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct1StandardFunctionD5361E84` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1StandardFunctionD5361E84' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct1StandardFunctionServiceRole716388BA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct1StandardFunctionServiceRole716388BA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct2FunctionWithReservedCEs89864BB2` (AWS::Lambda::Function) → `Properties.Tags` L209 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2FunctionWithReservedCEs89864BB2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct2FunctionWithReservedCEsServiceRoleB80261C4` (AWS::IAM::Role) → `Properties.Tags` L175 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2FunctionWithReservedCEsServiceRoleB80261C4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Construct2StandardFunction1EBDBFFA` (AWS::Lambda::Function) → `Properties.Tags` L152 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2StandardFunction1EBDBFFA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Construct2StandardFunctionServiceRole450FEF35` (AWS::IAM::Role) → `Properties.Tags` L118 in `cdk_aspects--SampleStack.template_json` + > Resource 'Construct2StandardFunctionServiceRole450FEF35' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IncomingDataBucket3554D835` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_aws-transfer-sftp-server--IncomingDataStack-dev.template_json` + > Resource 'IncomingDataBucket3554D835' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured +- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured +- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-dev.template_json` + > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AlarmMetricFilter9DBA3966` (AWS::CloudWatch::Alarm) → `Properties.Tags` L659 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'AlarmMetricFilter9DBA3966' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchLoggingRole8E23D1D4` (AWS::IAM::Role) → `Properties.Tags` L351 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'CloudWatchLoggingRole8E23D1D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SFTPServer` (AWS::Transfer::Server) → `Properties.Tags` L452 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SFTPServer' of type 'AWS::Transfer::Server' supports Tags but none are configured +- **I9040** `SFTPUser` (AWS::Transfer::User) → `Properties.Tags` L605 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SFTPUser' of type 'AWS::Transfer::User' supports Tags but none are configured +- **I9040** `SftpAccessRoleBDBB5CE1` (AWS::IAM::Role) → `Properties.Tags` L554 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpAccessRoleBDBB5CE1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SftpEIP1` (AWS::EC2::EIP) → `Properties.Tags` L434 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpEIP1' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpEIP2` (AWS::EC2::EIP) → `Properties.Tags` L443 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpEIP2' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `SftpLogGroupC79A244B` (AWS::Logs::LogGroup) → `Properties.Tags` L580 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpLogGroupC79A244B' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SftpServerSG79C38856` (AWS::EC2::SecurityGroup) → `Properties.Tags` L403 in `cdk_aws-transfer-sftp-server--SftpServerStack-prod.template_json` + > Resource 'SftpServerSG79C38856' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Role1ABCC5F0` (AWS::IAM::Role) → `Properties.Tags` L89 in `cdk_backup-s3--AwsBackupS3Stack.template_json` + > Resource 'Role1ABCC5F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchInstanceRole8DB66C4C` (AWS::IAM::Role) → `Properties.Tags` L620 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchInstanceRole8DB66C4C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchJobRole37A83758` (AWS::IAM::Role) → `Properties.Tags` L815 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchJobRole37A83758' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BatchSecurityGroup77EC865F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L567 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchSecurityGroup77EC865F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `BatchServiceRole57930367` (AWS::IAM::Role) → `Properties.Tags` L586 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'BatchServiceRole57930367' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L537 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L465 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionFAE645C8` (AWS::Lambda::Function) → `Properties.Tags` L1034 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionFAE645C8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionLogGroupF7938D09` (AWS::Logs::LogGroup) → `Properties.Tags` L1083 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionLogGroupF7938D09' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `JobSubmitterFunctionServiceRole55AD6E92` (AWS::IAM::Role) → `Properties.Tags` L972 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'JobSubmitterFunctionServiceRole55AD6E92' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `OpenMPComputeEnvironment` (AWS::Batch::ComputeEnvironment) → `Properties.Tags` L747 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPComputeEnvironment' of type 'AWS::Batch::ComputeEnvironment' supports Tags but none are configured +- **I9040** `OpenMPJobDefinition` (AWS::Batch::JobDefinition) → `Properties.Tags` L861 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPJobDefinition' of type 'AWS::Batch::JobDefinition' supports Tags but none are configured +- **I9040** `OpenMPJobQueue` (AWS::Batch::JobQueue) → `Properties.Tags` L797 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPJobQueue' of type 'AWS::Batch::JobQueue' supports Tags but none are configured +- **I9040** `OpenMPLogGroup95FEB040` (AWS::Logs::LogGroup) → `Properties.Tags` L849 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPLogGroup95FEB040' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `OpenMPRepositoryAB8BB3BC` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json` + > Resource 'OpenMPRepositoryAB8BB3BC' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `LB8A12904C` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L665 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Resource 'LB8A12904C' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `LBSecurityGroup8A41EA2B` (AWS::EC2::SecurityGroup) → `Properties.Tags` L620 in `cdk_classic-load-balancer--LoadBalancerStack.template_json` + > Resource 'LBSecurityGroup8A41EA2B' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L336 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RequestFunction0B9B463A` (AWS::CloudFront::Function) → `Properties.Tags` L387 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'RequestFunction0B9B463A' of type 'AWS::CloudFront::Function' supports Tags but none are configured +- **I9040** `ResponseFunctionB78A69CA` (AWS::CloudFront::Function) → `Properties.Tags` L402 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'ResponseFunctionB78A69CA' of type 'AWS::CloudFront::Function' supports Tags but none are configured +- **I9040** `SiteDistribution3FF9535D` (AWS::CloudFront::Distribution) → `Properties.Tags` L428 in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json` + > Resource 'SiteDistribution3FF9535D' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L1066 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2` (AWS::IAM::Role) → `Properties.Tags` L1032 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BlueTargetGroupF108EB01` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1640 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BlueTargetGroupF108EB01' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `BuildDeployPipeline5EEC284B` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L2293 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipeline5EEC284B' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `BuildDeployPipelineArtifactsBucket5D4A76C1` (AWS::S3::Bucket) → `Properties.Tags` L2090 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineArtifactsBucket5D4A76C1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8` (AWS::KMS::Key) → `Properties.Tags` L2035 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineArtifactsBucketEncryptionKey8AB5ABF8' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965` (AWS::IAM::Role) → `Properties.Tags` L2708 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineBuildDockerBuildPushCodePipelineActionRole760EF965' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB` (AWS::IAM::Role) → `Properties.Tags` L2766 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineDeployEcsFargateDeployCodePipelineActionRole054540AB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineEventsRoleDE5B0F8F` (AWS::IAM::Role) → `Properties.Tags` L2584 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineEventsRoleDE5B0F8F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineRole3223E55F` (AWS::IAM::Role) → `Properties.Tags` L2171 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineRole3223E55F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0` (AWS::IAM::Role) → `Properties.Tags` L2471 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineSourceAppCodeCommitCodePipelineActionRoleB9EB8BA0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1` (AWS::IAM::Role) → `Properties.Tags` L2650 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildDeployPipelineTestJestCDKCodePipelineActionRoleFA2BA8B1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildImage74257FD8` (AWS::CodeBuild::Project) → `Properties.Tags` L481 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildImage74257FD8' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `BuildImageRoleA9C72406` (AWS::IAM::Role) → `Properties.Tags` L265 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildImageRoleA9C72406' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildLambda72E2A667` (AWS::Lambda::Function) → `Properties.Tags` L919 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildLambda72E2A667' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BuildLambdaServiceRole8FB6C033` (AWS::IAM::Role) → `Properties.Tags` L856 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildLambdaServiceRole8FB6C033' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BuildTestC9659529` (AWS::CodeBuild::Project) → `Properties.Tags` L813 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildTestC9659529' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `BuildTestRoleC332A422` (AWS::IAM::Role) → `Properties.Tags` L627 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'BuildTestRoleC332A422' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeDeployGroup58220FC8` (AWS::CodeDeploy::DeploymentGroup) → `Properties.Tags` L1950 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroup58220FC8' of type 'AWS::CodeDeploy::DeploymentGroup' supports Tags but none are configured +- **I9040** `CodeDeployGroupApplication13EFBDA6` (AWS::CodeDeploy::Application) → `Properties.Tags` L1941 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroupApplication13EFBDA6' of type 'AWS::CodeDeploy::Application' supports Tags but none are configured +- **I9040** `CodeDeployGroupServiceRole50553EBF` (AWS::IAM::Role) → `Properties.Tags` L1907 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'CodeDeployGroupServiceRole50553EBF' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L1767 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L1791 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1852 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateTaskDefC6FB60B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L119 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefC6FB60B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateTaskDefExecutionRole272677A9` (AWS::IAM::Role) → `Properties.Tags` L207 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefExecutionRole272677A9' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskDefTaskRole0B257552` (AWS::IAM::Role) → `Properties.Tags` L99 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'FargateTaskDefTaskRole0B257552' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `GreenTargetGroupEEB2DF3E` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L1661 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'GreenTargetGroupEEB2DF3E' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `PublicAlb84330974` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L1710 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'PublicAlb84330974' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `PublicAlbAlbListener804C1B2779` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L1748 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'PublicAlbAlbListener804C1B2779' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1682 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `imageRepo1D8A68AF` (AWS::ECR::Repository) → `Properties.Tags` L89 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'imageRepo1D8A68AF' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `repoBEC318EA` (AWS::CodeCommit::Repository) → `Properties.Tags` L5 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'repoBEC318EA' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0` (AWS::Events::Rule) → `Properties.Tags` L23 in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json` + > Resource 'repoCodepipelineBuildDeployStackBuildDeployPipeline2B279CCCmainEventRule3F24D1E0' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `helloWorldFunction00C940B5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldFunction00C940B5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `helloWorldFunctionServiceRole8475DBF0` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldFunctionServiceRole8475DBF0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApi6825FB98` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApi6825FB98' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApiCloudWatchRole22367FBD` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApiCloudWatchRole22367FBD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `helloWorldLambdaRestApiDeploymentStageprod67DD79AF` (AWS::ApiGateway::Stage) → `Properties.Tags` L148 in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json` + > Resource 'helloWorldLambdaRestApiDeploymentStageprod67DD79AF' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `MyBucketF68F3FF0` (AWS::S3::Bucket) → `Properties.Tags` L9 in `cdk_custom-logical-names--MyStack.template_json` + > Resource 'MyBucketF68F3FF0' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyTopic86869434` (AWS::SNS::Topic) → `Properties.Tags` L3 in `cdk_custom-logical-names--MyStack.template_json` + > Resource 'MyTopic86869434' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DemoResourceProviderframeworkonEventF8E49AD2` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceProviderframeworkonEventF8E49AD2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DemoResourceProviderframeworkonEventServiceRoleDB88154F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceProviderframeworkonEventServiceRoleDB88154F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L190 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L156 in `cdk_custom-resource--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DemoResourceMyProviderframeworkonEvent65F24A35` (AWS::Lambda::Function) → `Properties.Tags` L94 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceMyProviderframeworkonEvent65F24A35' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DemoResourceMyProviderframeworkonEventServiceRole1437DF1C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'DemoResourceMyProviderframeworkonEventServiceRole1437DF1C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L300 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L239 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` (AWS::Lambda::Function) → `Properties.Tags` L216 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04` (AWS::IAM::Role) → `Properties.Tags` L182 in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json` + > Resource 'SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebcServiceRoleFE9ABB04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ddbstreaml2dlq5966ED66` (AWS::SQS::Queue) → `Properties.Tags` L67 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'ddbstreaml2dlq5966ED66' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `ddbstreamtopic7821AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'ddbstreamtopic7821AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `itemL2TableBAC64D83` (AWS::DynamoDB::Table) → `Properties.Tags` L80 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableBAC64D83' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunction1987B4C5` (AWS::Lambda::Function) → `Properties.Tags` L206 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunction1987B4C5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L246 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL2Table0234427734A22B95' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `itemL2TableLambdaFunctionServiceRole41583A05` (AWS::IAM::Role) → `Properties.Tags` L109 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL2TableLambdaFunctionServiceRole41583A05' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemL3TableDynamoTable6BC36F24` (AWS::DynamoDB::Table) → `Properties.Tags` L499 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableDynamoTable6BC36F24' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunction7B818C58` (AWS::Lambda::Function) → `Properties.Tags` L412 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunction7B818C58' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L467 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunctionDynamoDBEventSourceDdbStreamStackitemL3TableDynamoTableF17D6710E0C1078B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `itemL3TableLambdaFunctionServiceRoleBA21B37D` (AWS::IAM::Role) → `Properties.Tags` L278 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableLambdaFunctionServiceRoleBA21B37D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `itemL3TableSqsDlqQueueD3C251B9` (AWS::SQS::Queue) → `Properties.Tags` L536 in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json` + > Resource 'itemL3TableSqsDlqQueueD3C251B9' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` (AWS::Lambda::Function) → `Properties.Tags` L911 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1` (AWS::IAM::Role) → `Properties.Tags` L788 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiBServiceRoleBA21DBC1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L747 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L722 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EC2ec2InstanceSecurityGroupD268D496` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'EC2ec2InstanceSecurityGroupD268D496' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `EC2serverEc2Role6775A3D4` (AWS::IAM::Role) → `Properties.Tags` L405 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'EC2serverEc2Role6775A3D4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `VPCSSHSecurityGroup0495A24F` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_ec2-instance--EC2Example.template_json` + > Resource 'VPCSSHSecurityGroup0495A24F' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkisCompleteB1442B18` (AWS::Lambda::Function) → `Properties.Tags` L748 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkisCompleteB1442B18' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51` (AWS::IAM::Role) → `Properties.Tags` L631 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkisCompleteServiceRole0E0A4C51' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonEventB48896C9` (AWS::Lambda::Function) → `Properties.Tags` L577 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonEventB48896C9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonEventServiceRoleC0D29A73` (AWS::IAM::Role) → `Properties.Tags` L453 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonEventServiceRoleC0D29A73' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonTimeout83318112` (AWS::Lambda::Function) → `Properties.Tags` L916 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonTimeout83318112' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointProviderframeworkonTimeoutServiceRole904320AB` (AWS::IAM::Role) → `Properties.Tags` L799 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderframeworkonTimeoutServiceRole904320AB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointProviderwaiterstatemachine1A139B58` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1052 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderwaiterstatemachine1A139B58' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `EICEndpointProviderwaiterstatemachineRole5E284D23` (AWS::IAM::Role) → `Properties.Tags` L967 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointProviderwaiterstatemachineRole5E284D23' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointRole7DC4D43E` (AWS::IAM::Role) → `Properties.Tags` L291 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointRole7DC4D43E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EICEndpointisCompleteHandler0273707A` (AWS::Lambda::Function) → `Properties.Tags` L425 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointisCompleteHandler0273707A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EICEndpointonEventHandlerC2E1F5F2` (AWS::Lambda::Function) → `Properties.Tags` L397 in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json` + > Resource 'EICEndpointonEventHandlerC2E1F5F2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AsgCapacityProvider760D11D9` (AWS::ECS::CapacityProvider) → `Properties.Tags` L689 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Resource 'AsgCapacityProvider760D11D9' of type 'AWS::ECS::CapacityProvider' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L664 in `cdk_ecs-cluster--MyFirstEcsCluster.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-cross-stack-load-balancer--CrossStackLBInfra.template_json` + > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-LBStack.template_json` + > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Listener828B0E81` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L191 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'Listener828B0E81' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `ListenerECSGroup2EA4A011` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L212 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ListenerECSGroup2EA4A011' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L121 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LoadBalancerBE9EEC3A` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerBE9EEC3A' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LoadBalancerListenerE1A099B9` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L58 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerListenerE1A099B9' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `LoadBalancerSecurityGroupA28D6DD7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L37 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'LoadBalancerSecurityGroupA28D6DD7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L79 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-LBStack.template_json` + > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L60 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `ServiceSecurityGroupC96ED6A7` (AWS::EC2::SecurityGroup) → `Properties.Tags` L119 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'ServiceSecurityGroupC96ED6A7' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L25 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_ecs-cross-stack-load-balancer--SplitAtTargetGroup-ServiceStack.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Ec2Service04A33183` (AWS::ECS::Service) → `Properties.Tags` L1111 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'Ec2Service04A33183' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L1049 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L1059 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `awsvpcecsdemoclusterA7FD8C86` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'awsvpcecsdemoclusterA7FD8C86' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `awsvpcecsdemoserviceServiceFC4BE5C7` (AWS::ECS::Service) → `Properties.Tags` L1078 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'awsvpcecsdemoserviceServiceFC4BE5C7' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `nginx76230F353007` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1048 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginx76230F353007' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `nginxawspvcB396AC00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginxawspvcB396AC00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `nginxawspvcTaskRole3F43A26E` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json` + > Resource 'nginxawspvcTaskRole3F43A26E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcsCluster97242B84` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'EcsCluster97242B84' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ServiceD69D759B` (AWS::ECS::Service) → `Properties.Tags` L1040 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'ServiceD69D759B' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef54694570` (AWS::ECS::TaskDefinition) → `Properties.Tags` L1006 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'TaskDef54694570' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefTaskRole1EDB4A67` (AWS::IAM::Role) → `Properties.Tags` L986 in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json` + > Resource 'TaskDefTaskRole1EDB4A67' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'ClusterEB0386A7' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceECC8084D` (AWS::ECS::Service) → `Properties.Tags` L727 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceECC8084D' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceLBB353E155` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBB353E155' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `FargateServiceLBPublicListener4B4929CA` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L554 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBPublicListener4B4929CA' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `FargateServiceLBPublicListenerECSGroupBE57E081` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L575 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBPublicListenerECSGroupBE57E081' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `FargateServiceLBSecurityGroup5F444C78` (AWS::EC2::SecurityGroup) → `Properties.Tags` L509 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceLBSecurityGroup5F444C78' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup262B61DD` (AWS::EC2::SecurityGroup) → `Properties.Tags` L788 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceSecurityGroup262B61DD' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `FargateServiceTaskDef940E3A80` (AWS::ECS::TaskDefinition) → `Properties.Tags` L615 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDef940E3A80' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefExecutionRole9194820E` (AWS::IAM::Role) → `Properties.Tags` L675 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefExecutionRole9194820E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefTaskRole8CDCF85E` (AWS::IAM::Role) → `Properties.Tags` L595 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefTaskRole8CDCF85E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateServiceTaskDefwebLogGroup71FAF541` (AWS::Logs::LogGroup) → `Properties.Tags` L665 in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json` + > Resource 'FargateServiceTaskDefwebLogGroup71FAF541' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `fargateserviceautoscalingD107CF93` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'fargateserviceautoscalingD107CF93' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `sampleappLBBDE1D276` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBBDE1D276' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `sampleappLBPublicListenerC4DF6480` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L501 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBPublicListenerC4DF6480' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `sampleappLBPublicListenerECSGroup525A567D` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L522 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappLBPublicListenerECSGroup525A567D' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `sampleappServiceE7504FDB` (AWS::ECS::Service) → `Properties.Tags` L668 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappServiceE7504FDB' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `sampleappServiceSecurityGroup0ABF0D21` (AWS::EC2::SecurityGroup) → `Properties.Tags` L729 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappServiceSecurityGroup0ABF0D21' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sampleappTaskDef6BF75736` (AWS::ECS::TaskDefinition) → `Properties.Tags` L556 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDef6BF75736' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `sampleappTaskDefExecutionRoleAD6F4C40` (AWS::IAM::Role) → `Properties.Tags` L616 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefExecutionRoleAD6F4C40' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sampleappTaskDefTaskRoleB530CAC0` (AWS::IAM::Role) → `Properties.Tags` L536 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefTaskRoleB530CAC0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sampleappTaskDefwebLogGroup34BE8C79` (AWS::Logs::LogGroup) → `Properties.Tags` L606 in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json` + > Resource 'sampleappTaskDefwebLogGroup34BE8C79' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L463 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateServiceAC2B3B85` (AWS::ECS::Service) → `Properties.Tags` L597 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'FargateServiceAC2B3B85' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FargateServiceSecurityGroup0A0E79CB` (AWS::EC2::SecurityGroup) → `Properties.Tags` L646 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'FargateServiceSecurityGroup0A0E79CB' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionAppContainerLogGroupA24DD1B6` (AWS::Logs::LogGroup) → `Properties.Tags` L535 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionAppContainerLogGroupA24DD1B6' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyTaskDefinitionExecutionRole3D88C23D` (AWS::IAM::Role) → `Properties.Tags` L545 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionExecutionRole3D88C23D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyTaskDefinitionF5B350B4` (AWS::ECS::TaskDefinition) → `Properties.Tags` L491 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionF5B350B4' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyTaskDefinitionTaskRole93FBB305` (AWS::IAM::Role) → `Properties.Tags` L471 in `cdk_ecs-fargate-service-with-logging--Willkommen.template_json` + > Resource 'MyTaskDefinitionTaskRole93FBB305' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L118 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L87 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L29 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TopicBFC7AF6E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json` + > Resource 'TopicBFC7AF6E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ProxyAPI32755B5A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L5 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPI32755B5A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ProxyAPICloudWatchRoleB8A087D1` (AWS::IAM::Role) → `Properties.Tags` L19 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPICloudWatchRoleB8A087D1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ProxyAPIDeploymentStageprodBE6BE99F` (AWS::ApiGateway::Stage) → `Properties.Tags` L92 in `cdk_http-proxy-apigateway--HttpProxy.template_json` + > Resource 'ProxyAPIDeploymentStageprodBE6BE99F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `AmazonLinux2023WithGitPipeline` (AWS::ImageBuilder::ImagePipeline) → `Properties.Tags` L220 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'AmazonLinux2023WithGitPipeline' of type 'AWS::ImageBuilder::ImagePipeline' supports Tags but none are configured +- **I9040** `AmazonLinux2023withGitAndNodeRecipe` (AWS::ImageBuilder::ContainerRecipe) → `Properties.Tags` L49 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'AmazonLinux2023withGitAndNodeRecipe' of type 'AWS::ImageBuilder::ContainerRecipe' supports Tags but none are configured +- **I9040** `DockerComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L29 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'DockerComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `EC2InstanceProfileForImageBuilderA043DE9F` (AWS::IAM::Role) → `Properties.Tags` L105 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'EC2InstanceProfileForImageBuilderA043DE9F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcrRepoForImageBuilderCodeCatalystBF634BA6` (AWS::ECR::Repository) → `Properties.Tags` L39 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'EcrRepoForImageBuilderCodeCatalystBF634BA6' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `GitComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L5 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'GitComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `ImageBuilderDistConfig` (AWS::ImageBuilder::DistributionConfiguration) → `Properties.Tags` L196 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'ImageBuilderDistConfig' of type 'AWS::ImageBuilder::DistributionConfiguration' supports Tags but none are configured +- **I9040** `ImageBuilderInfraConfig` (AWS::ImageBuilder::InfrastructureConfiguration) → `Properties.Tags` L184 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'ImageBuilderInfraConfig' of type 'AWS::ImageBuilder::InfrastructureConfiguration' supports Tags but none are configured +- **I9040** `NodejsComponenet` (AWS::ImageBuilder::Component) → `Properties.Tags` L17 in `cdk_imagebuilder--ImagebuilderStack.template_json` + > Resource 'NodejsComponenet' of type 'AWS::ImageBuilder::Component' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L212 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableDelegatedAdminResourceRoleC8FD65F6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606` (AWS::IAM::Role) → `Properties.Tags` L52 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'Inspector2EnableDelegatedAdminAccountResourceInspector2EnableResourceInspectorRole00253606' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L329 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` (AWS::Lambda::Function) → `Properties.Tags` L71 in `cdk_inspector2--Inspector2EnableStack.template_json` + > Resource 'AWS679f53fac002430cb0da5b7982bd22872D164C4C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `EnableInspector2ResourceInspectorRole75753456` (AWS::IAM::Role) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2EnableStack.template_json` + > Resource 'EnableInspector2ResourceInspectorRole75753456' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2FindingHandler1F85FFBC` (AWS::Lambda::Function) → `Properties.Tags` L330 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2FindingHandler1F85FFBC' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2FindingHandlerServiceRoleCEDAFBC1` (AWS::IAM::Role) → `Properties.Tags` L296 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2FindingHandlerServiceRoleCEDAFBC1' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2InitialScanHandler460C9991` (AWS::Lambda::Function) → `Properties.Tags` L150 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2InitialScanHandler460C9991' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Inspector2InitialScanHandlerServiceRoleA1739B7A` (AWS::IAM::Role) → `Properties.Tags` L116 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2InitialScanHandlerServiceRoleA1739B7A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Inspector2MonitoringfindingScanRuleC84833CE` (AWS::Events::Rule) → `Properties.Tags` L61 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2MonitoringfindingScanRuleC84833CE' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Inspector2MonitoringinitialScanRule902E013C` (AWS::Events::Rule) → `Properties.Tags` L6 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'Inspector2MonitoringinitialScanRule902E013C' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L266 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_inspector2--Inspector2MonitoringStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L219 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L158 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleLambdaB2FF4FA1` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaB2FF4FA1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SampleLambdaDashboard39118496` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L94 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaDashboard39118496' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured +- **I9040** `SampleLambdaServiceRoleB1A8618F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json` + > Resource 'SampleLambdaServiceRoleB1A8618F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_lambda-cron--LambdaCronExample.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionBF21E41F` (AWS::Lambda::Function) → `Properties.Tags` L62 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Resource 'LambdaFunctionBF21E41F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionServiceRoleC555A460` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_lambda-layer--LambdaLayerStack.template_json` + > Resource 'LambdaFunctionServiceRoleC555A460' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleQueue49AAAEFF` (AWS::SQS::Queue) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--AStack.template_json` + > Resource 'SampleQueue49AAAEFF' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SampleTopic5FE9B5DC` (AWS::SNS::Topic) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--BStack.template_json` + > Resource 'SampleTopic5FE9B5DC' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `S3EventNotificationsLambda20F17D80` (AWS::Lambda::Function) → `Properties.Tags` L80 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'S3EventNotificationsLambda20F17D80' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `S3EventNotificationsLambdaServiceRoleD45D5063` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'S3EventNotificationsLambdaServiceRoleD45D5063' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleBucket7F6F8160` (AWS::S3::Bucket) → `Properties.Tags` L4 in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json` + > Resource 'SampleBucket7F6F8160' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `WidgetsWidgetHandler1BC9DB34` (AWS::Lambda::Function) → `Properties.Tags` L103 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetHandler1BC9DB34' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `WidgetsWidgetHandlerServiceRole8C2B589C` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetHandlerServiceRole8C2B589C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WidgetsWidgetStore0ED7FDB7` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetsWidgetStore0ED7FDB7' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Widgetswidgetsapi72353315` (AWS::ApiGateway::RestApi) → `Properties.Tags` L139 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'Widgetswidgetsapi72353315' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `WidgetswidgetsapiCloudWatchRole8C2A5801` (AWS::IAM::Role) → `Properties.Tags` L149 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetswidgetsapiCloudWatchRole8C2A5801' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WidgetswidgetsapiDeploymentStageprod0D8CD1B7` (AWS::ApiGateway::Stage) → `Properties.Tags` L224 in `cdk_my-widget-service--MyWidgetServiceStack.template_json` + > Resource 'WidgetswidgetsapiDeploymentStageprod0D8CD1B7' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` (AWS::SQS::Queue) → `Properties.Tags` L86 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `BigFanTopicStatusCreatedSubscriberQueue589E974E` (AWS::SQS::Queue) → `Properties.Tags` L14 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'BigFanTopicStatusCreatedSubscriberQueue589E974E' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L716 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandler4037E293' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB` (AWS::IAM::Role) → `Properties.Tags` L308 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerServiceRole395E81EB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L437 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSAnyOtherStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicAnyOtherStatusSubscriberQueue08FB964013A92B5B' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none +- **I9040** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` (AWS::Lambda::Function) → `Properties.Tags` L231 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandler0467DB95' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A` (AWS::IAM::Role) → `Properties.Tags` L162 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandlerServiceRole36576A8A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L291 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'SQSCreatedStatusSubscribeLambdaHandlerSqsEventSourceTheBigFanStackBigFanTopicStatusCreatedSubscriberQueueF8927E4802E7770C' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none ar +- **I9040** `theBigFanAPI6E21715A` (AWS::ApiGateway::RestApi) → `Properties.Tags` L454 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPI6E21715A' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `theBigFanAPICloudWatchRoleD603B41E` (AWS::IAM::Role) → `Properties.Tags` L463 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPICloudWatchRoleD603B41E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `theBigFanAPIDeploymentStageprod1F15C9DC` (AWS::ApiGateway::Stage) → `Properties.Tags` L532 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanAPIDeploymentStageprod1F15C9DC' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `theBigFanTopicF96567DE` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-big-fan--TheBigFanStack.template_json` + > Resource 'theBigFanTopicF96567DE' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `APIGateway4XXErrors1647FE3DB` (AWS::CloudWatch::Alarm) → `Properties.Tags` L285 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIGateway4XXErrors1647FE3DB' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `APIGateway5XXErrors0A91D7B4E` (AWS::CloudWatch::Alarm) → `Properties.Tags` L354 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIGateway5XXErrors0A91D7B4E' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `APIp99latencyalarm1s67095ACE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L385 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'APIp99latencyalarm1s67095ACE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudWatchDashBoard043C60B6` (AWS::CloudWatch::Dashboard) → `Properties.Tags` L900 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'CloudWatchDashBoard043C60B6' of type 'AWS::CloudWatch::Dashboard' supports Tags but none are configured +- **I9040** `DynamoDBErrors0FA6C66C9` (AWS::CloudWatch::Alarm) → `Properties.Tags` L641 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoDBErrors0FA6C66C9' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoDBTableReadsWritesThrottled13F6F2AE` (AWS::CloudWatch::Alarm) → `Properties.Tags` L576 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoDBTableReadsWritesThrottled13F6F2AE' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambda2ErrorDE3BEB2F` (AWS::CloudWatch::Alarm) → `Properties.Tags` L416 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambda2ErrorDE3BEB2F' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambda2Throttled090CFA4C` (AWS::CloudWatch::Alarm) → `Properties.Tags` L511 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambda2Throttled090CFA4C' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L28 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoLambdap99LongDuration1s739ED568` (AWS::CloudWatch::Alarm) → `Properties.Tags` L481 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'DynamoLambdap99LongDuration1s739ED568' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `HttpAPI8D545486` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L174 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HttpAPI8D545486' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `HttpAPIDefaultStage1BC7D78F` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L266 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'HttpAPIDefaultStage1BC7D78F' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `errorTopicE59AB483` (AWS::SNS::Topic) → `Properties.Tags` L277 in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json` + > Resource 'errorTopicE59AB483' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ApiGatewaySnsRole904B65D6` (AWS::IAM::Role) → `Properties.Tags` L777 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'ApiGatewaySnsRole904B65D6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DestinedEventBus14820B65` (AWS::Events::EventBus) → `Properties.Tags` L5 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'DestinedEventBus14820B65' of type 'AWS::Events::EventBus' supports Tags but none are configured +- **I9040** `FailureLambdaHandlerBB58C051` (AWS::Lambda::Function) → `Properties.Tags` L400 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'FailureLambdaHandlerBB58C051' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FailureLambdaHandlerServiceRole7E0414CB` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'FailureLambdaHandlerServiceRole7E0414CB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SuccessLambdaHandler0E2CD797` (AWS::Lambda::Function) → `Properties.Tags` L243 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'SuccessLambdaHandler0E2CD797' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SuccessLambdaHandlerServiceRole77BD70C4` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'SuccessLambdaHandlerServiceRole77BD70C4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `destinedLambda8DF776BB` (AWS::Lambda::Function) → `Properties.Tags` L81 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'destinedLambda8DF776BB' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `destinedLambdaServiceRole87608B6F` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'destinedLambdaServiceRole87608B6F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `failureRule10D0B2E4` (AWS::Events::Rule) → `Properties.Tags` L460 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'failureRule10D0B2E4' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `successRuleE9E88056` (AWS::Events::Rule) → `Properties.Tags` L303 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'successRuleE9E88056' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPIBAB2789B` (AWS::ApiGateway::RestApi) → `Properties.Tags` L515 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPIBAB2789B' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPICloudWatchRoleCDF408DA` (AWS::IAM::Role) → `Properties.Tags` L524 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPICloudWatchRoleCDF408DA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `theDestinedLambdaAPIDeploymentStageprodD67BDFB2` (AWS::ApiGateway::Stage) → `Properties.Tags` L593 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaAPIDeploymentStageprodD67BDFB2' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `theDestinedLambdaTopic8F2C8FB6` (AWS::SNS::Topic) → `Properties.Tags` L14 in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json` + > Resource 'theDestinedLambdaTopic8F2C8FB6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DefaultLambdaHanderRoleA44A3BA8` (AWS::IAM::Role) → `Properties.Tags` L444 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DefaultLambdaHanderRoleA44A3BA8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoStreamerAPICA573C81` (AWS::ApiGateway::RestApi) → `Properties.Tags` L185 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPICA573C81' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `DynamoStreamerAPICloudWatchRoleEF2543E3` (AWS::IAM::Role) → `Properties.Tags` L194 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPICloudWatchRoleEF2543E3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoStreamerAPIDeploymentStageprod0700648B` (AWS::ApiGateway::Stage) → `Properties.Tags` L263 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'DynamoStreamerAPIDeploymentStageprod0700648B' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `TheDynamoStreamer641C5E5B` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'TheDynamoStreamer641C5E5B' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerD2AAE139` (AWS::Lambda::Function) → `Properties.Tags` L106 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerD2AAE139' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L166 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerDynamoDBEventSourceTheDynamoStreamerStackTheDynamoStreamerB472C427C1D10245' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47` (AWS::IAM::Role) → `Properties.Tags` L34 in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json` + > Resource 'dynamoStreamSubscriberLambdaHandlerServiceRole70DB8A47' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L581 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L649 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L572 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaC3C4DA46` (AWS::Lambda::Function) → `Properties.Tags` L157 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaC3C4DA46' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaRuleC1D6BC2F` (AWS::Events::Rule) → `Properties.Tags` L216 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaRuleC1D6BC2F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer1LambdaServiceRole70132707` (AWS::IAM::Role) → `Properties.Tags` L123 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer1LambdaServiceRole70132707' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaB7E263A7` (AWS::Lambda::Function) → `Properties.Tags` L306 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaB7E263A7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaRule5894DC8E` (AWS::Events::Rule) → `Properties.Tags` L365 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaRule5894DC8E' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer2LambdaServiceRole130B888D` (AWS::IAM::Role) → `Properties.Tags` L272 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer2LambdaServiceRole130B888D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmConsumer3Lambda880BEEDF` (AWS::Lambda::Function) → `Properties.Tags` L456 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3Lambda880BEEDF' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmConsumer3LambdaRule41A00643` (AWS::Events::Rule) → `Properties.Tags` L515 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3LambdaRule41A00643' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `atmConsumer3LambdaServiceRoleCF9BAEA7` (AWS::IAM::Role) → `Properties.Tags` L422 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmConsumer3LambdaServiceRoleCF9BAEA7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `atmProducerLambda71029F8F` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmProducerLambda71029F8F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `atmProducerLambdaServiceRoleEF3D6079` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json` + > Resource 'atmProducerLambdaServiceRoleEF3D6079' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CircuitBreaker4FAEA3DB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreaker4FAEA3DB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGateway::RestApi) → `Properties.Tags` L436 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayCloudWatchRole934DF897` (AWS::IAM::Role) → `Properties.Tags` L445 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayCloudWatchRole934DF897' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayDeploymentStageprod84F6B9E5` (AWS::ApiGateway::Stage) → `Properties.Tags` L513 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayDeploymentStageprod84F6B9E5' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `ErrorLambdaHandler4224322A` (AWS::Lambda::Function) → `Properties.Tags` L312 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'ErrorLambdaHandler4224322A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ErrorLambdaHandlerServiceRole5D9F8D61` (AWS::IAM::Role) → `Properties.Tags` L228 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'ErrorLambdaHandlerServiceRole5D9F8D61' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WebserviceIntegrationLambdaHandler5E349AB7` (AWS::Lambda::Function) → `Properties.Tags` L160 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'WebserviceIntegrationLambdaHandler5E349AB7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `WebserviceIntegrationLambdaHandlerServiceRole851361F8` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'WebserviceIntegrationLambdaHandlerServiceRole851361F8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `webserviceErrorRuleCE293636` (AWS::Events::Rule) → `Properties.Tags` L380 in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json` + > Resource 'webserviceErrorRuleCE293636' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Ec2ClusterEE43E89D` (AWS::ECS::Cluster) → `Properties.Tags` L662 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'Ec2ClusterEE43E89D' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateTaskDefinition8E3B365E` (AWS::ECS::TaskDefinition) → `Properties.Tags` L744 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinition8E3B365E' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionAppContainerLogGroup20407D7C` (AWS::Logs::LogGroup) → `Properties.Tags` L820 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionAppContainerLogGroup20407D7C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionExecutionRoleE69A8E33` (AWS::IAM::Role) → `Properties.Tags` L831 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionExecutionRoleE69A8E33' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskDefinitionTaskRoleE3C2BCAA` (AWS::IAM::Role) → `Properties.Tags` L670 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'FargateTaskDefinitionTaskRoleE3C2BCAA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LandingBucket23FE90FB` (AWS::S3::Bucket) → `Properties.Tags` L29 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LandingBucket23FE90FB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LoadLambdaHandlerFDA03D53` (AWS::Lambda::Function) → `Properties.Tags` L1380 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LoadLambdaHandlerFDA03D53' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LoadLambdaHandlerServiceRole83E61748` (AWS::IAM::Role) → `Properties.Tags` L1296 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'LoadLambdaHandlerServiceRole83E61748' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ObserveLambdaHandler685FFDBB` (AWS::Lambda::Function) → `Properties.Tags` L1539 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'ObserveLambdaHandler685FFDBB' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ObserveLambdaHandlerServiceRole040C69BA` (AWS::IAM::Role) → `Properties.Tags` L1505 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'ObserveLambdaHandlerServiceRole040C69BA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TransformLambdaHandler60ABE8EE` (AWS::Lambda::Function) → `Properties.Tags` L1178 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformLambdaHandler60ABE8EE' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TransformLambdaHandlerServiceRole710C039E` (AWS::IAM::Role) → `Properties.Tags` L1120 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformLambdaHandlerServiceRole710C039E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TransformedDataB0572681` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'TransformedDataB0572681' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `extractLambdaHandlerD06B8F09` (AWS::Lambda::Function) → `Properties.Tags` L1015 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerD06B8F09' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `extractLambdaHandlerServiceRole8A50F829` (AWS::IAM::Role) → `Properties.Tags` L916 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerServiceRole8A50F829' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L1103 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'extractLambdaHandlerSqsEventSourceTheEventbridgeEtlStacknewObjectInLandingBucketEventQueueA6103BFC894EEFC5' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `loadRuleF0FAF418` (AWS::Events::Rule) → `Properties.Tags` L1449 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'loadRuleF0FAF418' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `newObjectInLandingBucketEventQueue67CBE2F2` (AWS::SQS::Queue) → `Properties.Tags` L75 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'newObjectInLandingBucketEventQueue67CBE2F2' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `observeRule9CF2E16C` (AWS::Events::Rule) → `Properties.Tags` L1599 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'observeRule9CF2E16C' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `transformRuleFEA34632` (AWS::Events::Rule) → `Properties.Tags` L1240 in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json` + > Resource 'transformRuleFEA34632' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `CircuitBreakerGateway122B123C` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGateway122B123C' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `CircuitBreakerGatewayDefaultStageC51956FB` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerGatewayDefaultStageC51956FB' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `CircuitBreakerTable02DAD2B8` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'CircuitBreakerTable02DAD2B8' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `UnreliableLambdaHandlerD4A4DED9` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'UnreliableLambdaHandlerD4A4DED9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `UnreliableLambdaHandlerServiceRole955A5CFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json` + > Resource 'UnreliableLambdaHandlerServiceRole955A5CFD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BookingSagaFA991213` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L1337 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingSagaFA991213' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `BookingSagaRole82982544` (AWS::IAM::Role) → `Properties.Tags` L1207 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingSagaRole82982544' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BookingsB1C24132` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'BookingsB1C24132' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `SagaPatternSingleTable288D85B3` (AWS::ApiGateway::RestApi) → `Properties.Tags` L1554 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTable288D85B3' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `SagaPatternSingleTableCloudWatchRole130684F0` (AWS::IAM::Role) → `Properties.Tags` L1563 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTableCloudWatchRole130684F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SagaPatternSingleTableDeploymentStageprod92F0690D` (AWS::ApiGateway::Stage) → `Properties.Tags` L1631 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'SagaPatternSingleTableDeploymentStageprod92F0690D' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `cancelFlightLambdaHandler437EEC76` (AWS::Lambda::Function) → `Properties.Tags` L410 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelFlightLambdaHandler437EEC76' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `cancelFlightLambdaHandlerServiceRole7F2439CB` (AWS::IAM::Role) → `Properties.Tags` L331 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelFlightLambdaHandlerServiceRole7F2439CB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `cancelHotelLambdaHandler09F13EF6` (AWS::Lambda::Function) → `Properties.Tags` L848 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelHotelLambdaHandler09F13EF6' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `cancelHotelLambdaHandlerServiceRole4815D152` (AWS::IAM::Role) → `Properties.Tags` L769 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'cancelHotelLambdaHandlerServiceRole4815D152' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `confirmFlightLambdaHandler96C3663F` (AWS::Lambda::Function) → `Properties.Tags` L264 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmFlightLambdaHandler96C3663F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `confirmFlightLambdaHandlerServiceRole45F91B6E` (AWS::IAM::Role) → `Properties.Tags` L185 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmFlightLambdaHandlerServiceRole45F91B6E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `confirmHotelLambdaHandler882ACF2D` (AWS::Lambda::Function) → `Properties.Tags` L702 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmHotelLambdaHandler882ACF2D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `confirmHotelLambdaHandlerServiceRoleD5F8F90E` (AWS::IAM::Role) → `Properties.Tags` L623 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'confirmHotelLambdaHandlerServiceRoleD5F8F90E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `refundPaymentLambdaHandler932D11D5` (AWS::Lambda::Function) → `Properties.Tags` L1140 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'refundPaymentLambdaHandler932D11D5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `refundPaymentLambdaHandlerServiceRole62F72F0D` (AWS::IAM::Role) → `Properties.Tags` L1061 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'refundPaymentLambdaHandlerServiceRole62F72F0D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `reserveFlightLambdaHandler3C75473D` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveFlightLambdaHandler3C75473D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `reserveFlightLambdaHandlerServiceRole985C586D` (AWS::IAM::Role) → `Properties.Tags` L39 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveFlightLambdaHandlerServiceRole985C586D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `reserveHotelLambdaHandler020AE24A` (AWS::Lambda::Function) → `Properties.Tags` L556 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveHotelLambdaHandler020AE24A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `reserveHotelLambdaHandlerServiceRole452F23B7` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'reserveHotelLambdaHandlerServiceRole452F23B7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sagaLambdaHandlerFC24742F` (AWS::Lambda::Function) → `Properties.Tags` L1487 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'sagaLambdaHandlerFC24742F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sagaLambdaHandlerServiceRole7EB685BD` (AWS::IAM::Role) → `Properties.Tags` L1427 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'sagaLambdaHandlerServiceRole7EB685BD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `takePaymentLambdaHandlerB96529D4` (AWS::Lambda::Function) → `Properties.Tags` L994 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'takePaymentLambdaHandlerB96529D4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `takePaymentLambdaHandlerServiceRole56CA2808` (AWS::IAM::Role) → `Properties.Tags` L915 in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json` + > Resource 'takePaymentLambdaHandlerServiceRole56CA2808' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointCloudWatchRoleC3C64E0F` (AWS::IAM::Role) → `Properties.Tags` L366 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointCloudWatchRoleC3C64E0F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDeploymentStageprodB78BEEA0` (AWS::ApiGateway::Stage) → `Properties.Tags` L434 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointDeploymentStageprodB78BEEA0' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L357 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `Messages804FA4EB` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'Messages804FA4EB' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `RDSPublishQueue2BEA1A7F` (AWS::SQS::Queue) → `Properties.Tags` L31 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'RDSPublishQueue2BEA1A7F' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SQSPublishLambdaHandler51EE31BE` (AWS::Lambda::Function) → `Properties.Tags` L107 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSPublishLambdaHandler51EE31BE' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSPublishLambdaHandlerServiceRole4F9A1044` (AWS::IAM::Role) → `Properties.Tags` L40 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSPublishLambdaHandlerServiceRole4F9A1044' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerBBB58615` (AWS::Lambda::Function) → `Properties.Tags` L269 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerBBB58615' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerServiceRoleB6261F09` (AWS::IAM::Role) → `Properties.Tags` L174 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerServiceRoleB6261F09' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L340 in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json` + > Resource 'SQSSubscribeLambdaHandlerSqsEventSourceTheScalableWebhookStackRDSPublishQueue119E6E347AD14066' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `RequestTableC81DB378` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'RequestTableC81DB378' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `scheduledLambda8A84450D` (AWS::Lambda::Function) → `Properties.Tags` L104 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambda8A84450D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `scheduledLambdaServiceRoleB98DFEFD` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambdaServiceRoleB98DFEFD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `scheduledLambdaschedule99960653` (AWS::Events::Rule) → `Properties.Tags` L171 in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json` + > Resource 'scheduledLambdaschedule99960653' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `ApiApiLogsRole90293F72` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiApiLogsRole90293F72' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiCustomerServiceRole28709567` (AWS::IAM::Role) → `Properties.Tags` L90 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiCustomerServiceRole28709567' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiF70053CD` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L39 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiF70053CD' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `ApiLoyaltyServiceRole2B487CD2` (AWS::IAM::Role) → `Properties.Tags` L329 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'ApiLoyaltyServiceRole2B487CD2' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomerTable260DCC08` (AWS::DynamoDB::Table) → `Properties.Tags` L446 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'CustomerTable260DCC08' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LoyaltyLambdaHandler5918F0DA` (AWS::Lambda::Function) → `Properties.Tags` L503 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'LoyaltyLambdaHandler5918F0DA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LoyaltyLambdaHandlerServiceRole62E814E8` (AWS::IAM::Role) → `Properties.Tags` L469 in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json` + > Resource 'LoyaltyLambdaHandlerServiceRole62E814E8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L110 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EndpointDefaultStage0AD21F27` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L269 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'EndpointDefaultStage0AD21F27' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `EndpointEEF1FD8F` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L177 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'EndpointEEF1FD8F' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `HttpApiRole79B5C31A` (AWS::IAM::Role) → `Properties.Tags` L205 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'HttpApiRole79B5C31A' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L168 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L98 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `pineappleCheckLambdaHandlerFDB742D5` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'pineappleCheckLambdaHandlerFDB742D5' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `pineappleCheckLambdaHandlerServiceRoleFC4E3211` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'pineappleCheckLambdaHandlerServiceRoleFC4E3211' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `thestatemachineapi69C81CC4` (AWS::ApiGatewayV2::Api) → `Properties.Tags` L242 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'thestatemachineapi69C81CC4' of type 'AWS::ApiGatewayV2::Api' supports Tags but none are configured +- **I9040** `thestatemachineapiDefaultStageE23A2C15` (AWS::ApiGatewayV2::Stage) → `Properties.Tags` L252 in `cdk_pat-the-state-machine--TheStateMachineStack.template_json` + > Resource 'thestatemachineapiDefaultStageE23A2C15' of type 'AWS::ApiGatewayV2::Stage' supports Tags but none are configured +- **I9040** `HelloWorldHandler30C22324` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'HelloWorldHandler30C22324' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `HelloWorldHandlerServiceRole56E6BFBA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'HelloWorldHandlerServiceRole56E6BFBA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WafGatewayAPI5BA7C2CE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L98 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPI5BA7C2CE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `WafGatewayAPICloudWatchRoleEE79D232` (AWS::IAM::Role) → `Properties.Tags` L112 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPICloudWatchRoleEE79D232' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WafGatewayAPIDeploymentStageprodEF5FA49F` (AWS::ApiGateway::Stage) → `Properties.Tags` L179 in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json` + > Resource 'WafGatewayAPIDeploymentStageprodEF5FA49F' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `WebACL` (AWS::WAFv2::WebACL) → `Properties.Tags` L5 in `cdk_pat-the-waf-apigateway--TheWafStack.template_json` + > Resource 'WebACL' of type 'AWS::WAFv2::WebACL' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerFB6EB814` (AWS::Lambda::Function) → `Properties.Tags` L118 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'DynamoLambdaHandlerFB6EB814' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DynamoLambdaHandlerServiceRole4C867B01` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'DynamoLambdaHandlerServiceRole4C867B01' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `HitsFF5AF8CD` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json` + > Resource 'HitsFF5AF8CD' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `httpLambdaHandler66D9C9A8` (AWS::Lambda::Function) → `Properties.Tags` L66 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Resource 'httpLambdaHandler66D9C9A8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `httpLambdaHandlerServiceRole01D49A7D` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json` + > Resource 'httpLambdaHandlerServiceRole01D49A7D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Queue4A7E3555` (AWS::SQS::Queue) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'Queue4A7E3555' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `sqsLambdaHandler0DD5DF9B` (AWS::Lambda::Function) → `Properties.Tags` L89 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsLambdaHandler0DD5DF9B' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sqsLambdaHandlerServiceRole2F57B7B5` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsLambdaHandlerServiceRole2F57B7B5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerD66392B8` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerD66392B8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerServiceRole8F070FD3` (AWS::IAM::Role) → `Properties.Tags` L209 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerServiceRole8F070FD3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L349 in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json` + > Resource 'sqsSubscribeLambdaHandlerSqsEventSourceTheXraySQSFlowQueue7994C13E559DCA00' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `TheXRayTracerSnsTopicCCE2005E` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'TheXRayTracerSnsTopicCCE2005E' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `snsLambdaHandlerE7B0ABE3` (AWS::Lambda::Function) → `Properties.Tags` L82 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsLambdaHandlerE7B0ABE3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `snsLambdaHandlerServiceRole7F428B88` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsLambdaHandlerServiceRole7F428B88' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `snsSubscriptionLambdaHandler68619CD8` (AWS::Lambda::Function) → `Properties.Tags` L263 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsSubscriptionLambdaHandler68619CD8' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `snsSubscriptionLambdaHandlerServiceRole215E543C` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json` + > Resource 'snsSubscriptionLambdaHandlerServiceRole215E543C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewaySNSRole1BAAAE75` (AWS::IAM::Role) → `Properties.Tags` L374 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'ApiGatewaySNSRole1BAAAE75' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TheXRayTracerSnsFanOutTopicDE7E70F8` (AWS::SNS::Topic) → `Properties.Tags` L5 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'TheXRayTracerSnsFanOutTopicDE7E70F8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `xrayTracerAPIA84CAE80` (AWS::ApiGateway::RestApi) → `Properties.Tags` L14 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPIA84CAE80' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `xrayTracerAPICloudWatchRoleCCB113F4` (AWS::IAM::Role) → `Properties.Tags` L23 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPICloudWatchRoleCCB113F4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `xrayTracerAPIDeploymentStageprod85442A48` (AWS::ApiGateway::Stage) → `Properties.Tags` L93 in `cdk_pat-the-xray-tracer--TheXrayTracerStack.template_json` + > Resource 'xrayTracerAPIDeploymentStageprod85442A48' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `ApiCorsLambda5083F55F` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiCorsLambda5083F55F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `ApiCorsLambdaServiceRole0DB39061` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiCorsLambdaServiceRole0DB39061' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayWithCors6DE4076F` (AWS::ApiGateway::RestApi) → `Properties.Tags` L67 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCors6DE4076F' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ApiGatewayWithCorsCloudWatchRole9C3700F0` (AWS::IAM::Role) → `Properties.Tags` L76 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCorsCloudWatchRole9C3700F0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGatewayWithCorsDeploymentStageprod7F1DD875` (AWS::ApiGateway::Stage) → `Properties.Tags` L149 in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json` + > Resource 'ApiGatewayWithCorsDeploymentStageprod7F1DD875' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumer52DC1403` (AWS::ApiGateway::RestApi) → `Properties.Tags` L485 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumer52DC1403' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E` (AWS::IAM::Role) → `Properties.Tags` L494 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumerCloudWatchRoleE43B891E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58` (AWS::ApiGateway::Stage) → `Properties.Tags` L566 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'SampleAPIEventBridgeMultiConsumerDeploymentStageprodDE087A58' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `consumer3firehose` (AWS::KinesisFirehose::DeliveryStream) → `Properties.Tags` L375 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'consumer3firehose' of type 'AWS::KinesisFirehose::DeliveryStream' supports Tags but none are configured +- **I9040** `consumer3firehoseEventsRoleECB13871` (AWS::IAM::Role) → `Properties.Tags` L401 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'consumer3firehoseEventsRoleECB13871' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer1Lambda4AF2292E` (AWS::Lambda::Function) → `Properties.Tags` L126 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1Lambda4AF2292E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventConsumer1LambdaRule288E5FF9` (AWS::Events::Rule) → `Properties.Tags` L154 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1LambdaRule288E5FF9' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventConsumer1LambdaServiceRoleC8CCBFC5` (AWS::IAM::Role) → `Properties.Tags` L92 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer1LambdaServiceRoleC8CCBFC5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer2Lambda1631C47A` (AWS::Lambda::Function) → `Properties.Tags` L236 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2Lambda1631C47A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventConsumer2LambdaRule54312CB1` (AWS::Events::Rule) → `Properties.Tags` L264 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2LambdaRule54312CB1' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventConsumer2LambdaServiceRole6B878884` (AWS::IAM::Role) → `Properties.Tags` L202 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer2LambdaServiceRole6B878884' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `eventConsumer3KinesisRuleB8D02F6F` (AWS::Events::Rule) → `Properties.Tags` L453 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventConsumer3KinesisRuleB8D02F6F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `eventProducerLambda100D549C` (AWS::Lambda::Function) → `Properties.Tags` L63 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventProducerLambda100D549C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `eventProducerLambdaServiceRoleD019EB99` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'eventProducerLambdaServiceRoleD019EB99' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myRoleE60D68E8` (AWS::IAM::Role) → `Properties.Tags` L320 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'myRoleE60D68E8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `testngestbucketD7155299` (AWS::S3::Bucket) → `Properties.Tags` L310 in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json` + > Resource 'testngestbucketD7155299' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ApiGW45519054` (AWS::ApiGateway::RestApi) → `Properties.Tags` L47 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGW45519054' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ApiGWCloudWatchRole51A9A431` (AWS::IAM::Role) → `Properties.Tags` L56 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGWCloudWatchRole51A9A431' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApiGWDeploymentStageprodDFD8EC11` (AWS::ApiGateway::Stage) → `Properties.Tags` L129 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'ApiGWDeploymentStageprodDFD8EC11' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `RestAPIRoleA3B4EFA3` (AWS::IAM::Role) → `Properties.Tags` L13 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'RestAPIRoleA3B4EFA3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSQueue7674CD17` (AWS::SQS::Queue) → `Properties.Tags` L3 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSQueue7674CD17' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `SQSTriggerLambda99F71FB3` (AWS::Lambda::Function) → `Properties.Tags` L328 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambda99F71FB3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SQSTriggerLambdaServiceRole0C427DE8` (AWS::IAM::Role) → `Properties.Tags` L259 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambdaServiceRole0C427DE8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L357 in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json` + > Resource 'SQSTriggerLambdaSqsEventSourceApiSqsLambdaStackSQSQueue975096D28FB9A750' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L142 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L117 in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CDKDataSyncS3AccessRole0C49AEBFA` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Resource 'CDKDataSyncS3AccessRole0C49AEBFA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CDKDataSyncS3AccessRole18E349368` (AWS::IAM::Role) → `Properties.Tags` L69 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3-iam.template_json` + > Resource 'CDKDataSyncS3AccessRole18E349368' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DataSyncS3Location0` (AWS::DataSync::LocationS3) → `Properties.Tags` L5 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3Location0' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured +- **I9040** `DataSyncS3Location1` (AWS::DataSync::LocationS3) → `Properties.Tags` L20 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3Location1' of type 'AWS::DataSync::LocationS3' supports Tags but none are configured +- **I9040** `DataSyncS3toS3Task` (AWS::DataSync::Task) → `Properties.Tags` L36 in `cdk_py-datasync-s3--cdk-datasync-s3-to-s3.template_json` + > Resource 'DataSyncS3toS3Task' of type 'AWS::DataSync::Task' supports Tags but none are configured +- **I9040** `ALBAEE750D2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L249 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBAEE750D2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `ALBListener3B99FF85` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L281 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBListener3B99FF85' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `ALBListenerTargetGroupD5D64FBA` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L302 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'ALBListenerTargetGroupD5D64FBA' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `sgalbE4BDB11E` (AWS::EC2::SecurityGroup) → `Properties.Tags` L220 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'sgalbE4BDB11E' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgnextcloud40AB2A88` (AWS::EC2::SecurityGroup) → `Properties.Tags` L167 in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json` + > Resource 'sgnextcloud40AB2A88' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `RDSE0E96D00` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSE0E96D00' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `RDSSecret3683CA93` (AWS::SecretsManager::Secret) → `Properties.Tags` L51 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSSecret3683CA93' of type 'AWS::SecretsManager::Secret' supports Tags but none are configured +- **I9040** `RDSSubnetGroup3527AC04` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'RDSSubnetGroup3527AC04' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `sgrds6871B7A8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L5 in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` + > Resource 'sgrds6871B7A8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgefs8B17F90D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L14 in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json` + > Resource 'sgefs8B17F90D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `consumerlambdafunction40710347` (AWS::Lambda::Function) → `Properties.Tags` L225 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'consumerlambdafunction40710347' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `consumerlambdafunctionServiceRole116B0746` (AWS::IAM::Role) → `Properties.Tags` L138 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'consumerlambdafunctionServiceRole116B0746' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `demotable002BE91A` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'demotable002BE91A' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `oneminuteruleE9168CE5` (AWS::Events::Rule) → `Properties.Tags` L261 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'oneminuteruleE9168CE5' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `producerlambdafunctionCE724CE7` (AWS::Lambda::Function) → `Properties.Tags` L102 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'producerlambdafunctionCE724CE7' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `producerlambdafunctionServiceRole5400FE21` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json` + > Resource 'producerlambdafunctionServiceRole5400FE21' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWSBackupPlanSelectionRole2A44F724` (AWS::IAM::Role) → `Properties.Tags` L976 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSBackupPlanSelectionRole2A44F724' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` (AWS::Lambda::Function) → `Properties.Tags` L907 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50` (AWS::IAM::Role) → `Properties.Tags` L849 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'AWSb4cf1abd4e4f4bc699441af7ccd9ec37ServiceRole9FFE9C50' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ScheduleRuleDA5BD877` (AWS::Events::Rule) → `Properties.Tags` L790 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'ScheduleRuleDA5BD877' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SecurityGroupDD263621` (AWS::EC2::SecurityGroup) → `Properties.Tags` L651 in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json` + > Resource 'SecurityGroupDD263621' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L562 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L490 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `EcrStackNestedStackEcrStackNestedStackResource706AA777` (AWS::CloudFormation::Stack) → `Properties.Tags` L600 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'EcrStackNestedStackEcrStackNestedStackResource706AA777' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `EcsStackNestedStackEcsStackNestedStackResource48283A58` (AWS::CloudFormation::Stack) → `Properties.Tags` L632 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` + > Resource 'EcsStackNestedStackEcsStackNestedStackResource48283A58' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `BackendDataRepositoryD361813E` (AWS::ECR::Repository) → `Properties.Tags` L16 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'BackendDataRepositoryD361813E' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` (AWS::Lambda::Function) → `Properties.Tags` L144 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491` (AWS::IAM::Role) → `Properties.Tags` L70 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiBServiceRole8C8B0491' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FrontendRepository7D714FA2` (AWS::ECR::Repository) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json` + > Resource 'FrontendRepository7D714FA2' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `BackendService7A4224EE` (AWS::ECS::Service) → `Properties.Tags` L472 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendService7A4224EE' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BackendTaskDefinitionBackendContainerLogGroup5E30F6E8` (AWS::Logs::LogGroup) → `Properties.Tags` L390 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendTaskDefinitionBackendContainerLogGroup5E30F6E8' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `BackendTaskDefinitionEC224DE6` (AWS::ECS::TaskDefinition) → `Properties.Tags` L336 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'BackendTaskDefinitionEC224DE6' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ECSCluster7D463CD4` (AWS::ECS::Cluster) → `Properties.Tags` L5 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSCluster7D463CD4' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE` (AWS::ServiceDiscovery::PrivateDnsNamespace) → `Properties.Tags` L28 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSClusterDefaultServiceDiscoveryNamespace5AC2D2BE' of type 'AWS::ServiceDiscovery::PrivateDnsNamespace' supports Tags but none are configured +- **I9040** `ECSSecurityGroupA14DBE7D` (AWS::EC2::SecurityGroup) → `Properties.Tags` L218 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSSecurityGroupA14DBE7D' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `ECSServiceLogGroupD961AA4E` (AWS::Logs::LogGroup) → `Properties.Tags` L40 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSServiceLogGroupD961AA4E' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `ECSTaskIamRole84EB0A02` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ECSTaskIamRole84EB0A02' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FrontendLB2FA80AC2` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L591 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendLB2FA80AC2' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `FrontendLBListener230479D8` (AWS::ElasticLoadBalancingV2::Listener) → `Properties.Tags` L627 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendLBListener230479D8' of type 'AWS::ElasticLoadBalancingV2::Listener' supports Tags but none are configured +- **I9040** `FrontendServiceBC94BA93` (AWS::ECS::Service) → `Properties.Tags` L400 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendServiceBC94BA93' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FrontendTaskDefinition6CBC2B00` (AWS::ECS::TaskDefinition) → `Properties.Tags` L272 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendTaskDefinition6CBC2B00' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FrontendTaskDefinitionFrontendContainerLogGroup994ED50C` (AWS::Logs::LogGroup) → `Properties.Tags` L326 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'FrontendTaskDefinitionFrontendContainerLogGroup994ED50C' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `ListenerRule73F9AC5E` (AWS::ElasticLoadBalancingV2::ListenerRule) → `Properties.Tags` L648 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'ListenerRule73F9AC5E' of type 'AWS::ElasticLoadBalancingV2::ListenerRule' supports Tags but none are configured +- **I9040** `PublicLBSG963B1ACE` (AWS::EC2::SecurityGroup) → `Properties.Tags` L532 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'PublicLBSG963B1ACE' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TargetGroup3D7CD9B8` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L560 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'TargetGroup3D7CD9B8' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskexecutionRole978012CD` (AWS::IAM::Role) → `Properties.Tags` L172 in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcsStack19C526D0.nested.template_json` + > Resource 'TaskexecutionRole978012CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `emrcluster` (AWS::EMR::Cluster) → `Properties.Tags` L316 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrcluster' of type 'AWS::EMR::Cluster' supports Tags but none are configured +- **I9040** `emrjobflowrole15D4DAE5` (AWS::IAM::Role) → `Properties.Tags` L268 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrjobflowrole15D4DAE5' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `emrservicerole3BE5EDAF` (AWS::IAM::Role) → `Properties.Tags` L219 in `cdk_py-emr--emr-cluster.template_json` + > Resource 'emrservicerole3BE5EDAF' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CdkIoTCoreRule` (AWS::IoT::TopicRule) → `Properties.Tags` L528 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CdkIoTCoreRule' of type 'AWS::IoT::TopicRule' supports Tags but none are configured +- **I9040** `CdkThing001LambdaRoleD7EE5CD3` (AWS::IAM::Role) → `Properties.Tags` L14 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CdkThing001LambdaRoleD7EE5CD3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CertHandler220363A9` (AWS::Lambda::Function) → `Properties.Tags` L69 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CertHandler220363A9' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CfnLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L518 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `CfnPolicy` (AWS::IoT::Policy) → `Properties.Tags` L353 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnPolicy' of type 'AWS::IoT::Policy' supports Tags but none are configured +- **I9040** `CfnRole` (AWS::IAM::Role) → `Properties.Tags` L477 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'CfnRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IoTCertProviderframeworkonEvent8FF1476F` (AWS::Lambda::Function) → `Properties.Tags` L296 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'IoTCertProviderframeworkonEvent8FF1476F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `IoTCertProviderframeworkonEventServiceRole80DDBEA7` (AWS::IAM::Role) → `Properties.Tags` L217 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'IoTCertProviderframeworkonEventServiceRole80DDBEA7' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L187 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L126 in `cdk_py-iotcore--CdkIotThingStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L62 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Singleton8C7B99F3` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'Singleton8C7B99F3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SingletonServiceRoleDDD815CD` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-cron--LambdaCronExample.template_json` + > Resource 'SingletonServiceRoleDDD815CD' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdaContainerFunction5815FD88` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Resource 'lambdaContainerFunction5815FD88' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdaContainerFunctionServiceRole5E36DB3C` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json` + > Resource 'lambdaContainerFunctionServiceRole5E36DB3C' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `lambdafunction45C982D3` (AWS::Lambda::Function) → `Properties.Tags` L64 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Resource 'lambdafunction45C982D3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `lambdafunctionServiceRole85538ADB` (AWS::IAM::Role) → `Properties.Tags` L30 in `cdk_py-lambda-layer--LambdaLayerExample.template_json` + > Resource 'lambdafunctionServiceRole85538ADB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StateMachine2E01A3A5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L220 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'StateMachine2E01A3A5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `StateMachineRoleB840431D` (AWS::IAM::Role) → `Properties.Tags` L129 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'StateMachineRoleB840431D' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `statusLambdaCF47B86D` (AWS::Lambda::Function) → `Properties.Tags` L101 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'statusLambdaCF47B86D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `statusLambdaServiceRoleD1132168` (AWS::IAM::Role) → `Properties.Tags` L67 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'statusLambdaServiceRoleD1132168' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `submitLambda3C32AFD4` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'submitLambda3C32AFD4' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `submitLambdaServiceRole576DCA8F` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json` + > Resource 'submitLambdaServiceRole576DCA8F' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TableCD117FA1` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'TableCD117FA1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `UrlShortenerApi1FE619BE` (AWS::ApiGateway::RestApi) → `Properties.Tags` L157 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApi1FE619BE' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `UrlShortenerApiCloudWatchRole28577D98` (AWS::IAM::Role) → `Properties.Tags` L166 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiCloudWatchRole28577D98' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `UrlShortenerApiDeploymentStageprod9A3CCA44` (AWS::ApiGateway::Stage) → `Properties.Tags` L239 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiDeploymentStageprod9A3CCA44' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `UrlShortenerApiDomain85D0CE65` (AWS::ApiGateway::DomainName) → `Properties.Tags` L492 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerApiDomain85D0CE65' of type 'AWS::ApiGateway::DomainName' supports Tags but none are configured +- **I9040** `UrlShortenerFunctionB5E87AC1` (AWS::Lambda::Function) → `Properties.Tags` L122 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerFunctionB5E87AC1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `UrlShortenerFunctionServiceRole2FBF9CDA` (AWS::IAM::Role) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-app.template_json` + > Resource 'UrlShortenerFunctionServiceRole2FBF9CDA' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorPingTask1D3C2E79` (AWS::ECS::TaskDefinition) → `Properties.Tags` L31 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTask1D3C2E79' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `generatorPingTaskExecutionRoleA7BE7F8B` (AWS::IAM::Role) → `Properties.Tags` L73 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTaskExecutionRoleA7BE7F8B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorPingTaskTaskRoleA4886BE8` (AWS::IAM::Role) → `Properties.Tags` L11 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorPingTaskTaskRoleA4886BE8' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `generatorcluster9804CB70` (AWS::ECS::Cluster) → `Properties.Tags` L3 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorcluster9804CB70' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `generatorserviceSecurityGroup3D8BECF8` (AWS::EC2::SecurityGroup) → `Properties.Tags` L184 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorserviceSecurityGroup3D8BECF8' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `generatorserviceServiceA6AC5079` (AWS::ECS::Service) → `Properties.Tags` L137 in `cdk_py-url-shortener--urlshort-load-test.template_json` + > Resource 'generatorserviceServiceA6AC5079' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `BlockListC03D0423` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L282 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListC03D0423' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `BlockListRuleGroup55F6B55D` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L294 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListRuleGroup55F6B55D' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured +- **I9040** `BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L315 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'BlockListRuleGroupDirectBlockListRuleGroupAssociation40E90DB0' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L252 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `InboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L470 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'InboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured +- **I9040** `OutboundEndpoint` (AWS::Route53Resolver::ResolverEndpoint) → `Properties.Tags` L406 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'OutboundEndpoint' of type 'AWS::Route53Resolver::ResolverEndpoint' supports Tags but none are configured +- **I9040** `sginboundendpoint32081788` (AWS::EC2::SecurityGroup) → `Properties.Tags` L435 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'sginboundendpoint32081788' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `sgoutboundendpointEC0509A3` (AWS::EC2::SecurityGroup) → `Properties.Tags` L333 in `cdk_r53-resolver--R53ResolverStack.template_json` + > Resource 'sgoutboundendpointEC0509A3' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Bucket83908E77` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'Bucket83908E77' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` (AWS::Lambda::Function) → `Properties.Tags` L413 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC` (AWS::IAM::Role) → `Properties.Tags` L350 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Classifications0C921F6C` (AWS::DynamoDB::Table) → `Properties.Tags` L127 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'Classifications0C921F6C' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` (AWS::Lambda::Function) → `Properties.Tags` L499 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB` (AWS::IAM::Role) → `Properties.Tags` L438 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9741ECFB' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RekFunction9837D13D` (AWS::Lambda::Function) → `Properties.Tags` L286 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'RekFunction9837D13D' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `RekFunctionServiceRole3947AEF4` (AWS::IAM::Role) → `Properties.Tags` L153 in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json` + > Resource 'RekFunctionServiceRole3947AEF4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Other34654A52` (AWS::S3::Bucket) → `Properties.Tags` L3 in `cdk_resource-overrides--resource-overrides.template_json` + > Resource 'Other34654A52' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `AllowedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L506 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'AllowedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `BlockedDomainList` (AWS::Route53Resolver::FirewallDomainList) → `Properties.Tags` L518 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'BlockedDomainList' of type 'AWS::Route53Resolver::FirewallDomainList' supports Tags but none are configured +- **I9040** `DNSFirewallLogGroupF0EEB7D4` (AWS::Logs::LogGroup) → `Properties.Tags` L465 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSFirewallLogGroupF0EEB7D4' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `DNSLogsConfig` (AWS::Route53Resolver::ResolverQueryLoggingConfig) → `Properties.Tags` L477 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSLogsConfig' of type 'AWS::Route53Resolver::ResolverQueryLoggingConfig' supports Tags but none are configured +- **I9040** `DNSRuleGroup` (AWS::Route53Resolver::FirewallRuleGroup) → `Properties.Tags` L531 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'DNSRuleGroup' of type 'AWS::Route53Resolver::FirewallRuleGroup' supports Tags but none are configured +- **I9040** `FirewallRuleGroupAssociation` (AWS::Route53Resolver::FirewallRuleGroupAssociation) → `Properties.Tags` L557 in `cdk_route53-resolver-dns-firewall--Route53ResolverDnsFirewallStack.template_json` + > Resource 'FirewallRuleGroupAssociation' of type 'AWS::Route53Resolver::FirewallRuleGroupAssociation' supports Tags but none are configured +- **I9040** `exampleBucketAP` (AWS::S3::AccessPoint) → `Properties.Tags` L191 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'exampleBucketAP' of type 'AWS::S3::AccessPoint' supports Tags but none are configured +- **I9040** `examplebucketC9DFA43E` (AWS::S3::Bucket) → `Properties.Tags` L5 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'examplebucketC9DFA43E' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `retrieveTransformedObjectLambdaD5D6532C` (AWS::Lambda::Function) → `Properties.Tags` L141 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'retrieveTransformedObjectLambdaD5D6532C' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `retrieveTransformedObjectLambdaServiceRole27FF342E` (AWS::IAM::Role) → `Properties.Tags` L83 in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json` + > Resource 'retrieveTransformedObjectLambdaServiceRole27FF342E' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` (AWS::Lambda::Function) → `Properties.Tags` L297 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0` (AWS::IAM::Role) → `Properties.Tags` L225 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'CustomVpcRestrictDefaultSGCustomResourceProviderRole26592FE0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `DocumentAssociation` (AWS::SSM::Association) → `Properties.Tags` L45 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'DocumentAssociation' of type 'AWS::SSM::Association' supports Tags but none are configured +- **I9040** `EC2SSMRole1C0EBD7B` (AWS::IAM::Role) → `Properties.Tags` L327 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'EC2SSMRole1C0EBD7B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeWriterDocument` (AWS::SSM::Document) → `Properties.Tags` L5 in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json` + > Resource 'TimeWriterDocument' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` (AWS::Lambda::Function) → `Properties.Tags` L377 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265` (AWS::IAM::Role) → `Properties.Tags` L246 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` (AWS::Lambda::Function) → `Properties.Tags` L205 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092` (AWS::IAM::Role) → `Properties.Tags` L180 in `cdk_static-site-basic--MyStaticSite.template_json` + > Resource 'CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyStateMachine6C968CA5` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L83 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachine6C968CA5' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `MyStateMachineLogGroup9955D1FE` (AWS::Logs::LogGroup) → `Properties.Tags` L5 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachineLogGroup9955D1FE' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `MyStateMachineRoleD59FFEBC` (AWS::IAM::Role) → `Properties.Tags` L17 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'MyStateMachineRoleD59FFEBC' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `StepFuncApiDeploymentStageprod5FF8FD8E` (AWS::ApiGateway::Stage) → `Properties.Tags` L153 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiDeploymentStageprod5FF8FD8E' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `StepFuncApiE896FCA7` (AWS::ApiGateway::RestApi) → `Properties.Tags` L121 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiE896FCA7' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `StepFuncApiordersGETStartSyncExecutionRole90998151` (AWS::IAM::Role) → `Properties.Tags` L186 in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json` + > Resource 'StepFuncApiordersGETStartSyncExecutionRole90998151' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CheckLambda9CBBF9BA` (AWS::Lambda::Function) → `Properties.Tags` L39 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CheckLambda9CBBF9BA' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `CheckLambdaServiceRole74B86E23` (AWS::IAM::Role) → `Properties.Tags` L5 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CheckLambdaServiceRole74B86E23' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CronStateMachine7E50955B` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L210 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachine7E50955B' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `CronStateMachineEventsRoleA3F136B0` (AWS::IAM::Role) → `Properties.Tags` L271 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachineEventsRoleA3F136B0' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CronStateMachineRoleFE85923B` (AWS::IAM::Role) → `Properties.Tags` L119 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'CronStateMachineRoleFE85923B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Rule4C995B7F` (AWS::Events::Rule) → `Properties.Tags` L317 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'Rule4C995B7F' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SubmitLambda8054545E` (AWS::Lambda::Function) → `Properties.Tags` L96 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'SubmitLambda8054545E' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SubmitLambdaServiceRole98C85C39` (AWS::IAM::Role) → `Properties.Tags` L62 in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json` + > Resource 'SubmitLambdaServiceRole98C85C39' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Flow` (AWS::MediaConnect::Flow) → `Properties.Tags` L10 in `gh-issues_issue-144_yaml` + > Resource 'Flow' of type 'AWS::MediaConnect::Flow' supports Tags but none are configured +- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L12 in `gh-issues_issue-183_yaml` + > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L23 in `gh-issues_issue-226_yaml` + > Resource 'InvertedRangeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `PingSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L10 in `gh-issues_issue-226_yaml` + > Resource 'PingSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `AllowedValuesEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L67 in `gh-issues_issue-235_yaml` + > Resource 'AllowedValuesEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AuroraAllowedValues` (AWS::RDS::DBInstance) → `Properties.Tags` L142 in `gh-issues_issue-235_yaml` + > Resource 'AuroraAllowedValues' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AuroraEngine` (AWS::RDS::DBInstance) → `Properties.Tags` L137 in `gh-issues_issue-235_yaml` + > Resource 'AuroraEngine' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `AutomatedBackupRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L189 in `gh-issues_issue-235_yaml` + > Resource 'AutomatedBackupRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Cluster` (AWS::RDS::DBCluster) → `Properties.Tags` L26 in `gh-issues_issue-235_yaml` + > Resource 'Cluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `ClusterMember` (AWS::RDS::DBInstance) → `Properties.Tags` L147 in `gh-issues_issue-235_yaml` + > Resource 'ClusterMember' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ClusterSnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L165 in `gh-issues_issue-235_yaml` + > Resource 'ClusterSnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalClusterOrStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L78 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalClusterOrStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalNoValueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L61 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalNoValueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalSnapshotOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L225 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalSnapshotOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `ConditionalTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L108 in `gh-issues_issue-235_yaml` + > Resource 'ConditionalTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CorrelatedClusterOrEncryptedStandalone` (AWS::RDS::DBInstance) → `Properties.Tags` L218 in `gh-issues_issue-235_yaml` + > Resource 'CorrelatedClusterOrEncryptedStandalone' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L84 in `gh-issues_issue-235_yaml` + > Resource 'CustomFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomImplicitEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L201 in `gh-issues_issue-235_yaml` + > Resource 'CustomImplicitEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomStringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L90 in `gh-issues_issue-235_yaml` + > Resource 'CustomStringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `CustomTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L206 in `gh-issues_issue-235_yaml` + > Resource 'CustomTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L114 in `gh-issues_issue-235_yaml` + > Resource 'DynamicEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicEngineValue` (AWS::RDS::DBInstance) → `Properties.Tags` L132 in `gh-issues_issue-235_yaml` + > Resource 'DynamicEngineValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicProperties` (AWS::RDS::DBInstance) → `Properties.Tags` L250 in `gh-issues_issue-235_yaml` + > Resource 'DynamicProperties' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DynamicReferenceEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L120 in `gh-issues_issue-235_yaml` + > Resource 'DynamicReferenceEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EmptySnapshotIdentifier` (AWS::RDS::DBInstance) → `Properties.Tags` L159 in `gh-issues_issue-235_yaml` + > Resource 'EmptySnapshotIdentifier' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EncryptedSource` (AWS::RDS::DBInstance) → `Properties.Tags` L171 in `gh-issues_issue-235_yaml` + > Resource 'EncryptedSource' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `EngineAllowedValuesMissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L73 in `gh-issues_issue-235_yaml` + > Resource 'EngineAllowedValuesMissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `FalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L43 in `gh-issues_issue-235_yaml` + > Resource 'FalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `InvalidEncryptionValue` (AWS::RDS::DBInstance) → `Properties.Tags` L126 in `gh-issues_issue-235_yaml` + > Resource 'InvalidEncryptionValue' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L37 in `gh-issues_issue-235_yaml` + > Resource 'KmsKeyWithoutEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `LegacySecurityGroups` (AWS::RDS::DBInstance) → `Properties.Tags` L212 in `gh-issues_issue-235_yaml` + > Resource 'LegacySecurityGroups' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MissingEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L32 in `gh-issues_issue-235_yaml` + > Resource 'MissingEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SnapshotRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L153 in `gh-issues_issue-235_yaml` + > Resource 'SnapshotRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceClusterReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L195 in `gh-issues_issue-235_yaml` + > Resource 'SourceClusterReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceInstanceReplica` (AWS::RDS::DBInstance) → `Properties.Tags` L177 in `gh-issues_issue-235_yaml` + > Resource 'SourceInstanceReplica' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SourceResourceRestore` (AWS::RDS::DBInstance) → `Properties.Tags` L183 in `gh-issues_issue-235_yaml` + > Resource 'SourceResourceRestore' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `StringFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L49 in `gh-issues_issue-235_yaml` + > Resource 'StringFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `StringTrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L102 in `gh-issues_issue-235_yaml` + > Resource 'StringTrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `TrueEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L96 in `gh-issues_issue-235_yaml` + > Resource 'TrueEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `WholePropertiesCorrelated` (AWS::RDS::DBInstance) → `Properties.Tags` L232 in `gh-issues_issue-235_yaml` + > Resource 'WholePropertiesCorrelated' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `WholePropertiesFalseEncryption` (AWS::RDS::DBInstance) → `Properties.Tags` L241 in `gh-issues_issue-235_yaml` + > Resource 'WholePropertiesFalseEncryption' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-246_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `ALB` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L5 in `gh-issues_issue-247_json` + > Resource 'ALB' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `EIP` (AWS::EC2::EIP) → `Properties.Tags` L8 in `gh-issues_issue-264_yaml` + > Resource 'EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-34_json` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Instance2` (AWS::EC2::Instance) → `Properties.Tags` L22 in `gh-issues_issue-34_json` + > Resource 'Instance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L4 in `gh-issues_issue-35_yaml` + > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `gh-issues_issue-36_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `MyAsg` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L10 in `gh-issues_issue-37_yaml` + > Resource 'MyAsg' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `Memory` (AWS::BedrockAgentCore::Memory) → `Properties.Tags` L5 in `gh-issues_issue-38_json` + > Resource 'Memory' of type 'AWS::BedrockAgentCore::Memory' supports Tags but none are configured +- **I9040** `VPCB9E5F0B4` (AWS::EC2::VPC) → `Properties.Tags` L5 in `gh-issues_issue-39_json` + > Resource 'VPCB9E5F0B4' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `VPCEcrEndpointSecurityGroup50ED8BA4` (AWS::EC2::SecurityGroup) → `Properties.Tags` L11 in `gh-issues_issue-39_json` + > Resource 'VPCEcrEndpointSecurityGroup50ED8BA4' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DaxConcrete` (AWS::DAX::Cluster) → `Properties.Tags` L15 in `gh-issues_issue-40_yaml` + > Resource 'DaxConcrete' of type 'AWS::DAX::Cluster' supports Tags but none are configured +- **I9040** `DaxRef` (AWS::DAX::Cluster) → `Properties.Tags` L27 in `gh-issues_issue-40_yaml` + > Resource 'DaxRef' of type 'AWS::DAX::Cluster' supports Tags but none are configured +- **I9040** `EksCluster` (AWS::EKS::Cluster) → `Properties.Tags` L4 in `gh-issues_issue-40_yaml` + > Resource 'EksCluster' of type 'AWS::EKS::Cluster' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-41_json` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L34 in `gh-issues_issue-42-if_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L27 in `gh-issues_issue-42-if_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L17 in `gh-issues_issue-42-if_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L29 in `gh-issues_issue-42-ref_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L22 in `gh-issues_issue-42-ref_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L12 in `gh-issues_issue-42-ref_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L22 in `gh-issues_issue-42_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TargetGroup` (AWS::ElasticLoadBalancingV2::TargetGroup) → `Properties.Tags` L15 in `gh-issues_issue-42_yaml` + > Resource 'TargetGroup' of type 'AWS::ElasticLoadBalancingV2::TargetGroup' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `gh-issues_issue-42_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `gh-issues_issue-44_json` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `PipelineRole` (AWS::IAM::Role) → `Properties.Tags` L49 in `gh-issues_issue-44_json` + > Resource 'PipelineRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `interfaceVpcEndpoint89C99945` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L5 in `gh-issues_issue-45_json` + > Resource 'interfaceVpcEndpoint89C99945' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured +- **I9040** `ClusterEB0386A7` (AWS::EKS::Cluster) → `Properties.Tags` L6 in `gh-issues_issue-46_json` + > Resource 'ClusterEB0386A7' of type 'AWS::EKS::Cluster' supports Tags but none are configured +- **I9040** `ClusterKubectlProviderHandler2E05C68A` (AWS::Lambda::Function) → `Properties.Tags` L15 in `gh-issues_issue-46_json` + > Resource 'ClusterKubectlProviderHandler2E05C68A' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-47_json` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `DocDbInstance` (AWS::DocDB::DBInstance) → `Properties.Tags` L10 in `gh-issues_issue-49_yaml` + > Resource 'DocDbInstance' of type 'AWS::DocDB::DBInstance' supports Tags but none are configured +- **I9040** `Ec2Instance` (AWS::EC2::Instance) → `Properties.Tags` L15 in `gh-issues_issue-49_yaml` + > Resource 'Ec2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `EsDomain` (AWS::Elasticsearch::Domain) → `Properties.Tags` L4 in `gh-issues_issue-49_yaml` + > Resource 'EsDomain' of type 'AWS::Elasticsearch::Domain' supports Tags but none are configured +- **I9040** `MyFunctionServiceRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `gh-issues_issue-50_json` + > Resource 'MyFunctionServiceRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Nodegroup` (AWS::EKS::Nodegroup) → `Properties.Tags` L5 in `gh-issues_issue-52_json` + > Resource 'Nodegroup' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured +- **I9040** `ClusterControlPlaneSecurityGroupD274242C` (AWS::EC2::SecurityGroup) → `Properties.Tags` L595 in `gh-issues_issue-53_json` + > Resource 'ClusterControlPlaneSecurityGroupD274242C' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `ClusterCreationRole360249B6` (AWS::IAM::Role) → `Properties.Tags` L616 in `gh-issues_issue-53_json` + > Resource 'ClusterCreationRole360249B6' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterKubectlHandlerRole94549F93` (AWS::IAM::Role) → `Properties.Tags` L474 in `gh-issues_issue-53_json` + > Resource 'ClusterKubectlHandlerRole94549F93' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ClusterKubectlReadyBarrier200052AF` (AWS::SSM::Parameter) → `Properties.Tags` L882 in `gh-issues_issue-53_json` + > Resource 'ClusterKubectlReadyBarrier200052AF' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `ClusterNodegroupDefaultCapacityDA0920A3` (AWS::EKS::Nodegroup) → `Properties.Tags` L956 in `gh-issues_issue-53_json` + > Resource 'ClusterNodegroupDefaultCapacityDA0920A3' of type 'AWS::EKS::Nodegroup' supports Tags but none are configured +- **I9040** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` (AWS::IAM::Role) → `Properties.Tags` L896 in `gh-issues_issue-53_json` + > Resource 'ClusterNodegroupDefaultCapacityNodeGroupRole55953B04' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `UserRoleB7C3739B` (AWS::IAM::Role) → `Properties.Tags` L444 in `gh-issues_issue-53_json` + > Resource 'UserRoleB7C3739B' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` (AWS::CloudFormation::Stack) → `Properties.Tags` L1035 in `gh-issues_issue-53_json` + > Resource 'awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` (AWS::CloudFormation::Stack) → `Properties.Tags` L1058 in `gh-issues_issue-53_json` + > Resource 'awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `gh-issues_issue-54-bare_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54-with-ownership_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `gh-issues_issue-54_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L12 in `gh-issues_issue-55_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `WeakConsumer` (AWS::SNS::Topic) → `Properties.Tags` L5 in `gh-issues_issue-56_json` + > Resource 'WeakConsumer' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `gh-issues_issue-57_json` + > Resource 'AReallyAwesomeDistributionWithAMemorableNameThatIWillNeverForget046C0FA9' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Resource` (AWS::EC2::Volume) → `Properties.Tags` L3 in `gh-issues_issue-61_json` + > Resource 'Resource' of type 'AWS::EC2::Volume' supports Tags but none are configured +- **I9040** `Canary` (AWS::Synthetics::Canary) → `Properties.Tags` L5 in `gh-issues_issue-62_json` + > Resource 'Canary' of type 'AWS::Synthetics::Canary' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L29 in `gh-issues_issue-63_json` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `MyLambda` (AWS::Lambda::Function) → `Properties.Tags` L5 in `gh-issues_issue-65_json` + > Resource 'MyLambda' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `PromAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L5 in `gh-issues_issue-67_json` + > Resource 'PromAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `FutureNodeFunc` (AWS::Lambda::Function) → `Properties.Tags` L18 in `gh-issues_issue-68_json` + > Resource 'FutureNodeFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyFunc` (AWS::Lambda::Function) → `Properties.Tags` L6 in `gh-issues_issue-68_json` + > Resource 'MyFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `BucketA` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `BucketB` (AWS::S3::Bucket) → `Properties.Tags` L16 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CompoundSub` (AWS::S3::Bucket) → `Properties.Tags` L20 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'CompoundSub' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalLeft` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'ConditionalLeft' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ConditionalRight` (AWS::S3::Bucket) → `Properties.Tags` L29 in `good_E3019_identity_no_false_positive_yaml` + > Resource 'ConditionalRight' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L17 in `good_E9001_aws_cdk_metadata_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `KubectlHandlerRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `good_W1028_pseudo_param_branches_reachable_yaml` + > Resource 'KubectlHandlerRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Elb` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_W3010_getazs_not_flagged_yaml` + > Resource 'Elb' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_W3010_getazs_not_flagged_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `RestApi1` (AWS::ApiGateway::RestApi) → `Properties.Tags` L12 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Resource 'RestApi1' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `Stage1` (AWS::ApiGateway::Stage) → `Properties.Tags` L39 in `good_apigateway_method_authorizer_same_rest_api_yaml` + > Resource 'Stage1' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `AuroraDB` (AWS::RDS::DBInstance) → `Properties.Tags` L5 in `good_aurora_dbinstance_yaml` + > Resource 'AuroraDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L13 in `good_cdk_bootstrap_version_rule_json` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Distribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_cloudfront_valid_yaml` + > Resource 'Distribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L5 in `good_codepipeline_artifact_counts_yaml` + > Resource 'Pipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_complex_conditions_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L34 in `good_complex_conditions_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevBucket` (AWS::S3::Bucket) → `Properties.Tags` L45 in `good_complex_conditions_yaml` + > Resource 'DevBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L41 in `good_conditions_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L101 in `good_core_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L79 in `good_core_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L29 in `good_core_conditions_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L34 in `good_core_conditions_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L53 in `good_core_conditions_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance4` (AWS::EC2::Instance) → `Properties.Tags` L66 in `good_core_conditions_yaml` + > Resource 'myInstance4' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L24 in `good_core_conditions_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myTable` (AWS::DynamoDB::Table) → `Properties.Tags` L10 in `good_core_config_default_e3012_yaml` + > Resource 'myTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `MyKey` (AWS::KMS::Key) → `Properties.Tags` L4 in `good_core_directives_yaml` + > Resource 'MyKey' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `AutoScalingGroupWithPolicies` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L60 in `good_core_resource_attributes_yaml` + > Resource 'AutoScalingGroupWithPolicies' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `BucketWithConnectors` (AWS::Serverless::Function) → `Properties.Tags` L94 in `good_core_resource_attributes_yaml` + > Resource 'BucketWithConnectors' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `BucketWithTransform` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_core_resource_attributes_yaml` + > Resource 'BucketWithTransform' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `CommonCfnAttributes` (AWS::S3::Bucket) → `Properties.Tags` L25 in `good_core_resource_attributes_yaml` + > Resource 'CommonCfnAttributes' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DependsOnList` (AWS::S3::Bucket) → `Properties.Tags` L41 in `good_core_resource_attributes_yaml` + > Resource 'DependsOnList' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DependsOnSingleString` (AWS::S3::Bucket) → `Properties.Tags` L32 in `good_core_resource_attributes_yaml` + > Resource 'DependsOnSingleString' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_custom_is-defined_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedArray` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedArray' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedEmpty` (AWS::Lambda::Function) → `Properties.Tags` L35 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedEmpty' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedGetAttr` (AWS::Lambda::Function) → `Properties.Tags` L45 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedGetAttr' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedObject` (AWS::Lambda::Function) → `Properties.Tags` L55 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedObject' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedRef` (AWS::Lambda::Function) → `Properties.Tags` L66 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedRef' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestDefinedValue` (AWS::Lambda::Function) → `Properties.Tags` L76 in `good_custom_is-defined_yaml` + > Resource 'LambdaFunctionTestDefinedValue' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L6 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedFromParent` (AWS::Lambda::Function) → `Properties.Tags` L20 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedFromParent' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedFromProperties` (AWS::Lambda::Function) → `Properties.Tags` L29 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedFromProperties' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedRefAWSNoValue` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedRefAWSNoValue' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFunctionTestNotDefinedWithSiblings` (AWS::Lambda::Function) → `Properties.Tags` L46 in `good_custom_is-not-defined_yaml` + > Resource 'LambdaFunctionTestNotDefinedWithSiblings' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-large_yaml` + > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L8 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TimeoutInNumericsFunction` (AWS::Lambda::Function) → `Properties.Tags` L23 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'TimeoutInNumericsFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `TimeoutInStringFunction` (AWS::Lambda::Function) → `Properties.Tags` L31 in `good_custom_numeric-inequalities-small_yaml` + > Resource 'TimeoutInStringFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `good_deletion_policies_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `DB` (AWS::RDS::DBInstance) → `Properties.Tags` L9 in `good_deletion_policies_yaml` + > Resource 'DB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_provisioned_yaml` + > Resource 'DDBTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `GoodTable` (AWS::DynamoDB::Table) → `Properties.Tags` L5 in `good_dynamodb_valid_attributes_yaml` + > Resource 'GoodTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Task` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_awsvpc_valid_yaml` + > Resource 'Task' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedEc2SizeThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L198 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedEc2SizeThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedEc2ThenFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L150 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedEc2ThenFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedFargateSizeThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L186 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedFargateSizeThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedFargateThenEc2` (AWS::ECS::TaskDefinition) → `Properties.Tags` L138 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedFargateThenEc2' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CorrelatedOnDemandThenProvisioned` (AWS::DynamoDB::Table) → `Properties.Tags` L174 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedOnDemandThenProvisioned' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `CorrelatedProvisionedThenOnDemand` (AWS::DynamoDB::Table) → `Properties.Tags` L163 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'CorrelatedProvisionedThenOnDemand' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DefaultWithThroughput` (AWS::DynamoDB::Table) → `Properties.Tags` L107 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'DefaultWithThroughput' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `FargateIntCpu` (AWS::ECS::TaskDefinition) → `Properties.Tags` L122 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'FargateIntCpu' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `FargateNullPC` (AWS::ECS::TaskDefinition) → `Properties.Tags` L62 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'FargateNullPC' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `NonFargateTask` (AWS::ECS::TaskDefinition) → `Properties.Tags` L47 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'NonFargateTask' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `PayPerRequestTable` (AWS::DynamoDB::Table) → `Properties.Tags` L78 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'PayPerRequestTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ProvisionedTable` (AWS::DynamoDB::Table) → `Properties.Tags` L91 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ProvisionedTable' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `ValidFargate` (AWS::ECS::TaskDefinition) → `Properties.Tags` L10 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ValidFargate' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ValidFargateSplunk` (AWS::ECS::TaskDefinition) → `Properties.Tags` L30 in `good_ecs_fargate_ddb_valid_yaml` + > Resource 'ValidFargateSplunk' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_valid_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Service` (AWS::ECS::Service) → `Properties.Tags` L18 in `good_ecs_fargate_yaml` + > Resource 'Service' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L5 in `good_ecs_fargate_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `ELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L7 in `good_elb_https_empty_sslcertificateid_yaml` + > Resource 'ELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `good_functions_dynamic_reference_embedded_yaml` + > Resource 'Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `ScheduledRule` (AWS::Events::Rule) → `Properties.Tags` L25 in `good_functions_dynamic_reference_embedded_yaml` + > Resource 'ScheduledRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Cluster0` (AWS::ECS::Cluster) → `Properties.Tags` L13 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster0' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster1` (AWS::ECS::Cluster) → `Properties.Tags` L21 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster1' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L29 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L37 in `good_functions_findinmap_default_value_yaml` + > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Mesh0` (AWS::AppMesh::Mesh) → `Properties.Tags` L45 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh0' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh1` (AWS::AppMesh::Mesh) → `Properties.Tags` L61 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh1' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L72 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh3` (AWS::AppMesh::Mesh) → `Properties.Tags` L83 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh3' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh4` (AWS::AppMesh::Mesh) → `Properties.Tags` L95 in `good_functions_findinmap_default_value_yaml` + > Resource 'Mesh4' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L48 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster2` (AWS::ECS::Cluster) → `Properties.Tags` L80 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster2' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Cluster3` (AWS::ECS::Cluster) → `Properties.Tags` L102 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Cluster3' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `Mesh` (AWS::AppMesh::Mesh) → `Properties.Tags` L22 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Mesh' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Mesh2` (AWS::AppMesh::Mesh) → `Properties.Tags` L35 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Mesh2' of type 'AWS::AppMesh::Mesh' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L61 in `good_functions_findinmap_enhanced_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `myInstance1` (AWS::EC2::Instance) → `Properties.Tags` L13 in `good_functions_findinmap_yaml` + > Resource 'myInstance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance2` (AWS::EC2::Instance) → `Properties.Tags` L17 in `good_functions_findinmap_yaml` + > Resource 'myInstance2' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myInstance3` (AWS::EC2::Instance) → `Properties.Tags` L25 in `good_functions_findinmap_yaml` + > Resource 'myInstance3' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `S3BucketA` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketA' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `S3BucketB` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketB' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `S3BucketC` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_functions_foreach_yaml` + > Resource 'S3BucketC' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Topic1` (AWS::SNS::Topic) → `Properties.Tags` L15 in `good_functions_get_stack_output_yaml` + > Resource 'Topic1' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic10` (AWS::SNS::Topic) → `Properties.Tags` L106 in `good_functions_get_stack_output_yaml` + > Resource 'Topic10' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic2` (AWS::SNS::Topic) → `Properties.Tags` L23 in `good_functions_get_stack_output_yaml` + > Resource 'Topic2' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic3` (AWS::SNS::Topic) → `Properties.Tags` L33 in `good_functions_get_stack_output_yaml` + > Resource 'Topic3' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic4` (AWS::SNS::Topic) → `Properties.Tags` L44 in `good_functions_get_stack_output_yaml` + > Resource 'Topic4' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic5` (AWS::SNS::Topic) → `Properties.Tags` L55 in `good_functions_get_stack_output_yaml` + > Resource 'Topic5' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic6` (AWS::SNS::Topic) → `Properties.Tags` L65 in `good_functions_get_stack_output_yaml` + > Resource 'Topic6' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic7` (AWS::SNS::Topic) → `Properties.Tags` L74 in `good_functions_get_stack_output_yaml` + > Resource 'Topic7' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic8` (AWS::SNS::Topic) → `Properties.Tags` L83 in `good_functions_get_stack_output_yaml` + > Resource 'Topic8' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Topic9` (AWS::SNS::Topic) → `Properties.Tags` L95 in `good_functions_get_stack_output_yaml` + > Resource 'Topic9' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ConfigApplication` (AWS::AppConfig::Application) → `Properties.Tags` L25 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'ConfigApplication' of type 'AWS::AppConfig::Application' supports Tags but none are configured +- **I9040** `ConfigEnvironment` (AWS::AppConfig::Environment) → `Properties.Tags` L30 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'ConfigEnvironment' of type 'AWS::AppConfig::Environment' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L35 in `good_functions_relationship_conditions_sam_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `AMIIDLookup` (AWS::Lambda::Function) → `Properties.Tags` L36 in `good_functions_relationship_conditions_yaml` + > Resource 'AMIIDLookup' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L14 in `good_functions_relationship_conditions_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_functions_select_string_index_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_functions_select_string_index_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L27 in `good_functions_select_string_index_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `TestRole` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_functions_sub_needed_custom_excludes_yaml` + > Resource 'TestRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IOTPolicies` (AWS::IoT::Policy) → `Properties.Tags` L120 in `good_functions_sub_needed_yaml` + > Resource 'IOTPolicies' of type 'AWS::IoT::Policy' supports Tags but none are configured +- **I9040** `Key` (AWS::ApiGateway::ApiKey) → `Properties.Tags` L84 in `good_functions_sub_needed_yaml` + > Resource 'Key' of type 'AWS::ApiGateway::ApiKey' supports Tags but none are configured +- **I9040** `TestGoodStateMachine1` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L139 in `good_functions_sub_needed_yaml` + > Resource 'TestGoodStateMachine1' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `MyStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L66 in `good_functions_sub_yaml` + > Resource 'MyStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `myAlb` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L51 in `good_functions_sub_yaml` + > Resource 'myAlb' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L32 in `good_functions_sub_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `mySubStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L43 in `good_functions_sub_yaml` + > Resource 'mySubStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `myVPc2` (AWS::EC2::VPC) → `Properties.Tags` L71 in `good_functions_sub_yaml` + > Resource 'myVPc2' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `ElasticIP` (AWS::EC2::EIP) → `Properties.Tags` L119 in `good_generic_yaml` + > Resource 'ElasticIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `ElasticLoadBalancer` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L123 in `good_generic_yaml` + > Resource 'ElasticLoadBalancer' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L144 in `good_generic_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `LambdaFunction` (AWS::Lambda::Function) → `Properties.Tags` L162 in `good_generic_yaml` + > Resource 'LambdaFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `MyEC2Instance` (AWS::EC2::Instance) → `Properties.Tags` L74 in `good_generic_yaml` + > Resource 'MyEC2Instance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `MyEC2Instance1` (AWS::EC2::Instance) → `Properties.Tags` L94 in `good_generic_yaml` + > Resource 'MyEC2Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_generic_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `mySnsTopic` (AWS::SNS::Topic) → `Properties.Tags` L90 in `good_generic_yaml` + > Resource 'mySnsTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ProvisionedProduct` (AWS::ServiceCatalog::CloudFormationProvisionedProduct) → `Properties.Tags` L8 in `good_getatt_provisioned_product_outputs_yaml` + > Resource 'ProvisionedProduct' of type 'AWS::ServiceCatalog::CloudFormationProvisionedProduct' supports Tags but none are configured +- **I9040** `Topic` (AWS::SNS::Topic) → `Properties.Tags` L13 in `good_getatt_provisioned_product_outputs_yaml` + > Resource 'Topic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SubnetApEast2` (AWS::EC2::Subnet) → `Properties.Tags` L9 in `good_getazs_resolves_current_regions_yaml` + > Resource 'SubnetApEast2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetMxCentral1` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `good_getazs_resolves_current_regions_yaml` + > Resource 'SubnetMxCentral1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `ProdBucket` (AWS::S3::Bucket) → `Properties.Tags` L22 in `good_good_conditions_valid_refs_yaml` + > Resource 'ProdBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RoleInlinePolicy` (AWS::IAM::Role) → `Properties.Tags` L16 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Resource 'RoleInlinePolicy' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `SSOPermissionSet` (AWS::SSO::PermissionSet) → `Properties.Tags` L75 in `good_iam_intrinsic_resource_arns_schema_valid_yaml` + > Resource 'SSOPermissionSet' of type 'AWS::SSO::PermissionSet' supports Tags but none are configured +- **I9040** `SomeBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_iam_intrinsic_resource_arns_yaml` + > Resource 'SomeBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L18 in `good_iam_valid_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TopicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L18 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicAliasName` (AWS::SNS::Topic) → `Properties.Tags` L14 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicAliasName' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicIntrinsicAliasArn` (AWS::SNS::Topic) → `Properties.Tags` L30 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicIntrinsicAliasArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicKeyId` (AWS::SNS::Topic) → `Properties.Tags` L6 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicMultiRegionKeyArn` (AWS::SNS::Topic) → `Properties.Tags` L26 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicMultiRegionKeyArn' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `TopicMultiRegionKeyId` (AWS::SNS::Topic) → `Properties.Tags` L22 in `good_kms_key_identifier_forms_yaml` + > Resource 'TopicMultiRegionKeyId' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `SnapStartFunc` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_snapstart_yaml` + > Resource 'SnapStartFunc' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaFn` (AWS::Lambda::Function) → `Properties.Tags` L5 in `good_lambda_zipfile_yaml` + > Resource 'LambdaFn' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `mySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L20 in `good_mappings_used_yaml` + > Resource 'mySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `R` (AWS::S3::Bucket) → `Properties.Tags` L9 in `good_mappings_valid_yaml` + > Resource 'R' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `IamPipeline` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_minimal_yaml` + > Resource 'IamPipeline' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `OtherResource` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_modules_minimal_yaml` + > Resource 'OtherResource' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Instance` (AWS::Neptune::DBInstance) → `Properties.Tags` L4 in `good_neptune_valid_instanceclass_yaml` + > Resource 'Instance' of type 'AWS::Neptune::DBInstance' supports Tags but none are configured +- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `good_no_value_yaml` + > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Cluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L8 in `good_no_w3010_on_unlisted_type_yaml` + > Resource 'Cluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured +- **I9040** `Queue` (AWS::SQS::Queue) → `Properties.Tags` L17 in `good_output_value_string_yaml` + > Resource 'Queue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L16 in `good_override_complete_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_complete_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `untaggedInstance` (AWS::EC2::Instance) → `Properties.Tags` L12 in `good_override_complete_yaml` + > Resource 'untaggedInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `myS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_override_required_yaml` + > Resource 'myS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_param_constraints_valid_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_parameters_not_used_parameters_yaml` + > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyAPI` (AWS::Serverless::Api) → `Properties.Tags` L15 in `good_parameters_used_transform_removed_yaml` + > Resource 'MyAPI' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `SomeLambda` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_parameters_used_transforms_yaml` + > Resource 'SomeLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `mySubnet21` (AWS::EC2::Subnet) → `Properties.Tags` L56 in `good_properties_ec2_vpc_yaml` + > Resource 'mySubnet21' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `mySubnet22` (AWS::EC2::Subnet) → `Properties.Tags` L64 in `good_properties_ec2_vpc_yaml` + > Resource 'mySubnet22' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `myVpc1` (AWS::EC2::VPC) → `Properties.Tags` L31 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc1' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc2` (AWS::EC2::VPC) → `Properties.Tags` L36 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc2' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc3` (AWS::EC2::VPC) → `Properties.Tags` L41 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc3' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc4` (AWS::EC2::VPC) → `Properties.Tags` L46 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc4' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `myVpc5` (AWS::EC2::VPC) → `Properties.Tags` L51 in `good_properties_ec2_vpc_yaml` + > Resource 'myVpc5' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `NatGW` (AWS::EC2::NatGateway) → `Properties.Tags` L29 in `good_redshift_private_yaml` + > Resource 'NatGW' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `RedshiftSubnetGroup` (AWS::Redshift::ClusterSubnetGroup) → `Properties.Tags` L14 in `good_redshift_private_yaml` + > Resource 'RedshiftSubnetGroup' of type 'AWS::Redshift::ClusterSubnetGroup' supports Tags but none are configured +- **I9040** `RouteTable1` (AWS::EC2::RouteTable) → `Properties.Tags` L20 in `good_redshift_private_yaml` + > Resource 'RouteTable1' of type 'AWS::EC2::RouteTable' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L5 in `good_redshift_private_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `VPC` (AWS::EC2::VPC) → `Properties.Tags` L10 in `good_redshift_private_yaml` + > Resource 'VPC' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `Cluster` (AWS::Redshift::Cluster) → `Properties.Tags` L4 in `good_redshift_valid_nodetype_yaml` + > Resource 'Cluster' of type 'AWS::Redshift::Cluster' supports Tags but none are configured +- **I9040** `Pool` (AWS::DeviceFarm::DevicePool) → `Properties.Tags` L12 in `good_region_conditional_resource_type_yaml` + > Resource 'Pool' of type 'AWS::DeviceFarm::DevicePool' supports Tags but none are configured +- **I9040** `NestedStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L8 in `good_resources_cloudformation_nested_stack_dynamic_yaml` + > Resource 'NestedStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Stack3` (AWS::CloudFormation::Stack) → `Properties.Tags` L39 in `good_resources_cloudformation_stacks_yaml` + > Resource 'Stack3' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackInvalidPath` (AWS::CloudFormation::Stack) → `Properties.Tags` L31 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackInvalidPath' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackIsWebUrl` (AWS::CloudFormation::Stack) → `Properties.Tags` L15 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackIsWebUrl' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackNormal` (AWS::CloudFormation::Stack) → `Properties.Tags` L7 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackNormal' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `StackUrlIsObject` (AWS::CloudFormation::Stack) → `Properties.Tags` L23 in `good_resources_cloudformation_stacks_yaml` + > Resource 'StackUrlIsObject' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CloudFrontDistribution` (AWS::CloudFront::Distribution) → `Properties.Tags` L5 in `good_resources_cloudfront_aliases_yaml` + > Resource 'CloudFrontDistribution' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `TestPipeline` (AWS::CodePipeline::Pipeline) → `Properties.Tags` L7 in `good_resources_codepipeline_yaml` + > Resource 'TestPipeline' of type 'AWS::CodePipeline::Pipeline' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_deletionpolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L6 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L18 in `good_resources_dynamodb_attributes_transform_object_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.Tags` L9 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformAttributeDefinitions' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.Tags` L31 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformBoth' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.Tags` L20 in `good_resources_dynamodb_attributes_transform_yaml` + > Resource 'DDBTableTransformKeySchema' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable1` (AWS::DynamoDB::Table) → `Properties.Tags` L8 in `good_resources_dynamodb_attributes_yaml` + > Resource 'DDBTable1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `DDBTable2` (AWS::DynamoDB::Table) → `Properties.Tags` L36 in `good_resources_dynamodb_attributes_yaml` + > Resource 'DDBTable2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `BasicReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L50 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'BasicReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FifthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L125 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FifthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `FourthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L108 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'FourthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `MyClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L25 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyNonClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L33 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyNonClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyOptionalClusterParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L42 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyOptionalClusterParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `MyParameterGroup` (AWS::ElastiCache::ParameterGroup) → `Properties.Tags` L17 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'MyParameterGroup' of type 'AWS::ElastiCache::ParameterGroup' supports Tags but none are configured +- **I9040** `SecondReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L69 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SecondReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `SixthReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L142 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'SixthReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `ThirdReplicationGroup` (AWS::ElastiCache::ReplicationGroup) → `Properties.Tags` L89 in `good_resources_elasticache_cache_cluster_failover_yaml` + > Resource 'ThirdReplicationGroup' of type 'AWS::ElastiCache::ReplicationGroup' supports Tags but none are configured +- **I9040** `IAMInstanceProfile` (AWS::CloudFormation::Stack) → `Properties.Tags` L5 in `good_resources_iam_instance_profile_yaml` + > Resource 'IAMInstanceProfile' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `Instance` (AWS::CloudFormation::Stack) → `Properties.Tags` L9 in `good_resources_iam_instance_profile_yaml` + > Resource 'Instance' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `CodeBuildProject` (AWS::CodeBuild::Project) → `Properties.Tags` L6 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildProject' of type 'AWS::CodeBuild::Project' supports Tags but none are configured +- **I9040** `CodeBuildRole` (AWS::IAM::Role) → `Properties.Tags` L35 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `CodeBuildSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L78 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `CodeBuildSubnet` (AWS::EC2::Subnet) → `Properties.Tags` L72 in `good_resources_iam_ref_with_path_yaml` + > Resource 'CodeBuildSubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Ecr` (AWS::ECR::Repository) → `Properties.Tags` L6 in `good_resources_iam_resource_policy_yaml` + > Resource 'Ecr' of type 'AWS::ECR::Repository' supports Tags but none are configured +- **I9040** `Function1` (AWS::Lambda::Function) → `Properties.Tags` L6 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function1' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function2` (AWS::Lambda::Function) → `Properties.Tags` L15 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function2' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Function3` (AWS::Lambda::Function) → `Properties.Tags` L25 in `good_resources_lambda_required_properties_yaml` + > Resource 'Function3' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `myInstance` (AWS::EC2::Instance) → `Properties.Tags` L5 in `good_resources_name_yaml` + > Resource 'myInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L76 in `good_resources_primary_identifiers_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L81 in `good_resources_primary_identifiers_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `RootRole` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole3` (AWS::IAM::Role) → `Properties.Tags` L30 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RootRole4` (AWS::IAM::Role) → `Properties.Tags` L53 in `good_resources_primary_identifiers_yaml` + > Resource 'RootRole4' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TESTROLE` (AWS::IAM::Role) → `Properties.Tags` L7 in `good_resources_properties_allowed_pattern_yaml` + > Resource 'TESTROLE' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Instance` (AWS::EC2::Subnet) → `Properties.Tags` L6 in `good_resources_properties_az_cdk_yaml` + > Resource 'Instance' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Alarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L11 in `good_resources_properties_exclusive_yaml` + > Resource 'Alarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `good_resources_properties_hard_coded_arn_properties_cdk_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IngestionPipeline` (AWS::OSIS::Pipeline) → `Properties.Tags` L88 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'IngestionPipeline' of type 'AWS::OSIS::Pipeline' supports Tags but none are configured +- **I9040** `S3BadBucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'S3BadBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SampleRole` (AWS::IAM::Role) → `Properties.Tags` L31 in `good_resources_properties_hard_coded_arn_properties_sam_yaml` + > Resource 'SampleRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Stack` (AWS::CloudFormation::Stack) → `Properties.Tags` L13 in `good_resources_properties_hard_coded_arn_properties_yaml` + > Resource 'Stack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `IamRole` (AWS::IAM::Role) → `Properties.Tags` L15 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IamRoleWithConditions` (AWS::IAM::Role) → `Properties.Tags` L24 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRoleWithConditions' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `IamRoleWithNestedConditions` (AWS::IAM::Role) → `Properties.Tags` L36 in `good_resources_properties_list_duplicates_yaml` + > Resource 'IamRoleWithNestedConditions' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyDB` (AWS::RDS::DBInstance) → `Properties.Tags` L17 in `good_resources_properties_password_yaml` + > Resource 'MyDB' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyIAMUser` (AWS::IAM::User) → `Properties.Tags` L44 in `good_resources_properties_password_yaml` + > Resource 'MyIAMUser' of type 'AWS::IAM::User' supports Tags but none are configured +- **I9040** `myNewDb` (AWS::RDS::DBInstance) → `Properties.Tags` L26 in `good_resources_properties_password_yaml` + > Resource 'myNewDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myThirdDb` (AWS::RDS::DBInstance) → `Properties.Tags` L35 in `good_resources_properties_password_yaml` + > Resource 'myThirdDb' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `myRepository` (AWS::CodeCommit::Repository) → `Properties.Tags` L6 in `good_resources_properties_string_size_yaml` + > Resource 'myRepository' of type 'AWS::CodeCommit::Repository' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_resources_properties_templated_code_sam_yaml` + > Resource 'Function' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `AppSync` (AWS::AppSync::GraphQLApi) → `Properties.Tags` L4 in `good_resources_properties_templated_code_yaml` + > Resource 'AppSync' of type 'AWS::AppSync::GraphQLApi' supports Tags but none are configured +- **I9040** `DBInstance1` (AWS::RDS::DBInstance) → `Properties.Tags` L12 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance1' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance2` (AWS::RDS::DBInstance) → `Properties.Tags` L18 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance2' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance3` (AWS::RDS::DBInstance) → `Properties.Tags` L24 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance3' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance4` (AWS::RDS::DBInstance) → `Properties.Tags` L31 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance4' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance5` (AWS::RDS::DBInstance) → `Properties.Tags` L38 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance5' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DBInstance6` (AWS::RDS::DBInstance) → `Properties.Tags` L44 in `good_resources_rds_instance_sizes_yaml` + > Resource 'DBInstance6' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_resources_s3_access-control-obsolete_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `FunctionRole` (AWS::IAM::Role) → `Properties.Tags` L39 in `good_resources_update_policy_supported_yaml` + > Resource 'FunctionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `MyASG` (AWS::AutoScaling::AutoScalingGroup) → `Properties.Tags` L8 in `good_resources_update_policy_supported_yaml` + > Resource 'MyASG' of type 'AWS::AutoScaling::AutoScalingGroup' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Lambda::Function) → `Properties.Tags` L28 in `good_resources_update_policy_supported_yaml` + > Resource 'MyFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L33 in `good_resources_updatereplacepolicy_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L5 in `good_sam_api_stagename_valid_yaml` + > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_sam_connector_valid_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyTopic` (AWS::SNS::Topic) → `Properties.Tags` L3 in `good_sam_connector_valid_yaml` + > Resource 'MyTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_deploymentpreference_with_alias_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_dlq_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_image_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_provisioned_concurrency_with_alias_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L9 in `good_sam_function_runtime_handler_via_globals_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_url_config_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_function_zip_valid_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L19 in `good_sam_globals_all_valid_sections_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Fn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_globals_empty_yaml` + > Resource 'Fn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `AliasParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_alias_ref_yaml` + > Resource 'AliasParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_alias_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ApiIdParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'ApiIdParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `ApiSubParam` (AWS::SSM::Parameter) → `Properties.Tags` L22 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'ApiSubParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_httpapi_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L5 in `good_sam_implicit_restapi_stage_ref_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `StageParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_restapi_stage_ref_yaml` + > Resource 'StageParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyFn` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'MyFn' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `RoleArnParam` (AWS::SSM::Parameter) → `Properties.Tags` L12 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'RoleArnParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `RoleRefParam` (AWS::SSM::Parameter) → `Properties.Tags` L17 in `good_sam_implicit_role_getatt_dependson_yaml` + > Resource 'RoleRefParam' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_no_primarykey_yaml` + > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured +- **I9040** `MyTable` (AWS::Serverless::SimpleTable) → `Properties.Tags` L5 in `good_sam_simpletable_valid_yaml` + > Resource 'MyTable' of type 'AWS::Serverless::SimpleTable' supports Tags but none are configured +- **I9040** `MySM` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_sam_statemachine_definition_only_yaml` + > Resource 'MySM' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L5 in `good_schema_valid_resources_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L9 in `good_schema_valid_resources_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_simple_sub_prefix_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `FunctionA` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionA' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionALogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L24 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionALogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionB` (AWS::Serverless::Function) → `Properties.Tags` L30 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionB' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionBLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L36 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionBLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FunctionC` (AWS::Serverless::Function) → `Properties.Tags` L41 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionC' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `FunctionCLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L47 in `good_some_logs_stream_lambda_yaml` + > Resource 'FunctionCLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `LogSubscriptionFunction` (AWS::Serverless::Function) → `Properties.Tags` L53 in `good_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LogSubscriptionFunctionLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L75 in `good_some_logs_stream_lambda_yaml` + > Resource 'LogSubscriptionFunctionLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L5 in `good_sqs_fifo_valid_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `Doc` (AWS::SSM::Document) → `Properties.Tags` L5 in `good_ssm_document_valid_yaml` + > Resource 'Doc' of type 'AWS::SSM::Document' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L10 in `good_ssm_parameter_name_type_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SM` (AWS::StepFunctions::StateMachine) → `Properties.Tags` L5 in `good_stepfunctions_valid_yaml` + > Resource 'SM' of type 'AWS::StepFunctions::StateMachine' supports Tags but none are configured +- **I9040** `JoinedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L23 in `good_string_length_unknowable_values_json` + > Resource 'JoinedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `JoinedFromAReference` (AWS::S3::Bucket) → `Properties.Tags` L15 in `good_string_length_unknowable_values_json` + > Resource 'JoinedFromAReference' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest` (AWS::SNS::Topic) → `Properties.Tags` L10 in `good_string_length_unknowable_values_json` + > Resource 'NameProviderWithADeliberatelyLongLogicalIdentifierForThisTest' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `OnlySomeChoicesTooLong` (AWS::S3::Bucket) → `Properties.Tags` L43 in `good_string_length_unknowable_values_json` + > Resource 'OnlySomeChoicesTooLong' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `SubstitutedFromAParameter` (AWS::S3::Bucket) → `Properties.Tags` L37 in `good_string_length_unknowable_values_json` + > Resource 'SubstitutedFromAParameter' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket` (AWS::S3::Bucket) → `Properties.Tags` L8 in `good_sub_not_needed_yaml` + > Resource 'Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `App1` (AWS::Serverless::Application) → `Properties.Tags` L5 in `good_transform_applications_location_yaml` + > Resource 'App1' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `App2` (AWS::Serverless::Application) → `Properties.Tags` L9 in `good_transform_applications_location_yaml` + > Resource 'App2' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L22 in `good_transform_auto_publish_alias_yaml` + > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SkillFunction2` (AWS::Serverless::Function) → `Properties.Tags` L31 in `good_transform_auto_publish_alias_yaml` + > Resource 'SkillFunction2' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_auto_publish_code_sha256_yaml` + > Resource 'LambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L18 in `good_transform_function_use_s3_uri_yaml` + > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `HelloWorldFunction` (AWS::Serverless::Function) → `Properties.Tags` L6 in `good_transform_function_using_image_yaml` + > Resource 'HelloWorldFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `MySubnet` (AWS::EC2::Subnet) → `Properties.Tags` L96 in `good_transform_language_extension_yaml` + > Resource 'MySubnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `PolicyList` (AWS::RDS::DBInstance) → `Properties.Tags` L55 in `good_transform_language_extension_yaml` + > Resource 'PolicyList' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `SecurityGroups` (AWS::EC2::SecurityGroup) → `Properties.Tags` L90 in `good_transform_language_extension_yaml` + > Resource 'SecurityGroups' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `TestLambdaFunction` (AWS::Serverless::Function) → `Properties.Tags` L80 in `good_transform_language_extension_yaml` + > Resource 'TestLambdaFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `TestStateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L67 in `good_transform_language_extension_yaml` + > Resource 'TestStateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `Function` (AWS::Serverless::Function) → `Properties.Tags` L16 in `good_transform_list_transform_many_yaml` + > Resource 'Function' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Lambda::Function) → `Properties.Tags` L9 in `good_transform_list_transform_not_sam_yaml` + > Resource 'SkillFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `SkillFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_list_transform_yaml` + > Resource 'SkillFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L23 in `good_transform_serverless_api_yaml` + > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_serverless_api_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `LiteralAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L10 in `good_transform_serverless_auto_publish_alias_yaml` + > Resource 'LiteralAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ParameterAliasFunction` (AWS::Serverless::Function) → `Properties.Tags` L17 in `good_transform_serverless_auto_publish_alias_yaml` + > Resource 'ParameterAliasFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myApi` (AWS::Serverless::Api) → `Properties.Tags` L7 in `good_transform_serverless_function_yaml` + > Resource 'myApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `myBucket` (AWS::S3::Bucket) → `Properties.Tags` L73 in `good_transform_serverless_function_yaml` + > Resource 'myBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L11 in `good_transform_serverless_function_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `myFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_globals_yaml` + > Resource 'myFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_supported_runtime_yaml` + > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `IgnoredFunction` (AWS::Serverless::Function) → `Properties.Tags` L12 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'IgnoredFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `InheritsGlobalsFunction` (AWS::Serverless::Function) → `Properties.Tags` L26 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'InheritsGlobalsFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `SelectiveIgnoreFunction` (AWS::Serverless::Function) → `Properties.Tags` L20 in `good_transform_serverless_ignore_globals_yaml` + > Resource 'SelectiveIgnoreFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `StateMachine` (AWS::Serverless::StateMachine) → `Properties.Tags` L5 in `good_transform_step_function_local_definition_yaml` + > Resource 'StateMachine' of type 'AWS::Serverless::StateMachine' supports Tags but none are configured +- **I9040** `AppName` (AWS::Serverless::Application) → `Properties.Tags` L20 in `good_transform_yaml` + > Resource 'AppName' of type 'AWS::Serverless::Application' supports Tags but none are configured +- **I9040** `MyServerlessFunctionLogicalID` (AWS::Serverless::Function) → `Properties.Tags` L7 in `good_transform_yaml` + > Resource 'MyServerlessFunctionLogicalID' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `ImportedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L34 in `good_unique_items_deploy_time_values_json` + > Resource 'ImportedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `SelectedSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L44 in `good_unique_items_deploy_time_values_json` + > Resource 'SelectedSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `StackOutputSubnets` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L12 in `good_unique_items_deploy_time_values_json` + > Resource 'StackOutputSubnets' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L24 in `good_vpc_subnets_yaml` + > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SubnetA` (AWS::EC2::Subnet) → `Properties.Tags` L12 in `good_vpc_subnets_yaml` + > Resource 'SubnetA' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `SubnetB` (AWS::EC2::Subnet) → `Properties.Tags` L18 in `good_vpc_subnets_yaml` + > Resource 'SubnetB' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L4 in `integration_availability-zones_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `KMS` (AWS::KMS::Key) → `Properties.Tags` L3 in `integration_aws-dynamodb-table_yaml` + > Resource 'KMS' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `Table1` (AWS::DynamoDB::Table) → `Properties.Tags` L11 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table1' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Table2` (AWS::DynamoDB::Table) → `Properties.Tags` L30 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table2' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `Table3` (AWS::DynamoDB::Table) → `Properties.Tags` L49 in `integration_aws-dynamodb-table_yaml` + > Resource 'Table3' of type 'AWS::DynamoDB::Table' supports Tags but none are configured +- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L4 in `integration_aws-ec2-instance_yaml` + > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured +- **I9040** `NetworkInterface` (AWS::EC2::NetworkInterface) → `Properties.Tags` L9 in `integration_aws-ec2-networkinterface_yaml` + > Resource 'NetworkInterface' of type 'AWS::EC2::NetworkInterface' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L7 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L13 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet3` (AWS::EC2::Subnet) → `Properties.Tags` L17 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet3' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet4` (AWS::EC2::Subnet) → `Properties.Tags` L22 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet4' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet5` (AWS::EC2::Subnet) → `Properties.Tags` L28 in `integration_aws-ec2-subnet_yaml` + > Resource 'Subnet5' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Function` (AWS::Lambda::Function) → `Properties.Tags` L4 in `integration_aws-lambda-function_yaml` + > Resource 'Function' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `Role` (AWS::IAM::Role) → `Properties.Tags` L10 in `integration_aws-lambda-function_yaml` + > Resource 'Role' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `AuroraCluster` (AWS::RDS::DBCluster) → `Properties.Tags` L111 in `integration_cfn-gather_yaml` + > Resource 'AuroraCluster' of type 'AWS::RDS::DBCluster' supports Tags but none are configured +- **I9040** `AwsvpcTaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L26 in `integration_cfn-gather_yaml` + > Resource 'AwsvpcTaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `BadEngineInstance` (AWS::RDS::DBInstance) → `Properties.Tags` L117 in `integration_cfn-gather_yaml` + > Resource 'BadEngineInstance' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `FargateService` (AWS::ECS::Service) → `Properties.Tags` L16 in `integration_cfn-gather_yaml` + > Resource 'FargateService' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `FifoMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L104 in `integration_cfn-gather_yaml` + > Resource 'FifoMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `FifoProcessor` (AWS::Lambda::Function) → `Properties.Tags` L93 in `integration_cfn-gather_yaml` + > Resource 'FifoProcessor' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L39 in `integration_cfn-gather_yaml` + > Resource 'FifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `RestApi` (AWS::ApiGateway::RestApi) → `Properties.Tags` L52 in `integration_cfn-gather_yaml` + > Resource 'RestApi' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `RestApi2` (AWS::ApiGateway::RestApi) → `Properties.Tags` L73 in `integration_cfn-gather_yaml` + > Resource 'RestApi2' of type 'AWS::ApiGateway::RestApi' supports Tags but none are configured +- **I9040** `ServiceNoNetConfig` (AWS::ECS::Service) → `Properties.Tags` L34 in `integration_cfn-gather_yaml` + > Resource 'ServiceNoNetConfig' of type 'AWS::ECS::Service' supports Tags but none are configured +- **I9040** `SqsFifoQueue` (AWS::SQS::Queue) → `Properties.Tags` L88 in `integration_cfn-gather_yaml` + > Resource 'SqsFifoQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `StageBadApi` (AWS::ApiGateway::Stage) → `Properties.Tags` L81 in `integration_cfn-gather_yaml` + > Resource 'StageBadApi' of type 'AWS::ApiGateway::Stage' supports Tags but none are configured +- **I9040** `StandardDLQ` (AWS::SQS::Queue) → `Properties.Tags` L47 in `integration_cfn-gather_yaml` + > Resource 'StandardDLQ' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `TaskDef` (AWS::ECS::TaskDefinition) → `Properties.Tags` L6 in `integration_cfn-gather_yaml` + > Resource 'TaskDef' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `KmsKey` (AWS::KMS::Key) → `Properties.Tags` L6 in `integration_custom-resources_yaml` + > Resource 'KmsKey' of type 'AWS::KMS::Key' supports Tags but none are configured +- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L33 in `integration_deployment-file-template_yaml` + > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L27 in `integration_deployment-file-template_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L23 in `integration_deployment-file-template_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `Broker` (AWS::AmazonMQ::Broker) → `Properties.Tags` L20 in `integration_dynamic-references_yaml` + > Resource 'Broker' of type 'AWS::AmazonMQ::Broker' supports Tags but none are configured +- **I9040** `SESEventSourceMapping` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L6 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMapping' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `SESEventSourceMappingBadDynamicReference` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L13 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMappingBadDynamicReference' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `SESEventSourceMappingSpaces` (AWS::Lambda::EventSourceMapping) → `Properties.Tags` L34 in `integration_dynamic-references_yaml` + > Resource 'SESEventSourceMappingSpaces' of type 'AWS::Lambda::EventSourceMapping' supports Tags but none are configured +- **I9040** `Instance1` (AWS::EC2::Instance) → `Properties.Tags` L27 in `integration_formats_yaml` + > Resource 'Instance1' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `SecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L21 in `integration_formats_yaml` + > Resource 'SecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Subnet` (AWS::EC2::Subnet) → `Properties.Tags` L15 in `integration_formats_yaml` + > Resource 'Subnet' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L10 in `integration_formats_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `InvalidMissing` (AWS::SNS::Topic) → `Properties.Tags` L45 in `integration_get-stack-output_yaml` + > Resource 'InvalidMissing' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `InvalidType` (AWS::SNS::Topic) → `Properties.Tags` L52 in `integration_get-stack-output_yaml` + > Resource 'InvalidType' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidIf` (AWS::SNS::Topic) → `Properties.Tags` L34 in `integration_get-stack-output_yaml` + > Resource 'ValidIf' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidJoin` (AWS::SNS::Topic) → `Properties.Tags` L23 in `integration_get-stack-output_yaml` + > Resource 'ValidJoin' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `ValidTopic` (AWS::SNS::Topic) → `Properties.Tags` L15 in `integration_get-stack-output_yaml` + > Resource 'ValidTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `DocDBCluster` (AWS::DocDB::DBCluster) → `Properties.Tags` L23 in `integration_getatt-types_yaml` + > Resource 'DocDBCluster' of type 'AWS::DocDB::DBCluster' supports Tags but none are configured +- **I9040** `SsmParameter` (AWS::SSM::Parameter) → `Properties.Tags` L16 in `integration_getatt-types_yaml` + > Resource 'SsmParameter' of type 'AWS::SSM::Parameter' supports Tags but none are configured +- **I9040** `TestCluster` (AWS::ECS::Cluster) → `Properties.Tags` L25 in `integration_getatt-types_yaml` + > Resource 'TestCluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `TestFargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L29 in `integration_getatt-types_yaml` + > Resource 'TestFargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TestFargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L42 in `integration_getatt-types_yaml` + > Resource 'TestFargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `TestLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L50 in `integration_getatt-types_yaml` + > Resource 'TestLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `TestTaskDefinitionWithGetAtt` (AWS::ECS::TaskDefinition) → `Properties.Tags` L56 in `integration_getatt-types_yaml` + > Resource 'TestTaskDefinitionWithGetAtt' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `CloudFront2` (AWS::CloudFront::Distribution) → `Properties.Tags` L42 in `integration_ref-no-value_yaml` + > Resource 'CloudFront2' of type 'AWS::CloudFront::Distribution' supports Tags but none are configured +- **I9040** `IamRole3` (AWS::IAM::Role) → `Properties.Tags` L31 in `integration_ref-no-value_yaml` + > Resource 'IamRole3' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Cluster` (AWS::ECS::Cluster) → `Properties.Tags` L7 in `integration_ref-types_yaml` + > Resource 'Cluster' of type 'AWS::ECS::Cluster' supports Tags but none are configured +- **I9040** `FargateExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L11 in `integration_ref-types_yaml` + > Resource 'FargateExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `FargateTaskRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `integration_ref-types_yaml` + > Resource 'FargateTaskRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `LoadBalancer` (AWS::ElasticLoadBalancingV2::LoadBalancer) → `Properties.Tags` L57 in `integration_ref-types_yaml` + > Resource 'LoadBalancer' of type 'AWS::ElasticLoadBalancingV2::LoadBalancer' supports Tags but none are configured +- **I9040** `LogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L65 in `integration_ref-types_yaml` + > Resource 'LogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `SecurityGroup1` (AWS::EC2::SecurityGroup) → `Properties.Tags` L48 in `integration_ref-types_yaml` + > Resource 'SecurityGroup1' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SecurityGroup2` (AWS::EC2::SecurityGroup) → `Properties.Tags` L53 in `integration_ref-types_yaml` + > Resource 'SecurityGroup2' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `Subnet1` (AWS::EC2::Subnet) → `Properties.Tags` L38 in `integration_ref-types_yaml` + > Resource 'Subnet1' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `Subnet2` (AWS::EC2::Subnet) → `Properties.Tags` L43 in `integration_ref-types_yaml` + > Resource 'Subnet2' of type 'AWS::EC2::Subnet' supports Tags but none are configured +- **I9040** `TaskDefinitionWithRefToParameter` (AWS::ECS::TaskDefinition) → `Properties.Tags` L92 in `integration_ref-types_yaml` + > Resource 'TaskDefinitionWithRefToParameter' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `TaskDefinitionWithRefToResource` (AWS::ECS::TaskDefinition) → `Properties.Tags` L71 in `integration_ref-types_yaml` + > Resource 'TaskDefinitionWithRefToResource' of type 'AWS::ECS::TaskDefinition' supports Tags but none are configured +- **I9040** `Vpc` (AWS::EC2::VPC) → `Properties.Tags` L34 in `integration_ref-types_yaml` + > Resource 'Vpc' of type 'AWS::EC2::VPC' supports Tags but none are configured +- **I9040** `MyInstance` (AWS::EC2::Instance) → `Properties.Tags` L93 in `integration_resources-cloudformation-init_yaml` + > Resource 'MyInstance' of type 'AWS::EC2::Instance' supports Tags but none are configured +- **I9040** `DmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L296 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `DmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L399 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L331 in `issues_sam_w_conditions_yaml` + > Resource 'DmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `VmdEventsLambda` (AWS::Serverless::Function) → `Properties.Tags` L171 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsLambda' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `VmdEventsLambdaErrorsGreaterThanZeroAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L274 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsLambdaErrorsGreaterThanZeroAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `VmdEventsQueue` (AWS::SQS::Queue) → `Properties.Tags` L206 in `issues_sam_w_conditions_yaml` + > Resource 'VmdEventsQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured +- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L491 in `lsp_comprehensive_json` + > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L846 in `lsp_comprehensive_json` + > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L716 in `lsp_comprehensive_json` + > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L802 in `lsp_comprehensive_json` + > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `BastionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L204 in `lsp_comprehensive_yaml` + > Resource 'BastionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DatabaseAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L369 in `lsp_comprehensive_yaml` + > Resource 'DatabaseAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DatabaseSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L293 in `lsp_comprehensive_yaml` + > Resource 'DatabaseSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `LambdaRole` (AWS::IAM::Role) → `Properties.Tags` L343 in `lsp_comprehensive_yaml` + > Resource 'LambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L93 in `lsp_condition-usage_json` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L86 in `lsp_condition-usage_json` + > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_condition-usage_json` + > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Database` (AWS::RDS::DBInstance) → `Properties.Tags` L94 in `lsp_condition-usage_yaml` + > Resource 'Database' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `DevSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L142 in `lsp_condition-usage_yaml` + > Resource 'DevSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `DevelopmentBucket` (AWS::S3::Bucket) → `Properties.Tags` L88 in `lsp_condition-usage_yaml` + > Resource 'DevelopmentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `LogicalConditionResource` (AWS::CloudWatch::Alarm) → `Properties.Tags` L170 in `lsp_condition-usage_yaml` + > Resource 'LogicalConditionResource' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `ProductionBucket` (AWS::S3::Bucket) → `Properties.Tags` L55 in `lsp_condition-usage_yaml` + > Resource 'ProductionBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `ProductionSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L136 in `lsp_condition-usage_yaml` + > Resource 'ProductionSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L42 in `lsp_constants_json` + > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `PersonalS3` (AWS::S3::Bucket) → `Properties.Tags` L25 in `lsp_constants_yaml` + > Resource 'PersonalS3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L32 in `lsp_parameter_usage_json` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L40 in `lsp_parameter_usage_json` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L48 in `lsp_parameter_usage_json` + > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L56 in `lsp_parameter_usage_json` + > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L64 in `lsp_parameter_usage_json` + > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket1` (AWS::S3::Bucket) → `Properties.Tags` L28 in `lsp_parameter_usage_yaml` + > Resource 'Bucket1' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket2` (AWS::S3::Bucket) → `Properties.Tags` L34 in `lsp_parameter_usage_yaml` + > Resource 'Bucket2' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket3` (AWS::S3::Bucket) → `Properties.Tags` L41 in `lsp_parameter_usage_yaml` + > Resource 'Bucket3' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket4` (AWS::S3::Bucket) → `Properties.Tags` L47 in `lsp_parameter_usage_yaml` + > Resource 'Bucket4' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket5` (AWS::S3::Bucket) → `Properties.Tags` L52 in `lsp_parameter_usage_yaml` + > Resource 'Bucket5' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket6` (AWS::S3::Bucket) → `Properties.Tags` L57 in `lsp_parameter_usage_yaml` + > Resource 'Bucket6' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `Bucket7` (AWS::S3::Bucket) → `Properties.Tags` L63 in `lsp_parameter_usage_yaml` + > Resource 'Bucket7' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L4 in `lsp_simple_json` + > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyS3Bucket` (AWS::S3::Bucket) → `Properties.Tags` L3 in `lsp_simple_yaml` + > Resource 'MyS3Bucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `MyApi` (AWS::Serverless::Api) → `Properties.Tags` L8 in `lsp_test-template_yaml` + > Resource 'MyApi' of type 'AWS::Serverless::Api' supports Tags but none are configured +- **I9040** `MyFunction` (AWS::Serverless::Function) → `Properties.Tags` L4 in `lsp_test-template_yaml` + > Resource 'MyFunction' of type 'AWS::Serverless::Function' supports Tags but none are configured +- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L162 in `public_lambda-poller_json` + > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L116 in `public_lambda-poller_json` + > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L20 in `public_lambda-poller_json` + > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerEventRule` (AWS::Events::Rule) → `Properties.Tags` L185 in `public_lambda-poller_yaml` + > Resource 'PollerEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `PollerEventRuleIamRole` (AWS::IAM::Role) → `Properties.Tags` L162 in `public_lambda-poller_yaml` + > Resource 'PollerEventRuleIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `PollerFunctionIamRole` (AWS::IAM::Role) → `Properties.Tags` L17 in `public_lambda-poller_yaml` + > Resource 'PollerFunctionIamRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `WatchmakerInstanceLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L1689 in `public_watchmaker_json` + > Resource 'WatchmakerInstanceLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `BillingChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2045 in `quickstart_cis_benchmark_yaml` + > Resource 'BillingChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `BillingChangesCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L2201 in `quickstart_cis_benchmark_yaml` + > Resource 'BillingChangesCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `CloudTrailCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1984 in `quickstart_cis_benchmark_yaml` + > Resource 'CloudTrailCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `ConsoleLoginFailureCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1774 in `quickstart_cis_benchmark_yaml` + > Resource 'ConsoleLoginFailureCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `ConsoleSigninWithoutMFACloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1737 in `quickstart_cis_benchmark_yaml` + > Resource 'ConsoleSigninWithoutMFACloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `DetectConfigChanges` (AWS::Events::Rule) → `Properties.Tags` L1937 in `quickstart_cis_benchmark_yaml` + > Resource 'DetectConfigChanges' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `DetectS3BucketPolicyChanges` (AWS::Events::Rule) → `Properties.Tags` L1906 in `quickstart_cis_benchmark_yaml` + > Resource 'DetectS3BucketPolicyChanges' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `Ec2TerminationCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2069 in `quickstart_cis_benchmark_yaml` + > Resource 'Ec2TerminationCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailBucketRule` (AWS::Lambda::Function) → `Properties.Tags` L1002 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailBucketRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailLogIntegrityRule` (AWS::Lambda::Function) → `Properties.Tags` L1119 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailLogIntegrityRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateCloudTrailRule` (AWS::Lambda::Function) → `Properties.Tags` L889 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateCloudTrailRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateConfigInAllRegionsRule` (AWS::Lambda::Function) → `Properties.Tags` L1397 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateConfigInAllRegionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateKeyRotationRule` (AWS::Lambda::Function) → `Properties.Tags` L1301 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateKeyRotationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluatePolicyPermissionsRule` (AWS::Lambda::Function) → `Properties.Tags` L702 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluatePolicyPermissionsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateRootAccountRule` (AWS::Lambda::Function) → `Properties.Tags` L230 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateRootAccountRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForEvaluateUserPolicyAssociationRule` (AWS::Lambda::Function) → `Properties.Tags` L798 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForEvaluateUserPolicyAssociationRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForInstanceRoleUseRule` (AWS::Lambda::Function) → `Properties.Tags` L1216 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForInstanceRoleUseRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForRoleForMfaOnUsersRule` (AWS::Lambda::Function) → `Properties.Tags` L609 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForRoleForMfaOnUsersRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcDefaultSecurityGroupsRule` (AWS::Lambda::Function) → `Properties.Tags` L500 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcDefaultSecurityGroupsRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcFlowLogRule` (AWS::Lambda::Function) → `Properties.Tags` L424 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcFlowLogRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionForVpcPeeringRouteTablesRule` (AWS::Lambda::Function) → `Properties.Tags` L1502 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionForVpcPeeringRouteTablesRule' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionToDisableUnusedCredentials` (AWS::Lambda::Function) → `Properties.Tags` L2254 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionToDisableUnusedCredentials' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctionToFormatCloudWatchEvent` (AWS::Lambda::Function) → `Properties.Tags` L1859 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctionToFormatCloudWatchEvent' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `FunctiontForEvaluateCisBenchmarkingPreconditions` (AWS::Lambda::Function) → `Properties.Tags` L123 in `quickstart_cis_benchmark_yaml` + > Resource 'FunctiontForEvaluateCisBenchmarkingPreconditions' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `GetCloudTrailCloudWatchLog` (AWS::Lambda::Function) → `Properties.Tags` L1602 in `quickstart_cis_benchmark_yaml` + > Resource 'GetCloudTrailCloudWatchLog' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `IAMRootActivityCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1699 in `quickstart_cis_benchmark_yaml` + > Resource 'IAMRootActivityCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `IamPolicyChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2007 in `quickstart_cis_benchmark_yaml` + > Resource 'IamPolicyChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `KMSCustomerKeyDeletionCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1811 in `quickstart_cis_benchmark_yaml` + > Resource 'KMSCustomerKeyDeletionCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `KmsKeyUseCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L1962 in `quickstart_cis_benchmark_yaml` + > Resource 'KmsKeyUseCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `MasterConfigRole` (AWS::IAM::Role) → `Properties.Tags` L78 in `quickstart_cis_benchmark_yaml` + > Resource 'MasterConfigRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `NetworkAclChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2120 in `quickstart_cis_benchmark_yaml` + > Resource 'NetworkAclChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `NetworkChangeCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2150 in `quickstart_cis_benchmark_yaml` + > Resource 'NetworkChangeCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `RoleForCloudWatchEvents` (AWS::IAM::Role) → `Properties.Tags` L1831 in `quickstart_cis_benchmark_yaml` + > Resource 'RoleForCloudWatchEvents' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `RoleForDisableUnusedCredentialsFunction` (AWS::IAM::Role) → `Properties.Tags` L2221 in `quickstart_cis_benchmark_yaml` + > Resource 'RoleForDisableUnusedCredentialsFunction' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ScheduledRuleForDisableUnusedCredentials` (AWS::Events::Rule) → `Properties.Tags` L2348 in `quickstart_cis_benchmark_yaml` + > Resource 'ScheduledRuleForDisableUnusedCredentials' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SecurityGroupChangesCloudWatchEventRule` (AWS::Events::Rule) → `Properties.Tags` L2092 in `quickstart_cis_benchmark_yaml` + > Resource 'SecurityGroupChangesCloudWatchEventRule' of type 'AWS::Events::Rule' supports Tags but none are configured +- **I9040** `SnsTopicForCloudWatchEvents` (AWS::SNS::Topic) → `Properties.Tags` L1588 in `quickstart_cis_benchmark_yaml` + > Resource 'SnsTopicForCloudWatchEvents' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `UnauthorizedAttemptCloudWatchAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L1661 in `quickstart_cis_benchmark_yaml` + > Resource 'UnauthorizedAttemptCloudWatchAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L240 in `quickstart_config-rules_json` + > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L99 in `quickstart_config-rules_json` + > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L119 in `quickstart_iam_json` + > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L191 in `quickstart_iam_json` + > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L304 in `quickstart_iam_json` + > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L24 in `quickstart_iam_json` + > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rEipNat` (AWS::EC2::EIP) → `Properties.Tags` L71 in `quickstart_nat-instance_json` + > Resource 'rEipNat' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rCWAlarmHighCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L645 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmHighCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmHighCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L663 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmHighCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmLowCPUApp` (AWS::CloudWatch::Alarm) → `Properties.Tags` L681 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmLowCPUApp' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCWAlarmLowCPUWeb` (AWS::CloudWatch::Alarm) → `Properties.Tags` L699 in `quickstart_nist_application_yaml` + > Resource 'rCWAlarmLowCPUWeb' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rDBSubnetGroup` (AWS::RDS::DBSubnetGroup) → `Properties.Tags` L716 in `quickstart_nist_application_yaml` + > Resource 'rDBSubnetGroup' of type 'AWS::RDS::DBSubnetGroup' supports Tags but none are configured +- **I9040** `rPostProcInstanceRole` (AWS::IAM::Role) → `Properties.Tags` L960 in `quickstart_nist_application_yaml` + > Resource 'rPostProcInstanceRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rRDSInstanceMySQL` (AWS::RDS::DBInstance) → `Properties.Tags` L1006 in `quickstart_nist_application_yaml` + > Resource 'rRDSInstanceMySQL' of type 'AWS::RDS::DBInstance' supports Tags but none are configured +- **I9040** `rS3ELBAccessLogs` (AWS::S3::Bucket) → `Properties.Tags` L1062 in `quickstart_nist_application_yaml` + > Resource 'rS3ELBAccessLogs' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rSecurityGroupWeb` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1139 in `quickstart_nist_application_yaml` + > Resource 'rSecurityGroupWeb' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `rWebContentBucket` (AWS::S3::Bucket) → `Properties.Tags` L1179 in `quickstart_nist_application_yaml` + > Resource 'rWebContentBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailValidationFunction` (AWS::Lambda::Function) → `Properties.Tags` L99 in `quickstart_nist_config_rules_yaml` + > Resource 'rCloudTrailValidationFunction' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `rConfigRulesLambdaRole` (AWS::IAM::Role) → `Properties.Tags` L282 in `quickstart_nist_config_rules_yaml` + > Resource 'rConfigRulesLambdaRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L280 in `quickstart_nist_high_main_yaml` + > Resource 'ApplicationTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ConfigRulesTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L393 in `quickstart_nist_high_main_yaml` + > Resource 'ConfigRulesTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `IamTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L412 in `quickstart_nist_high_main_yaml` + > Resource 'IamTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `LoggingTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L425 in `quickstart_nist_high_main_yaml` + > Resource 'LoggingTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L446 in `quickstart_nist_high_main_yaml` + > Resource 'ManagementVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ProductionVpcTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L527 in `quickstart_nist_high_main_yaml` + > Resource 'ProductionVpcTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rIAMAdminRole` (AWS::IAM::Role) → `Properties.Tags` L64 in `quickstart_nist_iam_yaml` + > Resource 'rIAMAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rInstanceOpsRole` (AWS::IAM::Role) → `Properties.Tags` L144 in `quickstart_nist_iam_yaml` + > Resource 'rInstanceOpsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rReadOnlyAdminRole` (AWS::IAM::Role) → `Properties.Tags` L243 in `quickstart_nist_iam_yaml` + > Resource 'rReadOnlyAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rSysAdminRole` (AWS::IAM::Role) → `Properties.Tags` L319 in `quickstart_nist_iam_yaml` + > Resource 'rSysAdminRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rArchiveLogsBucket` (AWS::S3::Bucket) → `Properties.Tags` L43 in `quickstart_nist_logging_yaml` + > Resource 'rArchiveLogsBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailBucket` (AWS::S3::Bucket) → `Properties.Tags` L121 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailBucket' of type 'AWS::S3::Bucket' supports Tags but none are configured +- **I9040** `rCloudTrailChangeAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L144 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailChangeAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rCloudTrailLogGroup` (AWS::Logs::LogGroup) → `Properties.Tags` L159 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailLogGroup' of type 'AWS::Logs::LogGroup' supports Tags but none are configured +- **I9040** `rCloudTrailLoggingLocal` (AWS::CloudTrail::Trail) → `Properties.Tags` L164 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailLoggingLocal' of type 'AWS::CloudTrail::Trail' supports Tags but none are configured +- **I9040** `rCloudTrailRole` (AWS::IAM::Role) → `Properties.Tags` L187 in `quickstart_nist_logging_yaml` + > Resource 'rCloudTrailRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rCloudWatchLogsRole` (AWS::IAM::Role) → `Properties.Tags` L325 in `quickstart_nist_logging_yaml` + > Resource 'rCloudWatchLogsRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rIAMCreateAccessKeyAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L392 in `quickstart_nist_logging_yaml` + > Resource 'rIAMCreateAccessKeyAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rIAMPolicyChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L408 in `quickstart_nist_logging_yaml` + > Resource 'rIAMPolicyChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rNetworkAclChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L443 in `quickstart_nist_logging_yaml` + > Resource 'rNetworkAclChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rRootActivityAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L472 in `quickstart_nist_logging_yaml` + > Resource 'rRootActivityAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rSecurityAlarmTopic` (AWS::SNS::Topic) → `Properties.Tags` L486 in `quickstart_nist_logging_yaml` + > Resource 'rSecurityAlarmTopic' of type 'AWS::SNS::Topic' supports Tags but none are configured +- **I9040** `rSecurityGroupChangesAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L494 in `quickstart_nist_logging_yaml` + > Resource 'rSecurityGroupChangesAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rUnauthorizedAttemptAlarm` (AWS::CloudWatch::Alarm) → `Properties.Tags` L523 in `quickstart_nist_logging_yaml` + > Resource 'rUnauthorizedAttemptAlarm' of type 'AWS::CloudWatch::Alarm' supports Tags but none are configured +- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L336 in `quickstart_nist_vpc_management_yaml` + > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L395 in `quickstart_nist_vpc_management_yaml` + > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L401 in `quickstart_nist_vpc_management_yaml` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L548 in `quickstart_nist_vpc_management_yaml` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L558 in `quickstart_nist_vpc_management_yaml` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L304 in `quickstart_nist_vpc_production_yaml` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNACLPrivate` (AWS::EC2::NetworkAcl) → `Properties.Tags` L367 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNACLPrivate' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured +- **I9040** `rNACLPublic` (AWS::EC2::NetworkAcl) → `Properties.Tags` L372 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNACLPublic' of type 'AWS::EC2::NetworkAcl' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L518 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L528 in `quickstart_nist_vpc_production_yaml` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `OpenShiftStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L185 in `quickstart_openshift_master_yaml` + > Resource 'OpenShiftStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `VPCStack` (AWS::CloudFormation::Stack) → `Properties.Tags` L243 in `quickstart_openshift_master_yaml` + > Resource 'VPCStack' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `ContainerAccessELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L747 in `quickstart_openshift_yaml` + > Resource 'ContainerAccessELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `KeyGen` (AWS::Lambda::Function) → `Properties.Tags` L799 in `quickstart_openshift_yaml` + > Resource 'KeyGen' of type 'AWS::Lambda::Function' supports Tags but none are configured +- **I9040** `LambdaExecutionRole` (AWS::IAM::Role) → `Properties.Tags` L814 in `quickstart_openshift_yaml` + > Resource 'LambdaExecutionRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `OpenShiftInternalSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1055 in `quickstart_openshift_yaml` + > Resource 'OpenShiftInternalSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenShiftMasterELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1282 in `quickstart_openshift_yaml` + > Resource 'OpenShiftMasterELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftMasterInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1317 in `quickstart_openshift_yaml` + > Resource 'OpenShiftMasterInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftNodeInternalELB` (AWS::ElasticLoadBalancing::LoadBalancer) → `Properties.Tags` L1370 in `quickstart_openshift_yaml` + > Resource 'OpenShiftNodeInternalELB' of type 'AWS::ElasticLoadBalancing::LoadBalancer' supports Tags but none are configured +- **I9040** `OpenShiftNodeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1395 in `quickstart_openshift_yaml` + > Resource 'OpenShiftNodeSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `OpenShiftSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L1637 in `quickstart_openshift_yaml` + > Resource 'OpenShiftSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `SetupRole` (AWS::IAM::Role) → `Properties.Tags` L1657 in `quickstart_openshift_yaml` + > Resource 'SetupRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rDBMonitoringRole` (AWS::IAM::Role) → `Properties.Tags` L96 in `quickstart_test_yaml` + > Resource 'rDBMonitoringRole' of type 'AWS::IAM::Role' supports Tags but none are configured +- **I9040** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L920 in `quickstart_vpc-management_json` + > Resource 'rDeepSecurityInfrastructureTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `rEIPProdBastion` (AWS::EC2::EIP) → `Properties.Tags` L723 in `quickstart_vpc-management_json` + > Resource 'rEIPProdBastion' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rEIPProdNAT` (AWS::EC2::EIP) → `Properties.Tags` L767 in `quickstart_vpc-management_json` + > Resource 'rEIPProdNAT' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `rNATGateway` (AWS::EC2::NatGateway) → `Properties.Tags` L775 in `quickstart_vpc-management_json` + > Resource 'rNATGateway' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `rNatInstanceTemplate` (AWS::CloudFormation::Stack) → `Properties.Tags` L380 in `quickstart_vpc-management_json` + > Resource 'rNatInstanceTemplate' of type 'AWS::CloudFormation::Stack' supports Tags but none are configured +- **I9040** `DHCPOptions` (AWS::EC2::DHCPOptions) → `Properties.Tags` L483 in `quickstart_vpc_json` + > Resource 'DHCPOptions' of type 'AWS::EC2::DHCPOptions' supports Tags but none are configured +- **I9040** `NAT1EIP` (AWS::EC2::EIP) → `Properties.Tags` L1749 in `quickstart_vpc_json` + > Resource 'NAT1EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT2EIP` (AWS::EC2::EIP) → `Properties.Tags` L1768 in `quickstart_vpc_json` + > Resource 'NAT2EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT3EIP` (AWS::EC2::EIP) → `Properties.Tags` L1787 in `quickstart_vpc_json` + > Resource 'NAT3EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NAT4EIP` (AWS::EC2::EIP) → `Properties.Tags` L1806 in `quickstart_vpc_json` + > Resource 'NAT4EIP' of type 'AWS::EC2::EIP' supports Tags but none are configured +- **I9040** `NATGateway1` (AWS::EC2::NatGateway) → `Properties.Tags` L1825 in `quickstart_vpc_json` + > Resource 'NATGateway1' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway2` (AWS::EC2::NatGateway) → `Properties.Tags` L1841 in `quickstart_vpc_json` + > Resource 'NATGateway2' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway3` (AWS::EC2::NatGateway) → `Properties.Tags` L1857 in `quickstart_vpc_json` + > Resource 'NATGateway3' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATGateway4` (AWS::EC2::NatGateway) → `Properties.Tags` L1873 in `quickstart_vpc_json` + > Resource 'NATGateway4' of type 'AWS::EC2::NatGateway' supports Tags but none are configured +- **I9040** `NATInstanceSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.Tags` L2096 in `quickstart_vpc_json` + > Resource 'NATInstanceSecurityGroup' of type 'AWS::EC2::SecurityGroup' supports Tags but none are configured +- **I9040** `S3VPCEndpoint` (AWS::EC2::VPCEndpoint) → `Properties.Tags` L2116 in `quickstart_vpc_json` + > Resource 'S3VPCEndpoint' of type 'AWS::EC2::VPCEndpoint' supports Tags but none are configured + ### I9003 - 56 findings - **I9003** in `bad_E1150_network_interfaces_groupset_multi_yaml` @@ -21229,7 +17881,7 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > RDS instance should have StorageEncrypted set to true - **W9008** `PolicyList` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L55 in `good_transform_language_extension_yaml` > RDS instance should have StorageEncrypted set to true -- **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L657 in `lsp_comprehensive_json` +- **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L658 in `lsp_comprehensive_json` > RDS instance should have StorageEncrypted set to true - **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L275 in `lsp_comprehensive_yaml` > RDS instance should have StorageEncrypted set to true @@ -21238,6 +17890,71 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9008** `Database` (AWS::RDS::DBInstance) → `Properties.StorageEncrypted` L94 in `lsp_condition-usage_yaml` > RDS instance should have StorageEncrypted set to true +### F1101 - 31 findings + +- **F1101** L8 in `bad_core_config_invalid_json_json` + > JSON parse error: expected `,` or `]` at line 8 column 6 +- **F1101** L8 in `bad_core_config_invalid_yaml_yaml` + > YAML parse error: while parsing a block mapping, did not find expected key at byte 113 line 8 column 9 +- **F1101** L18 in `bad_core_parse_invalid_map_yaml` + > Complex key not supported (line 18) +- **F1101** L8 in `bad_core_parse_malformed_core_tag_yaml` + > YAML parse error: 'not_a_number' is not a valid value for !!int +- **F1101** L7 in `bad_core_parse_multiple_documents_yaml` + > expected a single document in the stream but found another document +- **F1101** L7 in `bad_core_parse_null_key_yaml` + > Null key not supported (line 7) +- **F1101** L1 in `bad_empty_file_yaml` + > Empty YAML document +- **F1101** `Topic` (AWS::SNS::Topic) → `Properties.DisplayName` L14 in `bad_functions_findinmap_default_value_no_transform_yaml` + > Fn::FindInMap: the 'DefaultValue' element requires the AWS::LanguageExtensions transform; without it Fn::FindInMap accepts at most 3 elements +- **F1101** L5 in `bad_json_parse_json` + > JSON parse error: expected `:` at line 5 column 11 +- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy.Fn::If.2` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy.Fn::If.2` L36 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy` L30 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy` L31 in `bad_lifecycle_conditional_invalid_policies_yaml` + > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition +- **F1101** `CreationConditional` (AWS::CloudFormation::WaitCondition) → `CreationPolicy` L22 in `bad_lifecycle_policy_shapes_yaml` + > Fn::If is not supported as a top-level CreationPolicy value; CreationPolicy must be an object +- **F1101** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `CreationPolicy` L29 in `bad_lifecycle_policy_shapes_yaml` + > Ref is not supported as a top-level CreationPolicy value; CreationPolicy must be an object +- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_lifecycle_policy_shapes_yaml` + > Fn::If in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L34 in `bad_lifecycle_policy_shapes_yaml` + > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `DeletionPolicy` L38 in `bad_lifecycle_policy_shapes_yaml` + > Ref in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `UpdateReplacePolicy` L39 in `bad_lifecycle_policy_shapes_yaml` + > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it +- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` + > Fn::Cidr is not supported in DeletionPolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If +- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` + > Fn::Cidr is not supported in UpdateReplacePolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If +- **F1101** L1 in `bad_string_yaml` + > Template root must be a YAML mapping +- **F1101** L12 in `bad_template_yaml` + > YAML parse error: while parsing a block mapping, did not find expected key at byte 234 line 12 column 11 +- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object +- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `good_resources_dynamodb_attributes_transform_yaml` + > Fn::Transform: Fn::Transform value must be an object + ### W9002 - 30 findings - **W9002** `Pipeline` (AWS::CodePipeline::Pipeline) → `Properties.RoleArn` L6 in `bad_codepipeline_bad_artifact_counts_yaml` @@ -21357,10 +18074,10 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Hardcoded AMI ID - use a parameter or mapping for portability - **W9010** `ConditionalResource` (AWS::EC2::Instance) → `Properties.ImageId` L104 in `lsp_condition-usage_yaml` > Hardcoded AMI ID - use a parameter or mapping for portability -- **W9010** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L355 in `quickstart_openshift_yaml` +- **W9010** `AnsibleConfigServer` (AWS::EC2::Instance) → `Properties.ImageId` L356 in `quickstart_openshift_yaml` > Hardcoded AMI ID - use a parameter or mapping for portability -### F0001 - 24 findings +### F0001 - 22 findings - Basic CloudFormation Template Configuration - **F0001** L23 in `bad_conditions_and_yaml` > Resources section must exist and be non-empty @@ -21376,8 +18093,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Resources section must exist and be non-empty - **F0001** L10 in `bad_mappings_name_yaml` > Resources section must exist and be non-empty -- **F0001** in `bad_not_cloudformation_yaml` - > Resources section must exist and be non-empty - **F0001** L61 in `bad_parameters_default_yaml` > Resources section must exist and be non-empty - **F0001** L6 in `bad_resources_cloudformation_stack_nested_yaml` @@ -21388,8 +18103,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. > Resources section must exist and be non-empty - **F0001** L4 in `bad_templates_base_yaml` > Resources section must exist and be non-empty -- **F0001** in `gh-issues_issue-201_json` - > Resources section must exist and be non-empty - **F0001** L16 in `good_core_config_cfn_lint_json` > Resources section must exist and be non-empty - **F0001** L11 in `good_core_config_cfn_lint_yaml` @@ -21411,51 +18124,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0001** L21 in `integration_metdata_yaml` > Resources section must exist and be non-empty -### F1101 - 21 findings - -- **F1101** `Topic` (AWS::SNS::Topic) → `Properties.DisplayName` L14 in `bad_functions_findinmap_default_value_no_transform_yaml` - > Fn::FindInMap: the 'DefaultValue' element requires the AWS::LanguageExtensions transform; without it Fn::FindInMap accepts at most 3 elements -- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy.Fn::If.2` L35 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `ConditionalNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy.Fn::If.2` L36 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `DeletionPolicy` L30 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in DeletionPolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `DirectNoValuePolicies` (AWS::S3::Bucket) → `UpdateReplacePolicy` L31 in `bad_lifecycle_conditional_invalid_policies_yaml` - > Ref target 'AWS::NoValue' is not supported in UpdateReplacePolicy; use a parameter or one of AWS::AccountId, AWS::Region, AWS::Partition -- **F1101** `CreationConditional` (AWS::CloudFormation::WaitCondition) → `CreationPolicy` L22 in `bad_lifecycle_policy_shapes_yaml` - > Fn::If is not supported as a top-level CreationPolicy value; CreationPolicy must be an object -- **F1101** `CreationNoValueOnUnsupportedType` (AWS::S3::Bucket) → `CreationPolicy` L29 in `bad_lifecycle_policy_shapes_yaml` - > Ref is not supported as a top-level CreationPolicy value; CreationPolicy must be an object -- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_lifecycle_policy_shapes_yaml` - > Fn::If in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `IntrinsicPoliciesWithoutTransform` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L34 in `bad_lifecycle_policy_shapes_yaml` - > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `DeletionPolicy` L38 in `bad_lifecycle_policy_shapes_yaml` - > Ref in DeletionPolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `NoValuePoliciesWithoutTransform` (AWS::SQS::Queue) → `UpdateReplacePolicy` L39 in `bad_lifecycle_policy_shapes_yaml` - > Ref in UpdateReplacePolicy requires the AWS::LanguageExtensions transform, but it is not declared. Add 'Transform: AWS::LanguageExtensions' to use it -- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `DeletionPolicy` L33 in `bad_resources_deletionpolicy_yaml` - > Fn::Cidr is not supported in DeletionPolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If -- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `bad_resources_dynamodb_attributes_transform_e3639_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `UnsupportedIntrinsic` (AWS::CloudFormation::WaitConditionHandle) → `UpdateReplacePolicy` L33 in `bad_resources_updatereplacepolicy_yaml` - > Fn::Cidr is not supported in UpdateReplacePolicy; AWS::LanguageExtensions allows only Ref, Fn::FindInMap, and Fn::If -- **F1101** `DDBTableTransformAttributeDefinitions` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L11 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.AttributeDefinitions.Fn::Transform` L33 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformBoth` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L38 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object -- **F1101** `DDBTableTransformKeySchema` (AWS::DynamoDB::Table) → `Properties.KeySchema.Fn::Transform` L25 in `good_resources_dynamodb_attributes_transform_yaml` - > Fn::Transform: Fn::Transform value must be an object - ### W2508 - 19 findings - **W2508** `OpenSSH` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L7 in `bad_security_issues_yaml` @@ -21497,60 +18165,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2508** `rSecurityGroupPeered` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L425 in `quickstart_vpc-management_json` > Security group allows 0.0.0.0/0 access to sensitive port 22 (range 22-22) -### F2012 - 15 findings - -- **F2012** → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` - > Parameter 'Port' Default 'not-a-number' is not in AllowedValues ['abc', 'def'] -- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLCommaInAllowedValueDoesNotMatchSplit.Default` L20 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLCommaInAllowedValueDoesNotMatchSplit' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLListStringType' Default 'bad' is not in AllowedValues ['good', 'better'] -- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLListStringType' Default 'worse' is not in AllowedValues ['good', 'better'] -- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLMultipleElementsNotAllowed' Default 'four' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLMultipleElementsNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLSingleElementNotAllowed.Default` L7 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLSingleElementNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLWhitespaceTrimsToInvalid.Default` L28 in `bad_parameters_F2012_cdl_default_split_yaml` - > Parameter 'CDLWhitespaceTrimsToInvalid' Default 'bad' is not in AllowedValues ['one', 'two'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L47 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValuesWithSpaces' Default 'four' is not in AllowedValues ['one', 'two', 'three, four'] -- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` - > Parameter 'CDLAllowedValuesWithSpaces' Default 'three' is not in AllowedValues ['one', 'two', 'three, four'] -- **F2012** → `Parameters.myAllowedValue.Default` L18 in `bad_parameters_default_yaml` - > Parameter 'myAllowedValue' Default 'us-east-1a' is not in AllowedValues ['us-east-1b', 'us-east-1c', 'us-east-1d'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'four' is not in AllowedValues ['one', 'two', 'three,four'] -- **F2012** → `Parameters.CDLAllowedValues.Default` L62 in `good_parameters_default_yaml` - > Parameter 'CDLAllowedValues' Default 'three' is not in AllowedValues ['one', 'two', 'three,four'] - -### F3003 - 9 findings - Required Resource properties are missing - -- **F3003** `BadValkey` (AWS::ElastiCache::ReplicationGroup) → `Properties` L69 in `bad_cross_resource_task10_yaml` - > 'TransitEncryptionEnabled' is a required property (from extension) -- **F3003** `DDBTable` (AWS::DynamoDB::Table) → `Properties` L5 in `bad_dynamodb_provisioned_no_throughput_yaml` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'AllocatedStorage' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'Iops' is a required property (from extension) -- **F3003** `Cluster` (AWS::RDS::DBCluster) → `Properties` L7 in `bad_rds_dbclusterinstanceclass_invalid_yaml` - > 'StorageType' is a required property (from extension) -- **F3003** `ExplicitProvisioned` (AWS::DynamoDB::Table) → `Properties` L10 in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `Function3` (AWS::Lambda::Function) → `Properties` L25 in `bad_resources_lambda_required_properties_yaml` - > 'Runtime' is a required property (from extension) -- **F3003** `DataTable` (AWS::DynamoDB::Table) → `Properties` L72 in `cdk_DemoStack.template_json` - > 'ProvisionedThroughput' is a required property (from extension) -- **F3003** `KmsKeyWithoutEncryption` (AWS::RDS::DBInstance) → `Properties` L37 in `gh-issues_issue-235_yaml` - > 'StorageEncrypted' is a required property (from extension) - ### W2502 - 7 findings - **W2502** `ApplicationTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L277 in `quickstart_nist_high_main_yaml` @@ -21564,9 +18178,9 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2502** `ManagementVpcTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L445 in `quickstart_nist_high_main_yaml` > Resource 'ManagementVpcTemplate' has DependsOn 'ProductionVpcTemplate' which is conditional (condition 'EulaAccepted'), but 'ManagementVpcTemplate' does not have a matching condition - **W2502** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L333 in `quickstart_nist_vpc_management_yaml` - > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a + > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a - **W2502** `rDeepSecurityInfrastructureTemplate` (AWS::CloudFormation::Stack) → `DependsOn` L917 in `quickstart_vpc-management_json` - > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a + > Resource 'rDeepSecurityInfrastructureTemplate' has DependsOn 'rRouteMgmtProdDMZ' which is conditional (condition 'cCreatePeeringProduction'), but 'rDeepSecurityInfrastructureTemplate' does not have a ### W2512 - 7 findings @@ -21585,19 +18199,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W2512** `rSysAdminPolicy` (AWS::IAM::ManagedPolicy) L275 in `quickstart_nist_iam_yaml` > IAM policy uses NotAction which grants all actions except those listed - consider using Action instead -### E1028 - 5 findings - -- **E1028** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.Fn::If.2.Fn::If.0` L65 in `bad_conditions_yaml` - > Fn::If condition 'isDev' does not exist in Conditions section -- **E1028** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument.0.Fn::If.0` L40 in `bad_resources_iam_iam_policy_yaml` - > Fn::If condition 'cCondition' does not exist in Conditions section -- **E1028** → `Outputs.EdgeCaseOutput.Value.Fn::If.0` L251 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression -- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.0` L236 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression -- **E1028** → `Outputs.LogicalConditionalOutput.Value.Fn::If.2.Fn::If.0` L241 in `lsp_condition-usage_yaml` - > Fn::If first element must be the name of a condition, not an expression - ### I9002 - 5 findings - **I9002** `MyAliasRecordSet` (AWS::Route53::RecordSet) → `Properties.TTL` L113 in `bad_route53_yaml` @@ -21611,17 +18212,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **I9002** `MutuallyExclusiveConditions` (AWS::Route53::RecordSet) → `Properties.TTL` L38 in `good_route53_conditional_scenarios_yaml` > 'TTL' is ignored in this configuration (from extension) -### F3002 - 4 findings - Resource properties are invalid - -- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadKey` L60 in `bad_conditions_yaml` - > Additional properties are not allowed ('BadKey' was unexpected) -- **F3002** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.BadValue` L60 in `bad_conditions_yaml` - > Additional properties are not allowed ('BadValue' was unexpected) -- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_directives_yaml` - > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) -- **F3002** `myBucketPass` (AWS::S3::Bucket) → `Properties.BucketName1` L13 in `bad_core_mandatory_checks_yaml` - > Additional properties are not allowed ('BucketName1' was unexpected. Did you mean 'BucketName'?) - ### E9002 - 3 findings - **E9002** `SG` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L7 in `bad_sg_bad_port_range_yaml` @@ -21629,16 +18219,7 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **E9002** `AppSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L96 in `cdk_DemoStack.template_json` > FromPort 443 is greater than ToPort 80 - **E9002** `InvertedRangeSecurityGroup` (AWS::EC2::SecurityGroup) → `Properties.SecurityGroupIngress` L25 in `gh-issues_issue-226_yaml` - > FromPort 443 is greater than ToPort 80 - -### W2509 - 3 findings - -- **W2509** → `Parameters.MyNewPassword` L10 in `bad_properties_password_yaml` - > Parameter 'MyNewPassword' appears to be a password but does not have NoEcho set to true -- **W2509** → `Parameters.MyPassword` L6 in `bad_properties_password_yaml` - > Parameter 'MyPassword' appears to be a password but does not have NoEcho set to true -- **W2509** → `Parameters.DBPassword` L6 in `integration_resources-cloudformation-init_yaml` - > Parameter 'DBPassword' appears to be a password but does not have NoEcho set to true + > FromPort 443 is greater than ToPort 80 ### E9106 - 2 findings @@ -21654,13 +18235,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0016** → `Parameters.Port.AllowedValues` L6 in `bad_param_number_default_yaml` > Parameter 'Port' AllowedValues entry 'def' is not a valid number -### F1012 - 2 findings - -- **F1012** `Bucket` (AWS::S3::Bucket) L3 in `bad_findinmap_bad_yaml` - > Fn::FindInMap references non-existent mapping 'NonExistentMap' -- **F1012** `myInstance` (AWS::EC2::Instance) L6 in `bad_functions_base64_yaml` - > Fn::FindInMap references non-existent mapping 'amimap' - ### F8611 - 2 findings - **F8611** → `Rules.ValidateRegionAndEnvironment` L198 in `lsp_comprehensive_json` @@ -21696,16 +18270,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9053** L42 in `bad_conditions_yaml` > Condition 'UnusedCondition' is equivalent to condition 'CreateProdResources' - consider consolidating -### E2504 - 1 findings - -- **E2504** `FifoQueue` (AWS::SQS::Queue) → `Properties.QueueName` L6 in `bad_sqs_fifo_no_suffix_yaml` - > FIFO queue name 'my-queue' must end with '.fifo' - -### E3001 - 1 findings - Basic CloudFormation Resource Check - -- **E3001** `mySnsTopic` (AWS::SNS::Topic) L15 in `bad_duplicate_yaml` - > Resource 'mySnsTopic' has invalid property 'Parameters'. Valid resource attributes: Type, Properties, DependsOn, Condition, Metadata, DeletionPolicy, UpdateReplacePolicy, UpdatePolicy, CreationPolicy, - ### F0003 - 1 findings - **F0003** L1 in `bad_limit_numbers_yaml` @@ -21736,26 +18300,6 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **F0015** → `Parameters.Port.Default` L5 in `bad_param_number_default_yaml` > Parameter 'Port' Default 'not-a-number' is not a valid number -### F0017 - 1 findings - -- **F0017** → `Mappings.BadMap.Key1` L4 in `bad_invalid_mapping_structure_yaml` - > Mapping 'BadMap' second level key 'Key1' must be a map - -### F0050 - 1 findings - -- **F0050** → `Mappings.Mapping201.Key` L2412 in `bad_limit_numbers_yaml` - > Mapping 'Mapping201'.'Key' has 202 attributes, maximum is 200 - -### W1019 - 1 findings - -- **W1019** `MyBucket` (AWS::S3::Bucket) → `Properties.BucketName` L6 in `bad_W1019_sub_unused_key_yaml` - > Parameter 'UnusedKey' not used in Fn::Sub template string - -### W3030 - 1 findings - -- **W3030** `myBucketFirstAndLastPass` (AWS::S3::Bucket) → `Properties.VersioningConfiguration.Status` L30 in `bad_core_directives_yaml` - > 'Enabled1' is not one of ['Enabled', 'Suspended'] - ### W9006 - 1 findings - **W9006** `Bucket` (AWS::S3::Bucket) → `Properties.BucketName` L14 in `bad_W9006_every_allowed_value_too_long_json` @@ -21771,869 +18315,979 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. - **W9054** `CertAuth` (AWS::ACMPCA::CertificateAuthorityActivation) → `Properties.Certificate` L8 in `bad_schema_write_only_yaml` > Write-only property 'Certificate' of 'CertAuth' is referenced in output 'WriteOnlyOutput' -## Per-Template Breakdown - 177 templates with mismatches - -### `bad_limit_size_yaml` - 1796 mismatches (299 TP, 897 FP, 899 EE, 899 FN) +## Multiplicity Differences - 38 unscored findings -- FN: `W1020` ×897, `E1002`, `E1003` -- FP: `W1020` ×897 -- EE: `I9001` ×897, `F0011`, `I9003` - -### `public_watchmaker_json` - 48 mismatches (8 TP, 24 FP, 9 EE, 24 FN) +Both tools emitted an equivalent diagnostic identity, but one emitted +additional occurrences. These are diagnostic-granularity differences, +not behavioral false positives or false negatives. -- FN: `I1022` ×24 -- FP: `I1022` ×24 -- EE: `I9001` ×7, `I9003`, `I9040` - -### `quickstart_nist_application_yaml` - 23 mismatches (34 TP, 10 FP, 113 EE, 13 FN) +- **E1001** extra on reference side +- **E1001** → `AWSTemplateFormatVersion` L1 in `bad_templates_base_null_yaml` + > None is not one of ['2010-09-09'] +- **E1005** extra on engine side +- **E1005** → `Transform` L3 in `bad_templates_base_yaml` + > Transform object has unknown property 'key' - expected one of 'Name', 'Parameters' +- **E1028** extra on engine side +- **E1028** `EC2Instance` (AWS::EC2::Instance) → `Properties.Tags.1.Fn::If.2.Fn::If.0` L65 in `bad_conditions_yaml` + > Fn::If condition 'isDev' does not exist in Conditions section +- **E2001** extra on reference side +- **E2001** → `Parameters.myInvalidParameter.NotType` L27 in `bad_parameters_configuration_yaml` + > Additional properties are not allowed ('NotType' was unexpected) +- **E3001** extra on reference side +- **E3001** `NonObjectBody` → `Resources.NonObjectBody` L8 in `bad_core_E3001_resource_shape_yaml` + > Exception "'str_node' object has no attribute 'get'" raised while validating 'cfnLint' +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not of type 'string' +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not one of ['*'] +- **E3001** extra on reference side +- **E3001** `UnsupportedAttributes` → `IgnoreGlobals` L21 in `bad_core_resource_attributes_yaml` + > True is not valid under any of the given schemas +- **E3510** extra on engine side +- **E3510** `rIamPolicy` (AWS::IAM::Policy) → `Properties.PolicyDocument` L38 in `bad_resources_iam_iam_policy_yaml` + > [{"Statement":{}}] is not of type 'object' +- **E5001** extra on reference side +- **E5001** `MyModule` → `CreationPolicy` L6 in `bad_modules_bad_has_create_policy_yaml` + > CreationPolicy is not permitted within Modules +- **E5001** extra on reference side +- **E5001** `MyModule` → `UpdatePolicy` L5 in `bad_modules_bad_has_update_policy_yaml` + > UpdatePolicy is not permitted within Modules +- **E8003** extra on reference side +- **E8003** → `Conditions.TestEqualNull.Fn::Equals` L28 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **E8003** extra on reference side +- **E8003** → `Conditions.NullEquals.Fn::Equals` L23 in `bad_conditions_equals_yaml` + > None is not of type 'array' +- **E8004** extra on reference side +- **E8004** → `Conditions.TestAndNull.Fn::And` L22 in `bad_conditions_and_yaml` + > None is not of type 'array' +- **E8004** extra on reference side +- **E8004** → `Conditions.TestAndNull.Fn::And` L18 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **E8005** extra on reference side +- **E8005** → `Conditions.TestNotNull.Fn::Not` L30 in `bad_conditions_condition_functions_json` + > None is not of type 'array' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E8001) → `Conditions.NullCondition` L51 in `bad_conditions_yaml` + > None is not of type 'boolean' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E8001) → `Conditions` L6 in `bad_core_conditions_list_yaml` + > [{'isProduction': {'Fn::Equals': [{'Ref': 'myEnvironment'}, 'prod']}}] is not of type 'object' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.AlarmName.Fn::If.0` L172-175 in `lsp_condition-usage_yaml` + > {'Fn::And': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB' +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.Threshold.Fn::If.0` L184-187 in `lsp_condition-usage_yaml` + > {'Fn::Or': [{'Condition': 'IsProduction'}, {'Condition': 'ShouldCreateDatabase'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', +- **F0013** extra on reference side +- **F0013** (cfn-lint: E1028) `LogicalConditionResource` → `Properties.TreatMissingData.Fn::If.0` L192-194 in `lsp_condition-usage_yaml` + > {'Fn::Not': [{'Condition': 'IsProduction'}]} is not one of ['IsProduction', 'IsDevelopment', 'ShouldCreateDatabase', 'IsProductionAndCreateDB', 'IsDevOrCreateDB', 'NotProduction', 'ComplexCondition'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `ListPolicies` → `UpdateReplacePolicy` L19 in `bad_lifecycle_policy_shapes_yaml` + > ['Retain'] is not one of ['Delete', 'Retain'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `ObjectPolicies` → `UpdateReplacePolicy` L25 in `bad_lifecycle_policy_shapes_yaml` + > {'Value': 'Retain'} is not one of ['Delete', 'Retain'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `InvalidMapping` → `UpdateReplacePolicy` L43 in `bad_resources_updatereplacepolicy_yaml` + > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'Snapshot'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `PolicyList` → `UpdateReplacePolicy` L16 in `bad_resources_updatereplacepolicy_yaml` + > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'Snapshot'] +- **F0018** extra on reference side +- **F0018** (cfn-lint: E3036) `UnsupportedIntrinsic` → `UpdateReplacePolicy` L32 in `bad_resources_updatereplacepolicy_yaml` + > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLListStringType.Default` L35 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLListStringType' Default 'worse' is not in AllowedValues ['good', 'better'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLMultipleElementsNotAllowed.Default` L13 in `bad_parameters_F2012_cdl_default_split_yaml` + > Parameter 'CDLMultipleElementsNotAllowed' Default 'three' is not in AllowedValues ['one', 'two'] +- **F2012** extra on engine side +- **F2012** → `Parameters.CDLAllowedValuesWithSpaces.Default` L56 in `bad_parameters_default_yaml` + > Parameter 'CDLAllowedValuesWithSpaces' Default 'three' is not in AllowedValues ['one', 'two', 'three, four'] +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'PolicyName' is a required property +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'Roles' is a required property +- **F3003** extra on reference side +- **F3003** (cfn-lint: E3003) `rIamPolicy` → `Properties` L37 in `bad_resources_iam_iam_policy_yaml` + > 'Users' is a required property +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `DynamicObjectPolicy` → `DeletionPolicy` L44 in `bad_lifecycle_conditional_invalid_policies_yaml` + > {'Value': {'Ref': 'Policy'}} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `ListPolicies` → `DeletionPolicy` L18 in `bad_lifecycle_policy_shapes_yaml` + > ['Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `ObjectPolicies` → `DeletionPolicy` L23 in `bad_lifecycle_policy_shapes_yaml` + > {'Value': 'Retain'} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `InvalidMapping` → `DeletionPolicy` L43 in `bad_resources_deletionpolicy_yaml` + > {'A': 'a1', 'B': ['b1', 'b2']} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `PolicyList` → `DeletionPolicy` L16 in `bad_resources_deletionpolicy_yaml` + > ['Snapshot', 'Retain'] is not one of ['Delete', 'Retain', 'RetainExceptOnCreate', 'Snapshot'] +- **F3016** extra on reference side +- **F3016** (cfn-lint: E3035) `UnsupportedIntrinsic` → `DeletionPolicy` L32 in `bad_resources_deletionpolicy_yaml` + > {'Fn::Cidr': ['192.168.0.0/24', 6, 5]} is not one of ['Delete', 'Retain', 'RetainExceptOnCreate'] -- FN: `I1022` ×9, `W1030` ×3, `W2010` -- FP: `I1022` ×9, `W2010` -- EE: `W9003` ×53, `I9001` ×50, `I9040` ×10 +## Per-Template Breakdown - 170 templates with differences -### `good_both_forms_yaml` - 11 mismatches (1 TP, 0 FP, 2 EE, 11 FN) +### `good_both_forms_yaml` - 22 behavioral mismatches (1 TP, 11 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 11 FN) - FN: `F3003` ×11 +- FP: `I3042` ×11 - EE: `I9001` ×2 -### `bad_generic_yaml` - 10 mismatches (30 TP, 0 FP, 42 EE, 10 FN) +### `bad_conditions_condition_functions_json` - 16 behavioral mismatches (23 TP, 8 FP, 0 ID, 1 EE, 3 multiplicity, 0 RS, 0 RI, 8 FN) -- FN: `W1036` ×6, `W1028` ×2, `E1011`, `E3673` -- EE: `I9001` ×21, `I9040` ×12, `W9003` ×5, `W9010` ×3, `I9003` +- FN: `E8004` ×4, `E8003` ×2, `F0013` ×2 +- FP: `E8004` ×4, `E8003` ×2, `F0013` ×2 +- EE: `I9040` + +### `good_lifecycle_intrinsic_scenarios_yaml` - 16 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 16 FN) + +- FN: `F0018` ×5, `F3016` ×5, `W1028` ×3, `E3055` ×2, `E3001` -### `bad_transform_serverless_template_yaml` - 10 mismatches (0 TP, 3 FP, 0 EE, 7 FN) +### `bad_transform_serverless_template_yaml` - 12 behavioral mismatches (0 TP, 3 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 9 FN) -- FN: `F3003` ×2, `E2533`, `E3039`, `F3002`, `F3012`, `F3018` +- FN: `F3003` ×2, `I3011` ×2, `E2533`, `E3039`, `F3002`, `F3012`, `F3018` - FP: `E0001` ×3 -### `quickstart_openshift_yaml` - 10 mismatches (36 TP, 5 FP, 73 EE, 5 FN) +### `bad_lifecycle_policy_shapes_yaml` - 7 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 4 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `I1022` ×5 -- FP: `I1022` ×5 -- EE: `I9001` ×54, `I9040` ×10, `W2508` ×7, `I9003`, `W9010` +- FN: `E1011`, `E3055`, `F1018`, `F1020` +- FP: `E3055`, `F0018`, `F3016` +- EE: `F1101` ×6, `I9040` ×4 -### `good_lifecycle_intrinsic_scenarios_yaml` - 9 mismatches (0 TP, 0 FP, 0 EE, 9 FN) +### `bad_conditions_equals_yaml` - 9 behavioral mismatches (12 TP, 4 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `F0018` ×3, `F3016` ×3, `W1028` ×2, `E3001` +- FN: `E8003` ×4, `F1020` +- FP: `E8003` ×4 +- EE: `F0001` -### `bad_resources_cloudformation_stacks_yaml` - 8 mismatches (6 TP, 0 FP, 2 EE, 8 FN) +### `bad_generic_yaml` - 10 behavioral mismatches (30 TP, 0 FP, 5 ID, 37 EE, 0 multiplicity, 0 RS, 0 RI, 10 FN) -- FN: `E3043` ×8 -- EE: `I9040` ×2 +- FN: `W1036` ×6, `W1028` ×2, `E1011`, `E3673` +- ID: `W9003` ×5 +- EE: `I9001` ×21, `I9040` ×12, `W9010` ×3, `I9003` -### `bad_resources_iam_identity_policy_e3510_yaml` - 8 mismatches (11 TP, 1 FP, 10 EE, 7 FN) +### `bad_conditions_and_yaml` - 8 behavioral mismatches (8 TP, 4 FP, 0 ID, 2 EE, 1 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3003` ×6, `W1030` -- FP: `E3510` -- EE: `I9001` ×6, `I9040` ×2, `W2512`, `W9002` +- FN: `E8004` ×4 +- FP: `E8004` ×4 +- EE: `E9106`, `F0001` -### `bad_resources_properties_atleastone_yaml` - 8 mismatches (3 TP, 0 FP, 0 EE, 8 FN) +### `bad_core_resource_attributes_yaml` - 5 behavioral mismatches (14 TP, 2 FP, 0 ID, 5 EE, 3 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `F3003` ×6, `E3510` ×2 +- FN: `E3066` ×2, `E3055` +- FP: `E3001`, `E3055` +- EE: `I9040` ×4, `W9013` -### `gh-issues_issue-235_yaml` - 8 mismatches (106 TP, 0 FP, 124 EE, 8 FN) +### `bad_resources_properties_atleastone_yaml` - 8 behavioral mismatches (3 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 8 FN) -- FN: `I3013` ×3, `E3707` ×2, `E0002`, `E3720`, `F3012` -- EE: `I9001` ×65, `I9040` ×38, `W9008` ×13, `W9003` ×5, `F3003`, `W9002`, `W9013` +- FN: `F3003` ×6, `E3510` ×2 -### `lsp_parameter_usage_yaml` - 8 mismatches (4 TP, 0 FP, 14 EE, 8 FN) +### `lsp_parameter_usage_yaml` - 8 behavioral mismatches (4 TP, 0 FP, 0 ID, 14 EE, 0 multiplicity, 0 RS, 0 RI, 8 FN) - FN: `W1031` ×6, `W1032` ×2 - EE: `I9001` ×7, `I9040` ×7 -### `bad_lifecycle_policy_shapes_yaml` - 7 mismatches (6 TP, 3 FP, 10 EE, 4 FN) +### `bad_lifecycle_conditional_invalid_policies_yaml` - 6 behavioral mismatches (9 TP, 4 FP, 0 ID, 10 EE, 1 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `F0018` ×2, `F3016` ×2 -- FP: `E3055`, `F0018`, `F3016` -- EE: `F1101` ×6, `I9040` ×4 +- FN: `W1030` ×2 +- FP: `F0018` ×2, `F3016` ×2 +- EE: `I9040` ×6, `F1101` ×4 + +### `bad_resources_iam_identity_policy_e3510_yaml` - 7 behavioral mismatches (11 TP, 0 FP, 1 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) + +- FN: `F3003` ×6, `W1030` +- ID: `E3510` +- EE: `I9001` ×6, `I9040` ×2, `W2512`, `W9002` -### `bad_schema_composition_yaml` - 7 mismatches (4 TP, 0 FP, 3 EE, 7 FN) +### `bad_schema_composition_yaml` - 7 behavioral mismatches (4 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) - FN: `F3003` ×7 - EE: `I9040` ×2, `I9001` -### `good_transform_applications_location_yaml` - 7 mismatches (0 TP, 4 FP, 2 EE, 3 FN) +### `bad_templates_transform_invalid_entries_yaml` - 7 behavioral mismatches (0 TP, 3 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3003`, `F3012`, `F3017` -- FP: `I3011` ×4 -- EE: `I9040` ×2 +- FN: `E1005` ×4 +- FP: `E1005` ×3 -### `lsp_condition-usage_yaml` - 7 mismatches (12 TP, 0 FP, 23 EE, 7 FN) +### `gh-issues_issue-235_yaml` - 7 behavioral mismatches (106 TP, 0 FP, 6 ID, 118 EE, 0 multiplicity, 0 RS, 0 RI, 7 FN) -- FN: `F6101` ×4, `F0013` ×3 -- EE: `I9001` ×11, `I9040` ×6, `E1028` ×3, `I9003`, `W9008`, `W9010` +- FN: `I3013` ×3, `E3707` ×2, `E3720`, `F3012` +- ID: `W9003` ×5, `F3003` +- EE: `I9001` ×65, `I9040` ×38, `W9008` ×13, `W9002`, `W9013` -### `bad_core_conditions_yaml` - 6 mismatches (17 TP, 0 FP, 17 EE, 6 FN) +### `lsp_condition-usage_yaml` - 4 behavioral mismatches (12 TP, 0 FP, 3 ID, 20 EE, 3 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F3014` ×2, `W1001` ×2, `F3003`, `W3698` -- EE: `I9001` ×10, `I9040` ×7 +- FN: `F6101` ×4 +- ID: `E1028` ×3 +- EE: `I9001` ×11, `I9040` ×6, `I9003`, `W9008`, `W9010` -### `bad_core_resource_attributes_yaml` - 6 mismatches (15 TP, 1 FP, 5 EE, 5 FN) +### `quickstart_nist_application_yaml` - 7 behavioral mismatches (42 TP, 2 FP, 53 ID, 60 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `E3001` ×2, `E3066` ×2, `E3055` -- FP: `E3055` -- EE: `I9040` ×4, `W9013` +- FN: `W1030` ×3, `W2506` ×2 +- FP: `W2506` ×2 +- ID: `W9003` ×53 +- EE: `I9001` ×50, `I9040` ×10 + +### `bad_core_conditions_yaml` - 6 behavioral mismatches (17 TP, 0 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) -### `bad_parameters_configuration_yaml` - 6 mismatches (33 TP, 0 FP, 1 EE, 6 FN) +- FN: `F3014` ×2, `W1001` ×2, `F3003`, `W3698` +- EE: `I9001` ×10, `I9040` ×7 -- FN: `E2001` ×4, `W2001`, `W2002` +### `bad_parameters_configuration_yaml` - 5 behavioral mismatches (33 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 5 FN) + +- FN: `E2001` ×3, `W2001`, `W2002` - EE: `I9040` -### `bad_route53_conditional_record_arrays_yaml` - 6 mismatches (4 TP, 6 FP, 15 EE, 0 FN) +### `bad_route53_conditional_record_arrays_yaml` - 6 behavioral mismatches (4 TP, 6 FP, 0 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3023` ×6 - EE: `I9001` ×15 -### `good_ecs_fargate_units_and_sizes_yaml` - 6 mismatches (0 TP, 0 FP, 43 EE, 6 FN) - -- FN: `E3047` ×3, `E3048` ×3 -- EE: `I9001` ×43 - -### `good_functions_sub_needed_custom_excludes_yaml` - 6 mismatches (3 TP, 0 FP, 2 EE, 6 FN) +### `good_functions_sub_needed_custom_excludes_yaml` - 6 behavioral mismatches (3 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) - FN: `E3530` ×6 - EE: `I9001`, `I9040` -### `lsp_parameter_usage_json` - 6 mismatches (4 TP, 0 FP, 10 EE, 6 FN) +### `lsp_parameter_usage_json` - 6 behavioral mismatches (4 TP, 0 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 6 FN) - FN: `W1031` ×4, `W1032` ×2 - EE: `I9001` ×5, `I9040` ×5 -### `bad_lifecycle_conditional_invalid_policies_yaml` - 5 mismatches (9 TP, 4 FP, 10 EE, 1 FN) +### `quickstart_nat-instance_json` - 6 behavioral mismatches (4 TP, 1 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `F3016` -- FP: `F0018` ×2, `F3016` ×2 -- EE: `I9040` ×6, `F1101` ×4 +- FN: `W1030` ×4, `W2506` +- FP: `W2506` +- EE: `I9001` ×10, `I9003`, `I9040` -### `bad_resources_elasticache_cache_cluster_failover_yaml` - 5 mismatches (12 TP, 0 FP, 18 EE, 5 FN) +### `bad_resources_elasticache_cache_cluster_failover_yaml` - 5 behavioral mismatches (12 TP, 0 FP, 0 ID, 18 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) - FN: `E3026` ×5 - EE: `I9001` ×11, `I9040` ×7 -### `gh-issues_issue-61_json` - 5 mismatches (3 TP, 0 FP, 1 EE, 5 FN) +### `bad_resources_iam_iam_policy_yaml` - 1 behavioral mismatches (20 TP, 1 FP, 0 ID, 3 EE, 4 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F3003` ×5 -- EE: `I9040` - -### `lsp_constants_json` - 5 mismatches (3 TP, 2 FP, 3 EE, 3 FN) - -- FN: `E3024`, `F1018`, `F1020` -- FP: `F1018`, `F1020` -- EE: `I9001` ×2, `I9040` +- FP: `E1028` +- EE: `I9001`, `I9040`, `W2512` -### `lsp_constants_yaml` - 5 mismatches (3 TP, 2 FP, 3 EE, 3 FN) +### `gh-issues_issue-61_json` - 5 behavioral mismatches (3 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 5 FN) -- FN: `E3024`, `F1018`, `F1020` -- FP: `F1018`, `F1020` -- EE: `I9001` ×2, `I9040` +- FN: `F3003` ×5 +- EE: `I9040` -### `bad_E3019_identity_reference_forms_yaml` - 4 mismatches (5 TP, 4 FP, 12 EE, 0 FN) +### `bad_E3019_identity_reference_forms_yaml` - 4 behavioral mismatches (5 TP, 4 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3019` ×4 - EE: `I9001` ×6, `I9040` ×6 -### `bad_E3022_equivalent_subnet_forms_yaml` - 4 mismatches (1 TP, 4 FP, 8 EE, 0 FN) +### `bad_E3022_equivalent_subnet_forms_yaml` - 4 behavioral mismatches (1 TP, 4 FP, 0 ID, 8 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3022` ×4 - EE: `I9001` ×8 -### `bad_core_sections_not_objects_yaml` - 4 mismatches (3 TP, 0 FP, 0 EE, 4 FN) +### `bad_conditions_yaml` - 2 behavioral mismatches (18 TP, 0 FP, 2 ID, 9 EE, 2 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `E0002` ×4 +- FN: `E3024` ×2 +- ID: `F3002` ×2 +- EE: `I9001` ×4, `I9040` ×2, `W1103`, `W9010`, `W9053` -### `bad_functions_join_yaml` - 4 mismatches (2 TP, 0 FP, 6 EE, 4 FN) +### `bad_functions_import_value_yaml` - 4 behavioral mismatches (1 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `E1021` ×4 -- EE: `I9001` ×4, `I9040` ×2 +- FN: `E1016` ×2, `E8003` +- FP: `E8003` +- EE: `I9001` ×2, `I9040` -### `bad_noecho_yaml` - 4 mismatches (0 TP, 2 FP, 2 EE, 2 FN) +### `bad_functions_join_yaml` - 4 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `W2010` ×2 -- FP: `W2010` ×2 -- EE: `I9040` ×2 +- FN: `E1021` ×4 +- EE: `I9001` ×4, `I9040` ×2 -### `bad_parameters_F2012_cdl_default_split_yaml` - 4 mismatches (5 TP, 0 FP, 8 EE, 4 FN) +### `bad_parameters_F2012_cdl_default_split_yaml` - 2 behavioral mismatches (9 TP, 2 FP, 0 ID, 0 EE, 2 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F2015` ×4 -- EE: `F2012` ×8 +- FP: `F2012` ×2 -### `bad_properties_sg_ingress_yaml` - 4 mismatches (16 TP, 0 FP, 28 EE, 4 FN) +### `bad_properties_sg_ingress_yaml` - 4 behavioral mismatches (16 TP, 0 FP, 7 ID, 21 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `F3014` ×4 -- EE: `I9001` ×18, `W9003` ×7, `I9040` ×3 +- ID: `W9003` ×7 +- EE: `I9001` ×18, `I9040` ×3 -### `bad_resources_iam_iam_policy_yaml` - 4 mismatches (20 TP, 1 FP, 4 EE, 3 FN) +### `bad_resources_deletionpolicy_yaml` - 1 behavioral mismatches (17 TP, 0 FP, 0 ID, 13 EE, 3 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `F3003` ×3 -- FP: `E3510` -- EE: `E1028`, `I9001`, `I9040`, `W2512` +- FN: `W2001` +- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` -### `bad_resources_iam_resource_policy_yaml` - 4 mismatches (0 TP, 0 FP, 2 EE, 4 FN) +### `bad_resources_iam_resource_policy_yaml` - 4 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `E3513` ×4 - EE: `I9040` ×2 -### `bad_sam_connector_missing_source_yaml` - 4 mismatches (0 TP, 1 FP, 0 EE, 3 FN) +### `bad_resources_updatereplacepolicy_yaml` - 1 behavioral mismatches (19 TP, 0 FP, 0 ID, 13 EE, 3 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `W2001` +- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` + +### `bad_sam_connector_missing_source_yaml` - 4 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×3 - FP: `E0001` -### `bad_transform_auto_publish_alias_yaml` - 4 mismatches (0 TP, 2 FP, 0 EE, 2 FN) +### `bad_transform_auto_publish_alias_yaml` - 4 behavioral mismatches (0 TP, 2 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E2531` ×2 - FP: `E0001` ×2 -### `gh-issues_issue-38_json` - 4 mismatches (0 TP, 0 FP, 2 EE, 4 FN) +### `gh-issues_issue-38_json` - 4 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `I3010` ×4 - EE: `I9001`, `I9040` -### `good_core_conditions_yaml` - 4 mismatches (6 TP, 0 FP, 22 EE, 4 FN) +### `good_core_conditions_yaml` - 4 behavioral mismatches (6 TP, 0 FP, 0 ID, 22 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) - FN: `F3014` ×2, `W1001`, `W3698` - EE: `I9001` ×10, `I9040` ×7, `W9010` ×4, `I9003` -### `quickstart_nat-instance_json` - 4 mismatches (5 TP, 0 FP, 12 EE, 4 FN) - -- FN: `W1030` ×4 -- EE: `I9001` ×10, `I9003`, `I9040` - -### `quickstart_nist_vpc_management_yaml` - 4 mismatches (34 TP, 2 FP, 68 EE, 2 FN) - -- FN: `I1022` ×2 -- FP: `I1022` ×2 -- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` - -### `quickstart_vpc-management_json` - 4 mismatches (20 TP, 2 FP, 83 EE, 2 FN) - -- FN: `I1022` ×2 -- FP: `I1022` ×2 -- EE: `I9001` ×59, `W9003` ×15, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` - -### `bad_conditions_condition_functions_json` - 3 mismatches (31 TP, 0 FP, 1 EE, 3 FN) - -- FN: `E8003`, `E8004`, `E8005` -- EE: `I9040` - -### `bad_conditions_yaml` - 3 mismatches (18 TP, 0 FP, 12 EE, 3 FN) - -- FN: `E3024` ×2, `F0013` -- EE: `I9001` ×4, `F3002` ×2, `I9040` ×2, `E1028`, `W1103`, `W9010`, `W9053` +### `lsp_comprehensive_json` - 4 behavioral mismatches (9 TP, 0 FP, 1 ID, 32 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -### `bad_core_E3001_resource_shape_yaml` - 3 mismatches (9 TP, 0 FP, 8 EE, 3 FN) - -- FN: `E0002`, `E3001`, `E3005` -- EE: `I9001` ×4, `I9040` ×4 - -### `bad_limit_numbers_yaml` - 3 mismatches (401 TP, 0 FP, 506 EE, 3 FN) - -- FN: `E3010`, `E6010`, `E7010` -- EE: `I9040` ×501, `F0003`, `F0004`, `F0007`, `F0008`, `F0050` +- FN: `W1001` ×2, `E1701`, `F3012` +- ID: `W9003` +- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W2508`, `W9008` -### `bad_parameters_default_yaml` - 3 mismatches (18 TP, 0 FP, 5 EE, 3 FN) +### `lsp_comprehensive_yaml` - 4 behavioral mismatches (9 TP, 0 FP, 2 ID, 33 EE, 0 multiplicity, 0 RS, 0 RI, 4 FN) -- FN: `F2015` ×3 -- EE: `F2012` ×4, `F0001` +- FN: `W1001` ×2, `E1701`, `F3012` +- ID: `W9003` ×2 +- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W1103`, `W2508`, `W9008` -### `bad_rds_dbclusterinstanceclass_invalid_yaml` - 3 mismatches (5 TP, 0 FP, 7 EE, 3 FN) +### `bad_rds_dbclusterinstanceclass_invalid_yaml` - 3 behavioral mismatches (5 TP, 0 FP, 3 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `E3692` ×3 -- EE: `F3003` ×3, `I9001` ×2, `I9003`, `I9040` +- ID: `F3003` ×3 +- EE: `I9001` ×2, `I9003`, `I9040` -### `bad_resources_circular_dependency_yaml` - 3 mismatches (27 TP, 0 FP, 35 EE, 3 FN) +### `bad_resources_circular_dependency_yaml` - 3 behavioral mismatches (27 TP, 0 FP, 5 ID, 30 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `W3037` ×2, `F1018` -- EE: `I9001` ×20, `I9040` ×9, `W9003` ×5, `I9003` - -### `bad_resources_deletionpolicy_yaml` - 3 mismatches (17 TP, 0 FP, 13 EE, 3 FN) - -- FN: `F3016` ×3 -- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` +- ID: `W9003` ×5 +- EE: `I9001` ×20, `I9040` ×9, `I9003` -### `bad_resources_dynamodb_attributes_transform_e3639_yaml` - 3 mismatches (6 TP, 3 FP, 10 EE, 0 FN) +### `bad_resources_dynamodb_attributes_transform_e3639_yaml` - 3 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 - EE: `F1101` ×4, `I9001` ×3, `I9040` ×3 -### `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - 3 mismatches (18 TP, 3 FP, 18 EE, 0 FN) +### `bad_resources_dynamodb_provisioned_throughput_e3639_yaml` - 3 behavioral mismatches (18 TP, 3 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 -- EE: `I9001` ×10, `I9040` ×7, `F3003` - -### `bad_resources_updatereplacepolicy_yaml` - 3 mismatches (19 TP, 0 FP, 13 EE, 3 FN) - -- FN: `F0018` ×3 -- EE: `I9001` ×4, `I9040` ×4, `W9008` ×3, `F1101`, `I9003` +- EE: `I9001` ×10, `I9040` ×7 -### `bad_route53_yaml` - 3 mismatches (31 TP, 0 FP, 20 EE, 3 FN) +### `bad_route53_yaml` - 3 behavioral mismatches (31 TP, 0 FP, 0 ID, 20 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `E3023` ×3 - EE: `I9001` ×19, `I9002` -### `bad_sam_connector_missing_destination_yaml` - 3 mismatches (0 TP, 1 FP, 0 EE, 2 FN) +### `bad_sam_connector_missing_destination_yaml` - 3 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3003` ×2 - FP: `E0001` -### `bad_sam_globals_unknown_property_yaml` - 3 mismatches (0 TP, 1 FP, 0 EE, 2 FN) +### `bad_sam_globals_unknown_property_yaml` - 3 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3724`, `F3002` - FP: `E0001` -### `bad_security_issues_yaml` - 3 mismatches (1 TP, 0 FP, 3 EE, 3 FN) +### `bad_security_issues_yaml` - 3 behavioral mismatches (1 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×3 - EE: `I9001`, `I9040`, `W2508` -### `good_resources_dynamodb_attributes_transform_yaml` - 3 mismatches (6 TP, 3 FP, 10 EE, 0 FN) +### `good_resources_dynamodb_attributes_transform_yaml` - 3 behavioral mismatches (6 TP, 3 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` ×3 - EE: `F1101` ×4, `I9001` ×3, `I9040` ×3 -### `good_stackset_conditional_template_source_yaml` - 3 mismatches (0 TP, 0 FP, 2 EE, 3 FN) +### `good_stackset_conditional_template_source_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) - FN: `F3003` ×2, `F3018` - EE: `I9001` ×2 -### `good_unknown_resource_types_ignored_yaml` - 3 mismatches (0 TP, 0 FP, 0 EE, 3 FN) +### `good_transform_applications_location_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 4 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `F3006` ×3 +- FN: `F3003`, `F3012`, `F3017` +- ID: `I3011` ×4 +- EE: `I9040` ×2 -### `lsp_comprehensive_json` - 3 mismatches (10 TP, 0 FP, 32 EE, 3 FN) +### `good_unknown_resource_types_ignored_yaml` - 3 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 3 FN) -- FN: `W1001` ×2, `E1701` -- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W2508`, `W9008` +- FN: `F3006` ×3 -### `lsp_comprehensive_yaml` - 3 mismatches (10 TP, 0 FP, 34 EE, 3 FN) +### `bad_E8007_condition_undefined_in_expr_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `W1001` ×2, `E1701` -- EE: `I9001` ×24, `I9040` ×4, `F8611`, `I9003`, `W1103`, `W2508`, `W9003`, `W9008` +- FN: `E8004` +- FP: `E8007` +- EE: `I9040` -### `bad_F3018_conditional_required_novalue_yaml` - 2 mismatches (1 TP, 0 FP, 3 EE, 2 FN) +### `bad_F3018_conditional_required_novalue_yaml` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3003` ×2 - EE: `I9001` ×2, `I9040` -### `bad_W9006_every_allowed_value_too_long_json` - 2 mismatches (0 TP, 0 FP, 3 EE, 2 FN) +### `bad_W9006_every_allowed_value_too_long_json` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1030` ×2 - EE: `I9001`, `I9040`, `W9006` -### `bad_aurora_with_allocated_storage_yaml` - 2 mismatches (2 TP, 0 FP, 5 EE, 2 FN) +### `bad_aurora_with_allocated_storage_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 1 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3682`, `E3707` -- EE: `I9001` ×2, `I9003`, `I9040`, `W9003` +- ID: `W9003` +- EE: `I9001` ×2, `I9003`, `I9040` -### `bad_conditions_equals_yaml` - 2 mismatches (16 TP, 0 FP, 1 EE, 2 FN) +### `bad_core_E3001_resource_shape_yaml` - 1 behavioral mismatches (9 TP, 0 FP, 0 ID, 8 EE, 1 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E8003`, `F1020` -- EE: `F0001` +- FN: `E3005` +- EE: `I9001` ×4, `I9040` ×4 -### `bad_core_conditions_list_yaml` - 2 mismatches (1 TP, 0 FP, 1 EE, 2 FN) +### `bad_core_conditions_missing_yaml` - 2 behavioral mismatches (1 TP, 1 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E0002`, `F0013` +- FN: `E8004` +- FP: `E8007` - EE: `F0001` -### `bad_findinmap_bad_yaml` - 2 mismatches (0 TP, 0 FP, 2 EE, 2 FN) - -- FN: `E1011`, `E3024` -- EE: `F1012`, `I9001` - -### `bad_functions_foreach_no_transform_yaml` - 2 mismatches (4 TP, 0 FP, 0 EE, 2 FN) +### `bad_functions_relationship_conditions_yaml` - 2 behavioral mismatches (7 TP, 1 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E0002`, `E6001` +- FN: `W1001` +- FP: `W1001` +- EE: `I9040` ×4, `I9001` ×2 -### `bad_functions_import_value_yaml` - 2 mismatches (2 TP, 0 FP, 3 EE, 2 FN) +### `bad_limit_numbers_yaml` - 2 behavioral mismatches (402 TP, 0 FP, 0 ID, 505 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `E1016` ×2 -- EE: `I9001` ×2, `I9040` +- FN: `E3010`, `E6010` +- EE: `I9040` ×501, `F0003`, `F0004`, `F0007`, `F0008` -### `bad_functions_tojsonstring_no_transform_yaml` - 2 mismatches (2 TP, 1 FP, 1 EE, 1 FN) +### `bad_limit_size_yaml` - 2 behavioral mismatches (1196 TP, 0 FP, 0 ID, 899 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FN: `F1031` -- FP: `F1031` -- EE: `I9040` +- FN: `E1002`, `E1003` +- EE: `I9001` ×897, `F0011`, `I9003` -### `bad_modules_bad_has_create_policy_yaml` - 2 mismatches (1 TP, 1 FP, 0 EE, 1 FN) +### `bad_modules_bad_has_create_policy_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 0 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E5001` - FP: `E3055` -### `bad_override_include_yaml` - 2 mismatches (2 TP, 0 FP, 6 EE, 2 FN) +### `bad_override_include_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3512`, `E3514` - EE: `I9001` ×3, `I9040` ×3 -### `bad_resources_ecs_fargate_task_sizes_e3047_yaml` - 2 mismatches (11 TP, 0 FP, 67 EE, 2 FN) - -- FN: `E3048` ×2 -- EE: `I9001` ×54, `I9040` ×9, `W9003` ×4 - -### `bad_resources_properties_list_duplicates_yaml` - 2 mismatches (1 TP, 0 FP, 0 EE, 2 FN) +### `bad_resources_properties_list_duplicates_yaml` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3037` ×2 -### `bad_resources_properties_primitive_types_map_yaml` - 2 mismatches (2 TP, 0 FP, 4 EE, 2 FN) +### `bad_resources_properties_primitive_types_map_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3012` ×2 - EE: `I9040` ×2, `W9013` ×2 -### `bad_resources_rds_not_enum_master_username_yaml` - 2 mismatches (4 TP, 1 FP, 3 EE, 1 FN) +### `bad_resources_rds_not_enum_master_username_yaml` - 2 behavioral mismatches (4 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3002` - FP: `F3017` - EE: `I9001` ×2, `I9040` -### `bad_route53_conditional_scenarios_yaml` - 2 mismatches (6 TP, 2 FP, 4 EE, 0 FN) +### `bad_route53_conditional_scenarios_yaml` - 2 behavioral mismatches (6 TP, 2 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3029` ×2 - EE: `I9001` ×4 -### `bad_sam_api_missing_stagename_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_api_missing_stagename_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_function_capacityprovider_with_vpcconfig_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_capacityprovider_with_vpcconfig_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_function_image_with_handler_runtime_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_image_with_handler_runtime_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3685` - FP: `E0001` -### `bad_sam_function_packagetype_invalid_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_packagetype_invalid_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - FP: `E0001` -### `bad_sam_function_url_config_missing_authtype_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_function_url_config_missing_authtype_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_globals_not_dict_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_not_dict_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1001` - FP: `E0001` -### `bad_sam_globals_section_not_dict_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_section_not_dict_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3724` - FP: `E0001` -### `bad_sam_globals_unknown_section_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_globals_unknown_section_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3724` - FP: `E0001` -### `bad_sam_graphqlapi_missing_auth_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_graphqlapi_missing_auth_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sam_simpletable_primarykey_missing_type_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_sam_simpletable_primarykey_missing_type_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `bad_sub_nested_intrinsic_yaml` - 2 mismatches (0 TP, 0 FP, 3 EE, 2 FN) +### `bad_sub_nested_intrinsic_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1031` ×2 - EE: `I9040` ×2, `I9001` -### `bad_transform_no_properties_yaml` - 2 mismatches (0 TP, 1 FP, 0 EE, 1 FN) +### `bad_templates_base_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E1005` +- EE: `F0001` + +### `bad_transform_no_properties_yaml` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - FP: `E0001` -### `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - 2 mismatches (1 TP, 0 FP, 43 EE, 2 FN) +### `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json` - 2 behavioral mismatches (1 TP, 0 FP, 0 ID, 43 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `W1034` ×2 - EE: `I9001` ×39, `I9040` ×4 -### `good_apigateway_method_authorizer_same_rest_api_yaml` - 2 mismatches (0 TP, 0 FP, 9 EE, 2 FN) +### `gh-issues_issue-34_json` - 2 behavioral mismatches (0 TP, 1 FP, 0 ID, 7 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `W2506` +- FP: `W2506` +- EE: `I9001` ×4, `I9040` ×2, `I9003` + +### `good_apigateway_method_authorizer_same_rest_api_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 9 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3698`, `E3699` - EE: `I9001` ×7, `I9040` ×2 -### `good_aurora_dbinstance_yaml` - 2 mismatches (2 TP, 0 FP, 6 EE, 2 FN) +### `good_aurora_dbinstance_yaml` - 2 behavioral mismatches (2 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E3707`, `E3719` - EE: `I9001` ×3, `I9002`, `I9003`, `I9040` -### `good_functions_findinmap_yaml` - 2 mismatches (0 TP, 0 FP, 6 EE, 2 FN) +### `good_functions_findinmap_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E7001` ×2 - EE: `I9001` ×3, `I9040` ×3 -### `good_parameters_used_transform_removed_yaml` - 2 mismatches (0 TP, 0 FP, 1 EE, 2 FN) +### `good_parameters_default_yaml` - 2 behavioral mismatches (14 TP, 2 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `F2012` ×2 +- EE: `F0001` + +### `good_parameters_used_transform_removed_yaml` - 2 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `F3012`, `F3017` - EE: `I9040` -### `good_parameters_used_transforms_yaml` - 2 mismatches (3 TP, 0 FP, 4 EE, 2 FN) +### `good_parameters_used_transforms_yaml` - 2 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) - FN: `E1021`, `E3724` - EE: `I9001` ×3, `I9040` -### `good_resources_properties_templated_code_sam_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `integration_ref-no-value_yaml` - 2 behavioral mismatches (7 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 2 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `F3012` ×2 +- EE: `I9040` ×2 -### `good_sam_simpletable_no_primarykey_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `quickstart_config-rules_json` - 2 behavioral mismatches (4 TP, 1 FP, 2 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `W8003` +- FP: `W8003` +- ID: `W9003` ×2 +- EE: `I9001` ×13, `I9040` ×2 -### `good_sam_simpletable_valid_yaml` - 2 mismatches (0 TP, 2 FP, 1 EE, 0 FN) +### `quickstart_nist_config_rules_yaml` - 2 behavioral mismatches (6 TP, 1 FP, 0 ID, 15 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` +- FN: `W8003` +- FP: `W8003` +- EE: `I9001` ×13, `I9040` ×2 -### `good_transform_yaml` - 2 mismatches (0 TP, 2 FP, 2 EE, 0 FN) +### `quickstart_nist_vpc_management_yaml` - 2 behavioral mismatches (35 TP, 1 FP, 0 ID, 68 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `I3011` ×2 -- EE: `I9040` ×2 +- FN: `W2506` +- FP: `W2506` +- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` -### `integration_ref-no-value_yaml` - 2 mismatches (7 TP, 0 FP, 2 EE, 2 FN) +### `quickstart_vpc-management_json` - 2 behavioral mismatches (21 TP, 1 FP, 15 ID, 68 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `F3012` ×2 -- EE: `I9040` ×2 +- FN: `W2506` +- FP: `W2506` +- ID: `W9003` ×15 +- EE: `I9001` ×59, `I9040` ×5, `W2508` ×2, `I9003`, `W2502` -### `bad_F2002_ssm_parameter_type_invalid_yaml` - 1 mismatches (1 TP, 0 FP, 2 EE, 1 FN) +### `bad_F2002_ssm_parameter_type_invalid_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F1020` - EE: `I9001`, `I9040` -### `bad_F3006_invalid_aws_namespaces_yaml` - 1 mismatches (2 TP, 0 FP, 4 EE, 1 FN) +### `bad_F3006_invalid_aws_namespaces_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3006` - EE: `W9013` ×2, `I9001`, `I9040` -### `bad_F3031_log_group_name_dollar_brace_yaml` - 1 mismatches (1 TP, 1 FP, 2 EE, 0 FN) +### `bad_F3031_log_group_name_dollar_brace_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E1155` - EE: `I9001`, `I9040` -### `bad_conditions_and_yaml` - 1 mismatches (12 TP, 0 FP, 2 EE, 1 FN) +### `bad_core_conditions_list_yaml` - 0 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E8004` -- EE: `E9106`, `F0001` +- EE: `F0001` -### `bad_core_config_invalid_json_json` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_config_invalid_json_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_config_invalid_yaml_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_config_invalid_yaml_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_directives_yaml` - 1 mismatches (5 TP, 1 FP, 6 EE, 0 FN) +### `bad_core_parse_invalid_map_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FP: `E3001` -- EE: `I9040` ×4, `F3002`, `W3030` +- FN: `F0000` +- EE: `F1101` -### `bad_core_parse_invalid_map_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_malformed_core_tag_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_malformed_core_tag_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_multiple_documents_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_multiple_documents_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_core_parse_null_key_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_core_parse_null_key_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_duplicate_yaml` - 1 behavioral mismatches (3 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `F0000` +- FP: `E3001` +- EE: `I9040` ×2 -### `bad_empty_file_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_empty_file_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) -- FN: `E1001` +- FN: `F0001` +- EE: `F1101` + +### `bad_findinmap_bad_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` + +### `bad_functions_base64_yaml` - 1 behavioral mismatches (3 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `F1012` +- EE: `I9001` ×2, `I9040` -### `bad_functions_findinmap_default_value_no_transform_yaml` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `bad_functions_findinmap_default_value_no_transform_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1011` - EE: `F1101`, `I9040` -### `bad_functions_select_yaml` - 1 mismatches (8 TP, 0 FP, 12 EE, 1 FN) +### `bad_functions_foreach_no_transform_yaml` - 1 behavioral mismatches (4 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E6001` + +### `bad_functions_select_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1017` - EE: `I9001` ×8, `I9040` ×4 -### `bad_hardcoded_partition_yaml` - 1 mismatches (0 TP, 1 FP, 5 EE, 0 FN) +### `bad_hardcoded_partition_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `F3017` - EE: `I9001` ×2, `I9040` ×2, `W9013` -### `bad_invalid_mapping_structure_yaml` - 1 mismatches (1 TP, 0 FP, 2 EE, 1 FN) - -- FN: `E7001` -- EE: `F0017`, `I9040` - -### `bad_json_parse_json` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_json_parse_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_mappings_used_yaml` - 1 mismatches (2 TP, 0 FP, 3 EE, 1 FN) +### `bad_mappings_used_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `W1034` - EE: `I9001` ×2, `I9040` -### `bad_modules_bad_has_update_policy_yaml` - 1 mismatches (2 TP, 0 FP, 0 EE, 1 FN) +### `bad_modules_bad_has_update_policy_yaml` - 0 behavioral mismatches (2 TP, 0 FP, 0 ID, 0 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E5001` -### `bad_modules_bad_uses_module_metadata_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_modules_bad_uses_module_metadata_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E5001` -### `bad_not_cloudformation_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `bad_parameters_default_yaml` - 0 behavioral mismatches (21 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E1001` - EE: `F0001` -### `bad_param_number_default_yaml` - 1 mismatches (1 TP, 0 FP, 4 EE, 1 FN) - -- FN: `F2015` -- EE: `F0016` ×2, `F0015`, `F2012` - -### `bad_pipeline_no_source_first_stage_yaml` - 1 mismatches (3 TP, 0 FP, 4 EE, 1 FN) +### `bad_pipeline_no_source_first_stage_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3701` - EE: `I9001`, `I9040`, `W9002`, `W9013` -### `bad_resources_backup_test_backup_plan_lifecycle_rule_yml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_resources_backup_test_backup_plan_lifecycle_rule_yml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3504` -### `bad_resources_codepipeline_stages_second_stage_yaml` - 1 mismatches (3 TP, 0 FP, 3 EE, 1 FN) +### `bad_resources_codepipeline_stages_second_stage_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3700` - EE: `I9001`, `I9040`, `W9002` -### `bad_resources_creation_policy_unsupported_e3055_yaml` - 1 mismatches (0 TP, 1 FP, 2 EE, 0 FN) +### `bad_resources_creation_policy_unsupported_e3055_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3055` - EE: `I9001`, `I9040` -### `bad_resources_dynamodb_conditional_scenarios_yaml` - 1 mismatches (8 TP, 1 FP, 5 EE, 0 FN) +### `bad_resources_dynamodb_conditional_scenarios_yaml` - 1 behavioral mismatches (8 TP, 1 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3639` - EE: `I9040` ×3, `I9001` ×2 -### `bad_resources_iam_iam_policy_conditional_policies_yaml` - 1 mismatches (2 TP, 0 FP, 4 EE, 1 FN) +### `bad_resources_iam_iam_policy_conditional_policies_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9040` ×2, `W2512` ×2 -### `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9001` -### `bad_resources_iam_identity_policy_wildcard_service_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_resources_iam_identity_policy_wildcard_service_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E3510` -### `bad_resources_lambda_required_properties_yaml` - 1 mismatches (4 TP, 0 FP, 8 EE, 1 FN) +### `bad_resources_lambda_required_properties_yaml` - 1 behavioral mismatches (4 TP, 0 FP, 1 ID, 7 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3678` -- EE: `I9040` ×3, `W9013` ×3, `F3003`, `I9001` +- ID: `F3003` +- EE: `I9040` ×3, `W9013` ×3, `I9001` -### `bad_resources_properties_string_size_yaml` - 1 mismatches (3 TP, 0 FP, 3 EE, 1 FN) +### `bad_resources_properties_string_size_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3065` - EE: `I9040` ×3 -### `bad_resources_rds_not_enum_master_username_join_yaml` - 1 mismatches (1 TP, 1 FP, 2 EE, 0 FN) +### `bad_resources_rds_not_enum_master_username_join_yaml` - 1 behavioral mismatches (1 TP, 1 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `F3017` - EE: `I9001` ×2 -### `bad_sam_function_autopublishalias_invalid_name_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_autopublishalias_invalid_name_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_deploymentpreference_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_deploymentpreference_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_dlq_invalid_type_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_dlq_invalid_type_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_dlq_missing_targetarn_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_dlq_missing_targetarn_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_functionscaling_without_capacityprovider_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_functionscaling_without_capacityprovider_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_provisioned_concurrency_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_provisioned_concurrency_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_versiondeletionpolicy_without_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_versiondeletionpolicy_without_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_zip_missing_runtime_handler_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_zip_missing_runtime_handler_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_function_zip_with_imageuri_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_function_zip_with_imageuri_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_layerversion_invalid_compatible_architectures_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_layerversion_invalid_compatible_architectures_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_layerversion_invalid_retention_policy_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_layerversion_invalid_retention_policy_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_simpletable_primarykey_invalid_type_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_simpletable_primarykey_invalid_type_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_statemachine_both_definitions_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_statemachine_both_definitions_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_sam_statemachine_no_definition_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_sam_statemachine_no_definition_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `bad_schema_property_constraints_yaml` - 1 mismatches (1 TP, 0 FP, 11 EE, 1 FN) +### `bad_schema_property_constraints_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 11 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1161` - EE: `I9001` ×6, `I9040` ×2, `W9002`, `W9009`, `W9013` -### `bad_schema_required_xor_conditional_yaml` - 1 mismatches (1 TP, 0 FP, 5 EE, 1 FN) +### `bad_schema_required_xor_conditional_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 5 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001` ×5 -### `bad_schema_structural_yaml` - 1 mismatches (6 TP, 0 FP, 10 EE, 1 FN) +### `bad_schema_structural_yaml` - 1 behavioral mismatches (6 TP, 0 FP, 0 ID, 10 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001` ×8, `I9040` ×2 -### `bad_string_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_string_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_sub_needed_yaml` - 1 mismatches (3 TP, 0 FP, 2 EE, 1 FN) +### `bad_sub_needed_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1161` - EE: `I9001`, `I9040` -### `bad_template_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `bad_template_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F0000` +- EE: `F1101` -### `bad_templates_base_null_yaml` - 1 mismatches (2 TP, 0 FP, 1 EE, 1 FN) +### `bad_templates_base_null_yaml` - 0 behavioral mismatches (2 TP, 0 FP, 0 ID, 1 EE, 1 multiplicity, 0 RS, 0 RI, 0 FN) -- FN: `E1001` - EE: `F0001` -### `bad_templates_transform_invalid_entries_yaml` - 1 mismatches (3 TP, 0 FP, 0 EE, 1 FN) - -- FN: `E1005` - -### `bad_transform_serverless_auto_publish_alias_yaml` - 1 mismatches (0 TP, 1 FP, 0 EE, 0 FN) +### `bad_transform_serverless_auto_publish_alias_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) - FP: `E0001` -### `cdk_application-load-balancer--LoadBalancerStack.template_json` - 1 mismatches (5 TP, 0 FP, 72 EE, 1 FN) +### `cdk_application-load-balancer--LoadBalancerStack.template_json` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 72 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3712` - EE: `I9001` ×68, `I9040` ×4 -### `cdk_classic-load-balancer--LoadBalancerStack.template_json` - 1 mismatches (1 TP, 0 FP, 65 EE, 1 FN) +### `cdk_classic-load-balancer--LoadBalancerStack.template_json` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 65 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - EE: `I9001` ×63, `I9040` ×2 -### `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - 1 mismatches (2 TP, 0 FP, 13 EE, 1 FN) +### `cdk_py-docker-app-with-asg-alb--RDSStack.template_json` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 13 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `W3691` - EE: `I9001` ×7, `I9040` ×4, `I9003`, `W9008` -### `gh-issues_issue-186-clb_json` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `gh-issues_issue-186-clb_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3030` - EE: `I9001` ×2 -### `gh-issues_issue-201_json` - 1 mismatches (2 TP, 0 FP, 1 EE, 1 FN) - -- FN: `E1001` -- EE: `F0001` - -### `gh-issues_issue-40_yaml` - 1 mismatches (1 TP, 0 FP, 14 EE, 1 FN) +### `gh-issues_issue-40_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 14 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1041` - EE: `I9001` ×6, `I9040` ×3, `W9013` ×3, `I9003`, `W9002` -### `gh-issues_issue-67_json` - 1 mismatches (0 TP, 0 FP, 2 EE, 1 FN) +### `gh-issues_issue-67_json` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3014` - EE: `I9001`, `I9040` -### `good_custom_is-not-defined_yaml` - 1 mismatches (8 TP, 0 FP, 6 EE, 1 FN) +### `good_custom_is-not-defined_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E9004` - EE: `I9040` ×5, `I9001` -### `good_functions_sub_yaml` - 1 mismatches (11 TP, 0 FP, 12 EE, 1 FN) +### `good_functions_sub_yaml` - 1 behavioral mismatches (11 TP, 0 FP, 0 ID, 12 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1021` - EE: `I9001` ×7, `I9040` ×5 -### `good_output_value_string_yaml` - 1 mismatches (3 TP, 0 FP, 1 EE, 1 FN) - -- FN: `W6001` -- EE: `I9040` - -### `good_parameters_not_used_parameters_yaml` - 1 mismatches (3 TP, 0 FP, 4 EE, 1 FN) +### `good_parameters_not_used_parameters_yaml` - 1 behavioral mismatches (3 TP, 0 FP, 0 ID, 4 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1021` - EE: `I9001` ×3, `I9040` -### `good_resources_iam_policy_yaml` - 1 mismatches (1 TP, 0 FP, 1 EE, 1 FN) +### `good_resources_iam_policy_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 1 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `I3510` - EE: `I9001` -### `good_resources_properties_exclusive_yaml` - 1 mismatches (1 TP, 0 FP, 6 EE, 1 FN) +### `good_resources_properties_exclusive_yaml` - 1 behavioral mismatches (1 TP, 0 FP, 0 ID, 6 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E1150` - EE: `I9001` ×5, `I9040` -### `good_route53_conditional_record_arrays_yaml` - 1 mismatches (2 TP, 0 FP, 9 EE, 1 FN) +### `good_route53_conditional_record_arrays_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 9 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E3023` - EE: `I9001` ×9 -### `good_schema_resource_yaml` - 1 mismatches (0 TP, 0 FP, 0 EE, 1 FN) +### `good_schema_resource_yaml` - 1 behavioral mismatches (0 TP, 0 FP, 0 ID, 0 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3006` -### `integration_getatt-types_yaml` - 1 mismatches (8 TP, 0 FP, 17 EE, 1 FN) +### `integration_getatt-types_yaml` - 1 behavioral mismatches (8 TP, 0 FP, 0 ID, 17 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `E9004` - EE: `I9001` ×10, `I9040` ×7 -### `lsp_test-template_yaml` - 1 mismatches (2 TP, 0 FP, 2 EE, 1 FN) +### `integration_resources-cloudformation-init_yaml` - 1 behavioral mismatches (0 TP, 1 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 0 FN) + +- FP: `W2509` +- EE: `I9001`, `I9040`, `W9010` + +### `lsp_constants_json` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` ×2, `I9040` + +### `lsp_constants_yaml` - 1 behavioral mismatches (5 TP, 0 FP, 0 ID, 3 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) + +- FN: `E3024` +- EE: `I9001` ×2, `I9040` + +### `lsp_test-template_yaml` - 1 behavioral mismatches (2 TP, 0 FP, 0 ID, 2 EE, 0 multiplicity, 0 RS, 0 RI, 1 FN) - FN: `F3003` - EE: `I9040` ×2 @@ -22643,44 +19297,952 @@ These are correct diagnostics the engine reports that cfn-lint does not cover. These templates cannot be compared because no counterpart exists in the other tool's output. They are excluded from precision/recall scoring. -### Engine reports with no cfn-lint result — 2 templates, 0 diagnostics +### Engine reports with no cfn-lint result — 6 templates, 20 diagnostics -- `empty_yaml` (0 diagnostics) -- `malformed_yaml` (0 diagnostics) +- `bad_resources_properties_custom_missing_service_token_yaml` (2 diagnostics) +- `bad_resources_sqs_standard_queue_fifo_suffix_yaml` (7 diagnostics) +- `empty_yaml` (1 diagnostics) +- `good_resources_properties_custom_with_service_token_yaml` (3 diagnostics) +- `good_resources_sqs_standard_queue_name_yaml` (6 diagnostics) +- `malformed_yaml` (1 diagnostics) ## Root-Cause Analysis +Unmatched findings are classified from diagnostics emitted by the +counterpart on the same template after exact canonical identities +have been consumed. No cause is inferred from a rule prefix or severity. + ### False Negative Root Causes | Cause | Count | % of FN | Rules | |-------|------:|--------:|-------| -| Warning-level checks | 954 | 73.95% | W1001, W1020, W1028, W1030, W1031, W1032, W1034, W1036, W2001, W2002, W2010, W3037, W3691, W3698, W6001 | -| Other | 179 | 13.88% | E0002, E2001, E2531, E2533, E5001, E6001, E6010, E7001, E7010, E8003, E8004, E8005, E9004, F0000, F0013, F0018, F1018, F1020, F1031, F2015, F3002, F3003, F3006, F3012, F3014, F3016, F3017, F3018, F3030, F3037, F6101 | -| Resource property validation | 78 | 6.05% | E3001, E3005, E3010, E3023, E3024, E3026, E3039, E3043, E3047, E3048, E3055, E3065, E3066, E3504, E3510, E3512, E3513, E3514, E3530, E3673, E3678, E3682, E3685, E3692, E3698, E3699, E3700, E3701, E3707, E3712, E3719, E3720, E3724 | -| Informational checks | 52 | 4.03% | I1022, I3010, I3013, I3510 | -| Intrinsic function validation | 27 | 2.09% | E1001, E1002, E1003, E1005, E1011, E1016, E1017, E1021, E1041, E1150, E1161, E1701 | +| No equivalent engine rule emitted | 257 | 79.08% | E1001, E1002, E1003, E1011, E1016, E1021, E1041, E1150, E1161, E1701, E2531, E2533, E3001, E3005, E3010, E3023, E3024, E3026, E3039, E3055, E3065, E3066, E3504, E3512, E3513, E3514, E3530, E3673, E3678, E3682, E3685, E3692, E3698, E3699, E3700, E3701, E3707, E3712, E3719, E3720, E3724, E5001, E6001, E6010, E7001, E9004, F0000, F0001, F0018, F1018, F1020, F3002, F3003, F3006, F3012, F3014, F3016, F3017, F3018, F3030, F6101, I3010, I3011, I3510, W1001, W1028, W1030, W1031, W1032, W1034, W1036, W2001, W2002, W3037, W3691, W3698 | +| Equivalent rule/resource emitted on a different property path | 48 | 14.77% | E1005, E1017, E2001, E3023, E8003, E8004, F0013, F3003, F3012, F3014, W1001, W1030, W2001, W2506, W8003 | +| Equivalent rule emitted on a different resource/entity | 20 | 6.15% | E3055, E3510, F3006, F3012, F3014, F3037, I3013, W1030 | ### False Positive Root Causes | Cause | Count | % of FP | Rules | |-------|------:|--------:|-------| -| Stricter than cfn-lint (warnings) | 900 | 86.79% | W1020, W2010 | -| Stricter than cfn-lint (informational) | 54 | 5.21% | I1022, I3011 | -| Other | 48 | 4.63% | E0001, F0018, F1018, F1020, F1031, F3016, F3017 | -| Over-reporting property/intrinsic errors | 35 | 3.38% | E1155, E3001, E3019, E3022, E3023, E3029, E3055, E3510, E3639 | - -## Location Mismatches - 4 matched pairs disagree on line - -Same rule ID + resource + path, but the engine start line differs from -the reference. (Messages are not compared - wording may differ freely.) - -Known benign class: on transformed (SAM) templates cfn-lint anchors -findings at the resource's first line because the -transform loses property line fidelity; the engine anchors at the -actual property line - deliberately more precise, not a defect. - -- **I3042** `myKms` → `Properties.KeyPolicy.Statement.2.Principal.AWS.0.Fn::Sub` in `bad_resources_circular_dependency_yaml`: reference L191 vs engine L192 -- **I3042** `CognitoAuthorizer` → `Properties.ProviderARNs.0.Fn::Sub` in `integration_cfn-gather_yaml`: reference L60 vs engine L61 -- **W1028** `ProductionBucket` → `Properties.PublicAccessBlockConfiguration.BlockPublicAcls.Fn::If.2` in `lsp_condition-usage_yaml`: reference L66 vs engine L69 -- **W1028** `ProductionBucket` → `Properties.PublicAccessBlockConfiguration.BlockPublicPolicy.Fn::If.2` in `lsp_condition-usage_yaml`: reference L73 vs engine L76 +| No equivalent reference rule emitted | 68 | 53.97% | E0001, E1028, E1155, E3001, E3022, E3055, E3510, E3639, F2012, F3017, I3042, W2509 | +| Equivalent rule/resource emitted on a different property path | 35 | 27.78% | E1005, E3001, E8003, E8004, E8007, F0013, F1012, F2012, W1001, W2506, W8003 | +| Equivalent rule emitted on a different resource/entity | 23 | 18.25% | E3019, E3023, E3029, E3055, E3639, F0018, F3016 | + +## Representational Path Equivalences - 84 + +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.2.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: reference `Properties.Fn::If.2.Fn::If.2.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.2.Fn::If.1.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: reference `Properties.Fn::If.2.Fn::If.2.ImageId` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: reference `Properties.ImageId.Fn::If.1` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: reference `Properties.ImageId.Fn::If.2` vs engine `Properties.ImageId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E1154** `myInstance1` in `bad_core_conditions_yaml`: reference `Properties.SubnetId.Fn::If.2` vs engine `Properties.SubnetId` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `GroupInvalidFalse` in `bad_route53_conditional_record_arrays_yaml`: reference `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `GroupInvalidTrue` in `bad_route53_conditional_record_arrays_yaml`: reference `Properties.RecordSets.Fn::If.1.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `ConditionalRecordSetsInvalidFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.RecordSets.Fn::If.1.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `ConditionalRecordSetsInvalidSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.RecordSets.Fn::If.2.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `WholePropertiesRecordsInvalidFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.1.RecordSets.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3023** `WholePropertiesRecordsInvalidSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.2.RecordSets.0.ResourceRecords.0` vs engine `Properties.RecordSets.0.ResourceRecords.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3029** `AliasConflictFirst` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.1.TTL` vs engine `Properties.TTL` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3029** `AliasConflictSecond` in `bad_route53_conditional_scenarios_yaml`: reference `Properties.Fn::If.2.TTL` vs engine `Properties.TTL` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3048** `InvalidDriverInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: reference `Properties.Fn::If.1.ContainerDefinitions.0.LogConfiguration.LogDriver` vs engine `Properties.ContainerDefinitions.0.LogConfiguration.LogDriver` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3048** `PlacementInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: reference `Properties.Fn::If.1.PlacementConstraints` vs engine `Properties.PlacementConstraints` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3050** `Project` in `bad_iam_ref_with_path_yaml`: reference `Properties.ServiceRole.Ref` vs engine `Properties.ServiceRole` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **E3050** `CodeBuildProject` in `bad_resources_iam_ref_with_path_yaml`: reference `Properties.ServiceRole.Ref` vs engine `Properties.ServiceRole` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **E3053** `Task` in `bad_ecs_awsvpc_port_mismatch_yaml`: reference `Properties.ContainerDefinitions.0.PortMappings.0.HostPort` vs engine `Properties.ContainerDefinitions[0].PortMappings[0].HostPort` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.0.Tierings.0.Days` vs engine `Properties.IntelligentTieringConfigurations[0].Tierings[0].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.0.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[0].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.1.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[1].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3061** `Bucket` in `bad_s3_tiering_bad_days_yaml`: reference `Properties.IntelligentTieringConfigurations.1.Tierings.2.Days` vs engine `Properties.IntelligentTieringConfigurations[1].Tierings[2].Days` — Bracketed and dotted numeric indexes address the same authored list item. +- **E3510** `RoleConditionalPolicies` in `bad_resources_iam_iam_policy_conditional_policies_yaml`: reference `Properties.Policies.Fn::If.1.0.PolicyDocument.Statement.0.Resource` vs engine `Properties.Policies.0.PolicyDocument.Statement.0.Resource` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `RoleConditionalPolicies` in `bad_resources_iam_iam_policy_conditional_policies_yaml`: reference `Properties.Policies.Fn::If.2.0.PolicyDocument.Statement.0.Resource` vs engine `Properties.Policies.0.PolicyDocument.Statement.0.Resource` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `SomeManagedPolicy` in `bad_resources_iam_identity_policy_conditional_novalue_e3510_yaml`: reference `Properties.PolicyDocument.Statement.1.Fn::If.1.Resource.0` vs engine `Properties.PolicyDocument.Statement.1.Resource.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3510** `SomeManagedPolicy` in `good_resources_iam_policy_yaml`: reference `Properties.PolicyDocument.Statement.1.Fn::If.1.Resource.0` vs engine `Properties.PolicyDocument.Statement.1.Resource.0` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **E3715** `myInstance2` in `bad_core_conditions_yaml`: reference `Properties.BlockDeviceMappings.Fn::If.1.0.VirtualName` vs engine `Properties.BlockDeviceMappings.0.VirtualName` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F0018** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `UpdateReplacePolicy.Fn::If.1` vs engine `UpdateReplacePolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F1018** `MyEC2Instance` in `bad_functions_ref_yaml`: reference `Properties.UserData.Fn::Sub` vs engine `Properties.UserData` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `MyEC2Instance` in `bad_refs_yaml`: reference `Properties.UserData.Fn::Sub` vs engine `Properties.UserData` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_json`: reference `Metadata.Test.Fn::Sub` vs engine `Metadata.Test` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_json`: reference `Properties.BucketName.Fn::Sub` vs engine `Properties.BucketName` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_yaml`: reference `Metadata.Test.Fn::Sub` vs engine `Metadata.Test` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1018** `Bucket` in `lsp_constants_yaml`: reference `Properties.BucketName.Fn::Sub` vs engine `Properties.BucketName` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **F1020** `AnotherInstance` in `bad_functions_ref_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_functions_ref_yaml`: reference `Properties.UserData.Fn::Sub.1.myPackage.Ref` vs engine `Properties.UserData.Fn::Sub.1.myPackage` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_functions_ref_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: reference `Properties.HealthCheck.Target.Fn::Join.1.1.Ref` vs engine `Properties.HealthCheck.Target.Fn::Join.1.1` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: reference `Properties.Listeners.0.InstancePort.Ref` vs engine `Properties.Listeners.0.InstancePort` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_generic_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `RDSOptionGroup` in `bad_issues_yaml`: reference `Properties.OptionConfigurations.0.VpcSecurityGroupMemberships.0.Ref` vs engine `Properties.OptionConfigurations.0.VpcSecurityGroupMemberships.0` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_refs_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `AnotherInstance` in `bad_refs_yaml`: reference `Properties.UserData.Fn::Sub.1.myPackage.Ref` vs engine `Properties.UserData.Fn::Sub.1.myPackage` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `MyEC2Instance` in `bad_refs_yaml`: reference `Properties.BlockDeviceMappings.0.Ebs.Iops.Ref` vs engine `Properties.BlockDeviceMappings.0.Ebs.Iops` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `TestPipeline` in `bad_resources_codepipeline_stages_second_stage_yaml`: reference `Properties.Stages.1.Actions.0.Name.Ref` vs engine `Properties.Stages.1.Actions.0.Name` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `LambdaFunctionTestDefinedRef` in `good_custom_is-defined_yaml`: reference `Properties.Environment.Variables.NODE_ENV.Ref` vs engine `Properties.Environment.Variables.NODE_ENV` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: reference `Properties.ResourceId.Ref` vs engine `Properties.ResourceId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: reference `Properties.RestApiId.Ref` vs engine `Properties.RestApiId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `LaunchTemplate` in `integration_aws-ec2-launchtemplate_yaml`: reference `Properties.LaunchTemplateData.NetworkInterfaces.0.NetworkInterfaceId.Ref` vs engine `Properties.LaunchTemplateData.NetworkInterfaces.0.NetworkInterfaceId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_json`: reference `Metadata.TestObj.Ref` vs engine `Metadata.TestObj` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_json`: reference `Properties.Tags.0.Value.Ref` vs engine `Properties.Tags.0.Value` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_yaml`: reference `Metadata.TestObj.Ref` vs engine `Metadata.TestObj` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F1020** `Bucket` in `lsp_constants_yaml`: reference `Properties.Tags.0.Value.Ref` vs engine `Properties.Tags.0.Value` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **F3002** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.BadLocations` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.BadLocations` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3012** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.RestrictionType.Fn::If.1` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.RestrictionType` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.1` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.2` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3016** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: reference `DeletionPolicy.Fn::If.1` vs engine `DeletionPolicy` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3017** `myPolicy2` in `bad_resources_properties_atleastone_yaml`: reference `Properties.Fn::If.1` vs engine `Properties` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: reference `Properties.DistributionConfig.Restrictions.GeoRestriction.Fn::If.1.RestrictionType.Fn::If.1` vs engine `Properties.DistributionConfig.Restrictions.GeoRestriction.RestrictionType` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. +- **W1030** `mySubnet1` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `mySubnet2` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `mySubnet3` in `bad_functions_getaz_yaml`: reference `Properties.VpcId.Ref` vs engine `Properties.VpcId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rNatInstance` in `quickstart_nat-instance_json`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rPostProcInstance` in `quickstart_nist_application_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rMgmtBastionInstance` in `quickstart_nist_vpc_management_yaml`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_nist_vpc_management_yaml`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_nist_vpc_management_yaml`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rAppPrivateSubnetB` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rDBPrivateSubnetA` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rDBPrivateSubnetB` in `quickstart_nist_vpc_production_yaml`: reference `Properties.CidrBlock.Ref` vs engine `Properties.CidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: reference `Properties.ImageId.Ref` vs engine `Properties.ImageId` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_vpc-management_json`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_vpc-management_json`: reference `Properties.DestinationCidrBlock.Ref` vs engine `Properties.DestinationCidrBlock` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W2010** `SNSTopicWithSecretNameInRef` in `bad_noecho_yaml`: reference `Metadata.NoEchoParamInMetadata.Ref` vs engine `Metadata.NoEchoParamInMetadata` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W2010** `SNSTopicWithSecretNameInSub` in `bad_noecho_yaml`: reference `Metadata.NoEchoParamInMetadata.Fn::Sub` vs engine `Metadata.NoEchoParamInMetadata` — The paths differ only by a rule-specific intrinsic syntax suffix and normalize to the same logical value. +- **W2010** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9.Ref` vs engine `Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.1.9` — A terminal Ref syntax node and its containing logical value are the same diagnostic path identity. +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: reference `Properties.HealthCheckPort.Fn::If.1` vs engine `Properties.HealthCheckPort` — The reference retains authored Fn::If branch traversal while the engine reports the effective logical property after condition expansion. + +## Engine-Preferred Path Differences - 64 + +- **E3001** `StandardVersion` in `bad_core_resource_attributes_yaml`: reference `` vs engine `Version` — Version is the exact unsupported authored resource attribute; the reference reports the resource root. +- **E3047** `TaskDef` in `bad_fargate_bad_cpu_memory_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `FargateConditionalInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `FargateInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `CpuInvalidThenValid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `CpuValidThenInvalid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `EightVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `MalformedCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `NonCanonicalCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `OverflowingMemoryUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `SixteenVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `ThirtyTwoVcpuUnsupportedSixtyFourGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3047** `ThirtyTwoVcpuUnsupportedTwoFortyGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: reference `Properties` vs engine `Properties.Cpu` — The invalid Fargate CPU value is authored at Cpu; the reference reports only the Properties container. +- **E3060** `mySubnet2` in `bad_functions_getaz_yaml`: reference `Properties.mySubnet2.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `mySubnet3` in `bad_functions_getaz_yaml`: reference `Properties.mySubnet3.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetB` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetB.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetD.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: reference `Properties.SubnetD.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3060** `SubnetB` in `bad_subnet_overlap_yaml`: reference `Properties.SubnetB.Properties.VpcId.CidrBlock` vs engine `Properties.CidrBlock` — The engine anchors the overlapping subnet at its authored CidrBlock; the reference path redundantly embeds another resource path. +- **E3510** `PolicyDuplicateSid` in `bad_resources_iam_identity_policy_e3510_yaml`: reference `Properties.PolicyDocument.Statement` vs engine `Properties.PolicyDocument.Statement.1.Sid` — The engine identifies the duplicate Sid token; the reference reports the containing Statement collection. +- **E3639** `DDBTable` in `bad_dynamodb_provisioned_no_throughput_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitProvisioned` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitRemovedThenValue` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `ExplicitValueThenRemoved` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `NullThroughput` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3639** `DataTable` in `cdk_DemoStack.template_json`: reference `Properties` vs engine `Properties.ProvisionedThroughput` — The missing throughput requirement is identified by its logical ProvisionedThroughput property instead of the generic Properties container. +- **E3660** `BadRestApi` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.Name` — The engine identifies the exact logical Name property required by the cross-resource contract. +- **E3676** `BadListener` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.Certificates` — The engine identifies the exact logical Certificates property required by the listener contract. +- **E3704** `BadValkey` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `Properties.TransitEncryptionEnabled` — The engine identifies the exact logical TransitEncryptionEnabled property required by the resource contract. +- **E3710** `ShutdownResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **I2530** `Func` in `bad_lambda_no_snapstart_yaml`: reference `Properties.SnapStart.ApplyOn` vs engine `Properties.Runtime` — Runtime is the authored value that triggers the recommendation; the reference points at an absent SnapStart child. +- **I2530** `LambdaFn` in `bad_lambda_zipfile_java_yaml`: reference `Properties.SnapStart.ApplyOn` vs engine `Properties.Runtime` — Runtime is the authored value that triggers the recommendation; the reference points at an absent SnapStart child. +- **I3510** `myPolicy` in `bad_functions_sub_needed_yaml`: reference `Properties.PolicyDocument.Statement.1.Resource` vs engine `Properties.PolicyDocument.Statement.1.NotResource` — The source uses NotResource; the reference reports the nonexistent sibling Resource path. +- **W3696** `myAcl` in `bad_generic_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `SunsetResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh0` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh1` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh2` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh3` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh4` in `good_functions_findinmap_default_value_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh` in `good_functions_findinmap_enhanced_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3696** `Mesh2` in `good_functions_findinmap_enhanced_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LC` in `bad_cross_resource_task10_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyLaunchConfig` in `bad_properties_ebs_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MaintenanceResource` in `bad_schema_lifecycle_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_classic-load-balancer--LoadBalancerStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyFleetLaunchConfig5D7F9801` in `cdk_ecs-cluster--MyFirstEcsCluster.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `appasgLaunchConfig9EFFB3A3` in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `MyLaunchConfig` in `gh-issues_issue-37_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_functions_sub_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_parameters_not_used_parameters_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `good_parameters_used_transforms_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfig` in `good_resources_update_policy_supported_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `LaunchConfiguration` in `integration_ref-types_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftEtcdLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftMasterASLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. +- **W3697** `OpenShiftNodesLaunchConfig` in `quickstart_openshift_yaml`: reference `Properties` vs engine `` — The lifecycle concern applies to the resource type; the reference arbitrarily anchors it at Properties. + +## Non-Comparable Path Anchors - 8 + +- **E3024** `IamRole1` in `integration_ref-no-value_yaml`: reference `Properties.Tags.3` vs engine `Properties.Tags` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **E3502** `MainQueue` in `bad_sqs_fifo_standard_dlq_yaml`: reference `Properties.FifoQueue` vs engine `Properties.RedrivePolicy` — FifoQueue and RedrivePolicy are the two authored endpoints of the incompatible queue relationship; neither is a unique source anchor. +- **E3502** `FifoQueue` in `integration_cfn-gather_yaml`: reference `Properties.FifoQueue` vs engine `Properties.RedrivePolicy` — FifoQueue and RedrivePolicy are the two authored endpoints of the incompatible queue relationship; neither is a unique source anchor. +- **F3003** `myInstance2` in `bad_core_conditions_yaml`: reference `Properties.BlockDeviceMappings.Fn::If.1.0` vs engine `Properties.BlockDeviceMappings.{}` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: reference `Properties.Tags.3` vs engine `Properties.Tags` — Condition evaluation removes an array child or exposes a missing member; the authored collection and effective child have no single shared source token. +- **F3014** `Policy` in `bad_schema_required_xor_conditional_yaml`: reference `Properties.ResourceId` vs engine `Properties` — The required alternative child is absent; the engine anchors the containing Properties object while the reference names one missing alternative. +- **F3014** `ScalingPolicyBothIds` in `bad_schema_structural_yaml`: reference `Properties.ResourceId` vs engine `Properties` — The required alternative child is absent; the engine anchors the containing Properties object while the reference names one missing alternative. +- **W2533** `Function2` in `bad_resources_lambda_required_properties_yaml`: reference `Properties.PackageType` vs engine `Properties.Code` — PackageType and Code jointly determine the missing-code condition, so the diagnostic has no unique authored endpoint. + +## Representational Span Equivalences - 499 + +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `bad_conditions_condition_functions_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1001** `` in `lsp_constants_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic1` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic2` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic3` in `bad_functions_get_stack_output_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E1033** `Topic4` in `bad_functions_get_stack_output_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2001** `` in `gh-issues_issue-194_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2001** `` in `gh-issues_issue-63_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `SampleLambdaB2FF4FA1` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `ApiCorsLambda5083F55F` in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2531** `UrlShortenerFunctionB5E87AC1` in `cdk_py-url-shortener--urlshort-app.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `FailureLambdaHandlerBB58C051` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SuccessLambdaHandler0E2CD797` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `destinedLambda8DF776BB` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `dynamoStreamSubscriberLambdaHandlerD2AAE139` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer1LambdaC3C4DA46` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer2LambdaB7E263A7` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmConsumer3Lambda880BEEDF` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `atmProducerLambda71029F8F` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `ErrorLambdaHandler4224322A` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `WebserviceIntegrationLambdaHandler5E349AB7` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `LoadLambdaHandlerFDA03D53` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `ObserveLambdaHandler685FFDBB` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `TransformLambdaHandler60ABE8EE` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `extractLambdaHandlerD06B8F09` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `UnreliableLambdaHandlerD4A4DED9` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `cancelFlightLambdaHandler437EEC76` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `cancelHotelLambdaHandler09F13EF6` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `confirmFlightLambdaHandler96C3663F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `confirmHotelLambdaHandler882ACF2D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `refundPaymentLambdaHandler932D11D5` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `reserveFlightLambdaHandler3C75473D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `reserveHotelLambdaHandler020AE24A` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sagaLambdaHandlerFC24742F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `takePaymentLambdaHandlerB96529D4` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSPublishLambdaHandler51EE31BE` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `SQSSubscribeLambdaHandlerBBB58615` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `scheduledLambda8A84450D` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `LoyaltyLambdaHandler5918F0DA` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `pineappleCheckLambdaHandlerFDB742D5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `HelloWorldHandler30C22324` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `httpLambdaHandler66D9C9A8` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sqsLambdaHandler0DD5DF9B` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `sqsSubscribeLambdaHandlerD66392B8` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `snsLambdaHandlerE7B0ABE3` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `snsSubscriptionLambdaHandler68619CD8` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `consumerlambdafunction40710347` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `producerlambdafunctionCE724CE7` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `PollerFunction` in `public_lambda-poller_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `rAMIComplianceFunction` in `quickstart_config-rules_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E2533** `rCloudTrailValidationFunction` in `quickstart_config-rules_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3001** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3001** `Bucket1` in `lsp_parameter_usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3005** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3016** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3016** `ProductionBucket` in `lsp_condition-usage_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3045** `DataBucket` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3045** `Bucket` in `gh-issues_issue-54_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3062** `RDSE0E96D00` in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3505** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3628** `WebInstanceF774E10D` in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3639** `DataTable` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3677** `MyFunction` in `gh-issues_issue-47_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E3677** `FutureNodeFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8003** `` in `bad_conditions_condition_functions_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8004** `` in `bad_conditions_condition_functions_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8004** `` in `bad_conditions_condition_functions_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **E8005** `` in `bad_conditions_condition_functions_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F0000** `` in `bad_duplicate_json`: end_col 13→14 — The two JSON duplicate-key scanners include opposite quote boundaries for the same key token. +- **F1018** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1018** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1020** `Bucket` in `lsp_constants_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F1020** `Bucket` in `lsp_constants_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F2002** `` in `gh-issues_issue-201_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3002** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3003** `CloudFront2` in `integration_ref-no-value_yaml`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3004** `ClusterCreationRoleDefaultPolicyE8BDFC7B` in `gh-issues_issue-53_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3004** `ClusterKubectlReadyBarrier200052AF` in `gh-issues_issue-53_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3006** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3014** `Pipeline` in `gh-issues_issue-44_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3017** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `ImagePipeline7DDDE57F` in `gh-issues_issue-186-imagebuilder_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `MyFunction` in `gh-issues_issue-47_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `FutureNodeFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3030** `MyFunc` in `gh-issues_issue-68_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **F3032** `Canary` in `gh-issues_issue-62_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `MyFunction` in `gh-issues_issue-41_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterAwsAuthmanifestFE51F8AE` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterKubectlHandlerRole94549F93` in `gh-issues_issue-53_json`: end_col 12→11 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `ClusterNodegroupDefaultCapacityNodeGroupRole55953B04` in `gh-issues_issue-53_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `awscdkawseksClusterResourceProviderNestedStackawscdkawseksClusterResourceProviderNestedStackResource9827C454` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` in `gh-issues_issue-53_json`: end_col 9→8 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstance` in `public_watchmaker_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstance` in `quickstart_nat-instance_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstance` in `quickstart_nat-instance_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDHCPoptions` in `quickstart_vpc-management_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `DHCPOptions` in `quickstart_vpc_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I1022** `S3VPCEndpoint` in `quickstart_vpc_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `DataTable` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `DataTable` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `efsstorage` in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `efsstorage` in `cdk_py-docker-app-with-asg-alb--StorageStack.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `emrcluster` in `cdk_py-emr--emr-cluster.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `emrcluster` in `cdk_py-emr--emr-cluster.template_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `CfnLogGroup` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `CfnLogGroup` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Resource` in `gh-issues_issue-61_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Database` in `lsp_condition-usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `Database` in `lsp_condition-usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `WatchmakerInstanceLogGroup` in `public_watchmaker_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rDeepSecurityInfrastructureTemplate` in `quickstart_vpc-management_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3011** `rNatInstanceTemplate` in `quickstart_vpc-management_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo1DFB897B` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo31EA91F4` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv7CD3D355` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEvA054414A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi243BAA69` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi96D937B8` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2C960A5F` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema34D41C85` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 253→252 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3012** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterCRAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FFB2C1A86` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 242→241 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `TaskQueue` in `cdk_DemoStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `itemL3TableSqsDlqQueueD3C251B9` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `SampleQueue49AAAEFF` in `cdk_lambda-manage-s3-event-notification--AStack.template_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `BigFanTopicAnyOtherStatusSubscriberQueue51F6CD76` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `BigFanTopicStatusCreatedSubscriberQueue589E974E` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `newObjectInLandingBucketEventQueue67CBE2F2` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `RDSPublishQueue2BEA1A7F` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Queue4A7E3555` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `SQSQueue7674CD17` in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json`: end_col 21→20 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `RDSE0E96D00` in `cdk_py-docker-app-with-asg-alb--RDSStack.template_json`: end_col 16→15 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Canary` in `gh-issues_issue-62_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **I3013** `Database` in `lsp_condition-usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1028** `ProductionBucket` in `lsp_condition-usage_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1028** `ProductionBucket` in `lsp_condition-usage_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rNatInstance` in `quickstart_nat-instance_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rRouteMgmtProdDMZ` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W1030** `rRouteMgmtProdPrivate` in `quickstart_vpc-management_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 106→105 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `gh-issues_issue-201_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `good_decode_parsing_json`: end_col 10→9 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `quickstart_nat-instance_json`: end_col 11→10 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2001** `` in `quickstart_vpc-management_json`: end_col 17→16 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2501** `Database` in `lsp_condition-usage_json`: end_col 29→28 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `AppFunction` in `cdk_DemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionBD0C2D50` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `createItemFunction8D47E48A` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `deleteItemFunction2918B1B0` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `getAllItemsFunction0B7A913E` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `getOneItemFunctionE3257B22` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `updateItemFunction59415205` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `apigwasynclambdafnAD6250E4` in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `authenticationlambdaDD3A2252` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `operationallambdaFE43E13E` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct1FunctionWithReservedCEs6458B719` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct1StandardFunctionD5361E84` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct2FunctionWithReservedCEs89864BB2` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Construct2StandardFunction1EBDBFFA` in `cdk_aspects--SampleStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `BuildLambda72E2A667` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `helloWorldFunction00C940B5` in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `itemL2TableLambdaFunction1987B4C5` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `itemL3TableLambdaFunction7B818C58` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `EICEndpointisCompleteHandler0273707A` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `EICEndpointonEventHandlerC2E1F5F2` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Singleton8C7B99F3` in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Inspector2FindingHandler1F85FFBC` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Inspector2InitialScanHandler460C9991` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `Singleton8C7B99F3` in `cdk_lambda-cron--LambdaCronExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `S3EventNotificationsLambda20F17D80` in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `WidgetsWidgetHandler1BC9DB34` in `cdk_my-widget-service--MyWidgetServiceStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventConsumer1Lambda4AF2292E` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventConsumer2Lambda1631C47A` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `eventProducerLambda100D549C` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `IoTCertProviderframeworkonEvent8FF1476F` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `lambdafunction45C982D3` in `cdk_py-lambda-layer--LambdaLayerExample.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `statusLambdaCF47B86D` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `submitLambda3C32AFD4` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `RekFunction9837D13D` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `retrieveTransformedObjectLambdaD5D6532C` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `CheckLambda9CBBF9BA` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `SubmitLambda8054545E` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 14→13 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `MyFunction` in `gh-issues_issue-41_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W2531** `MyLambda` in `gh-issues_issue-65_json`: end_col 18→17 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionBD0C2D50` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkisCo57F822F2` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonEv3DB60A38` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2FframeworkonTi07114F31` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1MqEsmDeleterAmazonMqRabbitmqLambdaStackconsumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1D1E2BA2Fwaiterstatema2520C928` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 255→254 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1iscompleteB42ABDBF` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 126→125 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdaFunctionRabbitMqEventSourceAmazonMqRabbitmqLambdaStackRabbitMqBroker41CBF5C1oneventE34C977A` in `cdk_amazon-mq-rabbitmq-lambda--AmazonMqRabbitmqLambdaStack.template_json`: end_col 123→122 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `createItemFunction8D47E48A` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `deleteItemFunction2918B1B0` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `getAllItemsFunction0B7A913E` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `getOneItemFunctionE3257B22` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `updateItemFunction59415205` in `cdk_api-cors-lambda-crud-dynamodb--ApiLambdaCrudDynamoDBExample.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `apigwasynclambdafnAD6250E4` in `cdk_api-gateway-async-lambda-invocation--ApiGatewayAsyncLambdaStack.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `authenticationlambdaDD3A2252` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `operationallambdaFE43E13E` in `cdk_api-gateway-lambda-token-authorizer--gateway-lambda-auth-stack.template_json`: end_col 43→42 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1A09FC241` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction1SecurityGroupF7DF9E6F` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2F899168D` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction2SecurityGroup7268045A` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `mystatemachine15ECA539` in `cdk_api-gateway-parallel-step-functions--apigateway-parallel-stepfunctions-stack-2.template_json`: end_col 33→32 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `connectlambdaFFAE59F3` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `disconnectlambdaAC22A441` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `messagelambda16C1C2A3` in `cdk_api-websocket-lambda-dynamodb--chat-app.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ASGScalingPolicyAModestLoadC5714E5A` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `echoFunction5207BE9B` in `cdk_appsync-graphql-eventbridge--AppSyncEventBridge.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct1FunctionWithReservedCEs6458B719` in `cdk_aspects--SampleStack.template_json`: end_col 59→58 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct1StandardFunctionD5361E84` in `cdk_aspects--SampleStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct2FunctionWithReservedCEs89864BB2` in `cdk_aspects--SampleStack.template_json`: end_col 59→58 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Construct2StandardFunction1EBDBFFA` in `cdk_aspects--SampleStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `JobSubmitterFunctionFAE645C8` in `cdk_batch-ecr-openmp--AwsBatchOpenmpBenchmarkStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_cloudfront-functions--DemoCloudfrontFunctionsStack.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BuildDeployPipeline5EEC284B` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BuildLambda72E2A667` in `cdk_codepipeline-build-deploy--CodepipelineBuildDeployStack.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `helloWorldFunction00C940B5` in `cdk_cognito-api-lambda--CognitoProtectedApi.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DemoResourceProviderframeworkonEventF8E49AD2` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 62→61 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource--CustomResourceDemoStack.template_json`: end_col 73→72 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DemoResourceMyProviderframeworkonEvent65F24A35` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SingletonLambdaf7d4f7304ee111e89c2dfa7ae01bbebc492C6E5C` in `cdk_custom-resource-provider--CustomResourceDemoStack.template_json`: end_col 73→72 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `itemL2TableLambdaFunction1987B4C5` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `itemL3TableLambdaFunction7B818C58` in `cdk_ddb-stream-lambda-sns--DdbStreamStack.template_json`: end_col 51→50 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C512MiB6723FB92` in `cdk_ec2-instance--EC2Example.template_json`: end_col 89→88 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_ec2-instance--EC2Example.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EC2Instance1F00751C57ee729c1274d778` in `cdk_ec2-instance--EC2Example.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EC2Instance1F00751C57ee729c1274d778` in `cdk_ec2-instance--EC2Example.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkisCompleteB1442B18` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkonEventB48896C9` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderframeworkonTimeout83318112` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 63→62 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointProviderwaiterstatemachine1A139B58` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointisCompleteHandler0273707A` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EICEndpointonEventHandlerC2E1F5F2` in `cdk_ec2-instance-connect-endpoint--integ-testing-eicendpoint.template_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ServiceD69D759B` in `cdk_ecs-cross-stack-load-balancer--SplitAtListener-ServiceStack.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Ec2ClusterDefaultAutoScalingGroupDrainECSHookFunctionE0DEFB31` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Ec2ClusterDefaultAutoScalingGroupLifecycleHookDrainHook5CB1467E` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: end_col 74→73 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awsvpcecsdemoclusterDefaultAutoScalingGroupDrainECSHookFunctionC919C385` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: end_col 89→88 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awsvpcecsdemoclusterDefaultAutoScalingGroupLifecycleHookDrainHook4D2DB763` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: end_col 84→83 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionE17A5F5E` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: end_col 79→78 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: end_col 74→73 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `FargateServiceECC8084D` in `cdk_ecs-fargate-application-load-balanced-service--Bonjour.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sampleappServiceE7504FDB` in `cdk_ecs-fargate-service-with-auto-scaling--aws-fargate-application-autoscaling.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_eventbridge-lambda--EventBridgeLambdaStack.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json`: end_col 97→96 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_inspector2--Inspector2EnableDelegatedAdminAccountStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWS679f53fac002430cb0da5b7982bd22872D164C4C` in `cdk_inspector2--Inspector2EnableStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Inspector2FindingHandler1F85FFBC` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Inspector2InitialScanHandler460C9991` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_inspector2--Inspector2MonitoringStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SampleLambdaB2FF4FA1` in `cdk_lambda-cloudwatch-dashboard--LambdaCloudwatchDashboardStack.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_lambda-cron--LambdaCronExample.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LambdaFunctionBF21E41F` in `cdk_lambda-layer--LambdaLayerStack.template_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `S3EventNotificationsLambda20F17D80` in `cdk_lambda-manage-s3-event-notification--SharedStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `WidgetsWidgetHandler1BC9DB34` in `cdk_my-widget-service--MyWidgetServiceStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSAnyOtherStatusSubscribeLambdaHandler4037E293` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 69→68 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSCreatedStatusSubscribeLambdaHandler0467DB95` in `cdk_pat-the-big-fan--TheBigFanStack.template_json`: end_col 68→67 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-cloudwatch-dashboard--TheCloudwatchDashboardStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `FailureLambdaHandlerBB58C051` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SuccessLambdaHandler0E2CD797` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `destinedLambda8DF776BB` in `cdk_pat-the-destined-lambda--TheDestinedLambdaStack.template_json`: end_col 44→43 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `dynamoStreamSubscriberLambdaHandlerD2AAE139` in `cdk_pat-the-dynamo-streamer--TheDynamoStreamerStack.template_json`: end_col 65→64 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer1LambdaC3C4DA46` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer2LambdaB7E263A7` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmConsumer3Lambda880BEEDF` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `atmProducerLambda71029F8F` in `cdk_pat-the-eventbridge-atm--TheEventbridgeAtmStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ErrorLambdaHandler4224322A` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `WebserviceIntegrationLambdaHandler5E349AB7` in `cdk_pat-the-eventbridge-circuit-breaker--TheEventbridgeCircuitBreakerStack.template_json`: end_col 64→63 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 81→80 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LandingBucketNotificationsEF1634C6` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LoadLambdaHandlerFDA03D53` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ObserveLambdaHandler685FFDBB` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `TransformLambdaHandler60ABE8EE` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 52→51 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `extractLambdaHandlerD06B8F09` in `cdk_pat-the-eventbridge-etl--TheEventbridgeEtlStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `UnreliableLambdaHandlerD4A4DED9` in `cdk_pat-the-lambda-circuit-breaker--TheLambdaCircuitBreakerStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BookingSagaFA991213` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `cancelFlightLambdaHandler437EEC76` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `cancelHotelLambdaHandler09F13EF6` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `confirmFlightLambdaHandler96C3663F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `confirmHotelLambdaHandler882ACF2D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `refundPaymentLambdaHandler932D11D5` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `reserveFlightLambdaHandler3C75473D` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 56→55 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `reserveHotelLambdaHandler020AE24A` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sagaLambdaHandlerFC24742F` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `takePaymentLambdaHandlerB96529D4` in `cdk_pat-the-saga-stepfunction--TheSagaStepfunctionSingleTableStack.template_json`: end_col 54→53 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSPublishLambdaHandler51EE31BE` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 53→52 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSSubscribeLambdaHandlerBBB58615` in `cdk_pat-the-scalable-webhook--TheScalableWebhookStack.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `scheduledLambda8A84450D` in `cdk_pat-the-scheduled-lambda--TheScheduledLambdaStack.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LoyaltyLambdaHandler5918F0DA` in `cdk_pat-the-simple-graphql-service--TheSimpleGraphqlServiceStack.template_json`: end_col 50→49 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-simple-webservice--TheSimpleWebserviceStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `StateMachine2E01A3A5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `pineappleCheckLambdaHandlerFDB742D5` in `cdk_pat-the-state-machine--TheStateMachineStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `HelloWorldHandler30C22324` in `cdk_pat-the-waf-apigateway--APIGatewayStack.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `DynamoLambdaHandlerFB6EB814` in `cdk_pat-the-xray-tracer--TheXrayDynamoFlow.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `httpLambdaHandler66D9C9A8` in `cdk_pat-the-xray-tracer--TheXrayHttpFlow.template_json`: end_col 47→46 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sqsLambdaHandler0DD5DF9B` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `sqsSubscribeLambdaHandlerD66392B8` in `cdk_pat-the-xray-tracer--TheXraySQSFlow.template_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `snsLambdaHandlerE7B0ABE3` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `snsSubscriptionLambdaHandler68619CD8` in `cdk_pat-the-xray-tracer--TheXraySnsFlow.template_json`: end_col 58→57 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `ApiCorsLambda5083F55F` in `cdk_py-api-cors-lambda--ApiCorsLambdaStack.template_json`: end_col 39→38 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventConsumer1Lambda4AF2292E` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventConsumer2Lambda1631C47A` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `eventProducerLambda100D549C` in `cdk_py-api-eventbridge-lambda--ApiEventBridgeLambdaStack.template_json`: end_col 45→44 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SQSTriggerLambda99F71FB3` in `cdk_py-api-sqs-lambda--ApiSqsLambdaStack.template_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_py-athena-s3-glue--DemoAthenaS3GlueStack.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `consumerlambdafunction40710347` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `producerlambdafunctionCE724CE7` in `cdk_py-dynamodb-lambda--dynamodb-lambda.template_json`: end_col 48→47 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `AWSb4cf1abd4e4f4bc699441af7ccd9ec371511E620` in `cdk_py-ec2-cloudwatch--ec2-cloudwatch.template_json`: end_col 61→60 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKECRDeploymentbd07c930edb94112a20f03f096f53666512MiB28EAD8E4` in `cdk_py-ecs-serviceconnect--CdkExamplesServiceConnectStackEcrStack6B6F0F99.nested.template_json`: end_col 86→85 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CertHandler220363A9` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 36→35 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `IoTCertProviderframeworkonEvent8FF1476F` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_py-iotcore--CdkIotThingStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Singleton8C7B99F3` in `cdk_py-lambda-cron--LambdaCronExample.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdaContainerFunction5815FD88` in `cdk_py-lambda-from-container--LambdaContainerFunctionStack.template_json`: end_col 49→48 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `lambdafunction45C982D3` in `cdk_py-lambda-layer--LambdaLayerExample.template_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `StateMachine2E01A3A5` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 31→30 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `statusLambdaCF47B86D` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `submitLambda3C32AFD4` in `cdk_py-stepfunctions--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `UrlShortenerFunctionB5E87AC1` in `cdk_py-url-shortener--urlshort-app.template_json`: end_col 46→45 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_r53-resolver--R53ResolverStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 77→76 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aFD4BFC8A` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 70→69 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `RekFunction9837D13D` in `cdk_rekognition-lambda-s3-trigger--RekognitionLambdaS3TriggerStack.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyBucketF68F3FF0` in `cdk_resource-overrides--resource-overrides.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `retrieveTransformedObjectLambdaD5D6532C` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 57→56 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E` in `cdk_ssm-document-association--SsmDocumentAssociationStack.template_json`: end_col 67→66 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536` in `cdk_static-site-basic--MyStaticSite.template_json`: end_col 83→82 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F` in `cdk_static-site-basic--MyStaticSite.template_json`: end_col 66→65 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `MyStateMachine6C968CA5` in `cdk_stepfunction-external-definition--StepfunctionExternalDefinitionStack.template_json`: end_col 33→32 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CheckLambda9CBBF9BA` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 37→36 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `CronStateMachine7E50955B` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `SubmitLambda8054545E` in `cdk_stepfunctions-job-poller--aws-stepfunctions-integ.template_json`: end_col 38→37 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 34→33 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 41→40 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `Cluster9EE0221C` in `gh-issues_issue-53_json`: end_col 42→41 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `awscdkawseksKubectlProviderNestedStackawscdkawseksKubectlProviderNestedStackResourceA7AEBA6B` in `gh-issues_issue-53_json`: end_col 40→39 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rAMIComplianceFunction` in `quickstart_config-rules_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rCloudTrailValidationFunction` in `quickstart_config-rules_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rIAMAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rInstanceOpsProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rReadOnlyAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rSysAdminProfile` in `quickstart_iam_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rGWAttachmentMgmtIGW` in `quickstart_vpc-management_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3005** `rMgmtBastionInstance` in `quickstart_vpc-management_json`: end_col 55→54 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `DataBucket` in `cdk_DemoStack.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `examplebucketC9DFA43E` in `cdk_s3-object-lambda--S3ObjectLambdaStack.template_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `Bucket` in `gh-issues_issue-54-with-ownership_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3045** `Bucket` in `gh-issues_issue-54_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W3687** `NATInstanceSecurityGroup` in `quickstart_vpc_json`: end_col 35→34 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W7001** `` in `lsp_parameter_usage_json`: end_col 13→12 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W7001** `` in `quickstart_vpc-management_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 30→29 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 26→25 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 28→27 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 25→24 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 27→26 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 23→22 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `bad_conditions_condition_functions_json`: end_col 22→21 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_condition-usage_json`: end_col 20→19 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_parameter_usage_json`: end_col 15→14 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `lsp_parameter_usage_json`: end_col 19→18 — The reference uses a half-open end column while the engine reports the final occupied column. +- **W8001** `` in `quickstart_vpc-management_json`: end_col 24→23 — The reference uses a half-open end column while the engine reports the final occupied column. + +## Engine-Preferred Source Spans - 135 + +- **E1011** `myInstance` in `bad_functions_base64_yaml`: col 57→65 — The engine points at the exact invalid Base64 operand; the reference starts at the containing intrinsic. +- **E1017** `myInstance2` in `bad_functions_select_yaml`: col 11→17, end_col 38→18 — The engine points at the exact invalid Select list operand; the reference starts at the containing expression. +- **E1040** `Instance1` in `integration_formats_yaml`: col 13→21 — The engine points at the exact value with the incompatible list context; the reference starts at the containing intrinsic. +- **E3001** `StandardVersion` in `bad_core_resource_attributes_yaml`: line 3→5, col 3→5, end_line 3→5, end_col 18→12 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3019** `Bucket2` in `bad_resources_primary_identifiers_yaml`: line 150→151, col 7→9, end_line 150→151, end_col 17→15 — The primary-identifier finding is caused by the authored property value; the engine points at that intrinsic value while the reference points at its key. +- **E3022** `AuxiliaryPublicSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 44→45, col 9→11, end_line 44→45, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `PrivateSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 35→36, col 9→11, end_line 35→36, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `ProxySubnetRouteTableAssociation` in `bad_properties_rt_association_yaml`: line 52→53, col 9→11, end_line 52→53 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3022** `PublicSubnetRouteTableAssociation1` in `bad_properties_rt_association_yaml`: line 27→28, col 9→11, end_line 27→28, end_col 17→14 — The relationship mismatch is carried by the authored SubnetId value; the engine points at that value while the reference points at its key. +- **E3023** `Group` in `bad_E3023_conditional_record_items_yaml`: col 15→40, end_col 50→49 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3023** `Standalone` in `bad_E3023_conditional_record_items_yaml`: col 11→36, end_col 46→45 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3023** `MyCNAMERecordSetConditions` in `bad_route53_yaml`: line 90→91, col 7→9, end_line 90→91, end_col 22→15 — The engine points at the exact invalid conditional record value; the reference starts at the containing Fn::If expression. +- **E3047** `TaskDef` in `bad_fargate_bad_cpu_memory_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `FargateConditionalInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: line 161→165, col 5→7, end_line 161→165, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `FargateInvalidCpu` in `bad_resources_ecs_fargate_properties_e3048_yaml`: line 37→42, col 5→7, end_line 37→42, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `CpuInvalidThenValid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 98→102, col 5→7, end_line 98→102, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `CpuValidThenInvalid` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 111→115, col 5→7, end_line 111→115, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `EightVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 7→11, col 5→7, end_line 7→11, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `MalformedCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 59→63, col 5→7, end_line 59→63, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `NonCanonicalCpuUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 72→76, col 5→7, end_line 72→76, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `OverflowingMemoryUnits` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 85→89, col 5→7, end_line 85→89, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `SixteenVcpuInvalidStep` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 20→24, col 5→7, end_line 20→24, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `ThirtyTwoVcpuUnsupportedSixtyFourGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 33→37, col 5→7, end_line 33→37, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3047** `ThirtyTwoVcpuUnsupportedTwoFortyGb` in `bad_resources_ecs_fargate_task_sizes_e3047_yaml`: line 46→50, col 5→7, end_line 46→50, end_col 15→10 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `mySubnet2` in `bad_functions_getaz_yaml`: line 21→23, col 5→7, end_line 21→23, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `mySubnet3` in `bad_functions_getaz_yaml`: line 30→32, col 5→7, end_line 30→32, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetB` in `bad_subnet_overlap_multi_yaml`: line 20→22, col 5→7, end_line 20→22, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: line 32→34, col 5→7, end_line 32→34, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetD` in `bad_subnet_overlap_multi_yaml`: line 32→34, col 5→7, end_line 32→34, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3060** `SubnetB` in `bad_subnet_overlap_yaml`: line 15→17, col 5→7, end_line 15→17, end_col 15→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3510** `PolicyDuplicateSid` in `bad_resources_iam_identity_policy_e3510_yaml`: line 30→35, col 9→13, end_line 30→35, end_col 18→16 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E3710** `ShutdownResource` in `bad_schema_lifecycle_yaml`: line 6→4, col 5→3, end_line 6→4, end_col 15→19 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **E9006** `Database` in `lsp_comprehensive_json`: line 647→648, end_line 647→648, end_col 24→23 — The unsupported engine-version finding is caused by the authored EngineVersion value; the engine points at that value rather than its key. +- **E9006** `Database` in `lsp_comprehensive_yaml`: line 271→272, end_line 271→272 — The unsupported engine-version finding is caused by the authored EngineVersion value; the engine points at that value rather than its key. +- **F0018** `ListPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 19→11, end_line 19→11 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `ObjectPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 25→17, end_line 25→17 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 43→44, end_line 43→44 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 23→24, end_line 23→24 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `MyIAMUser` in `bad_resources_updatereplacepolicy_yaml`: line 29→30, end_line 29→30 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 16→17, end_line 16→17 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F0018** `UnsupportedIntrinsic` in `bad_resources_updatereplacepolicy_yaml`: line 32→33, end_line 32→33 — The engine points at the authored UpdateReplacePolicy value; the reference range can drift into a following resource or container endpoint. +- **F1020** `ElasticLoadBalancer` in `bad_generic_yaml`: col 17→20, end_col 20→21 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F1020** `RDSOptionGroup` in `bad_issues_yaml`: line 11→12, col 11→20, end_line 11→12, end_col 38→42 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F1020** `GreetingRequest` in `good_functions_sub_needed_yaml`: line 95→100, col 11→23, end_line 95→100, end_col 19→41 — The engine points at the exact unresolved Ref/GetAtt operand; the reference points at a containing intrinsic or property. +- **F3016** `DynamicObjectPolicy` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 44→40, end_line 44→40 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `ListPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 18→10, end_line 18→10 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `ObjectPolicies` in `bad_lifecycle_policy_shapes_yaml`: line 23→15, end_line 23→15 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 43→44, end_line 43→44 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 23→24, end_line 23→24 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `MyIAMUser` in `bad_resources_deletionpolicy_yaml`: line 29→30, end_line 29→30 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 16→17, end_line 16→17 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3016** `UnsupportedIntrinsic` in `bad_resources_deletionpolicy_yaml`: line 32→33, end_line 32→33 — The engine points at the authored DeletionPolicy value; the reference range can drift into a following resource or container endpoint. +- **F3020** `Subnet` in `integration_availability-zones_yaml`: line 6→7, col 7→9, end_line 6→7, end_col 23→19 — The invalid availability-zone finding is caused by the authored AvailabilityZone value; the engine points at the intrinsic value rather than its key. +- **F6101** `` in `bad_output_value_not_string_yaml`: end_col 33→26 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `bad_output_value_not_string_yaml`: end_col 42→36 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `integration_getatt-types_yaml`: col 5→33, end_col 10→66 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `lsp_comprehensive_json`: line 946→947, end_line 946→947, end_col 18→17 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **F6101** `` in `lsp_comprehensive_yaml`: line 423→424, end_line 423→424 — The engine points at the exact output Value expression or nested operand that cannot produce a valid string; the reference uses a broader key or adjacent member. +- **I2530** `Func` in `bad_lambda_no_snapstart_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→14 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **I2530** `LambdaFn` in `bad_lambda_zipfile_java_yaml`: line 5→7, col 5→7, end_line 5→7, end_col 15→14 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **I3042** `myKms` in `bad_resources_circular_dependency_yaml`: line 191→192, col 15→24, end_line 191→192, end_col 18→75 — The engine points at the exact Sub scalar that uses a fixed partition; the reference points at the containing property key. +- **I3042** `CognitoAuthorizer` in `integration_cfn-gather_yaml`: line 60→61, col 7→16, end_line 60→61, end_col 19→84 — The engine points at the exact Sub scalar that uses a fixed partition; the reference points at the containing property key. +- **I3100** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 41→42, end_line 41→42 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 21→22, end_line 21→22 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 14→15, end_line 14→15 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 41→42, end_line 41→42 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 21→22, end_line 21→22 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 14→15, end_line 14→15 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_resources_deletionpolicy_yaml`: line 30→35, end_line 30→35 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_resources_updatereplacepolicy_yaml`: line 30→35, end_line 30→35 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3100** `PolicyList` in `good_transform_language_extension_yaml`: line 53→57, end_line 53→57 — The recommendation is triggered by the authored DBInstanceClass value; the engine points at that value rather than its key. +- **I3510** `myPolicy` in `bad_functions_sub_needed_yaml`: line 21→29, col 9→11, end_line 21→29, end_col 18→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W1001** `AMIIDLookup` in `bad_functions_relationship_conditions_yaml`: line 37→38, col 7→9, end_line 37→38, end_col 11→19 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `InstanceProfile` in `bad_functions_relationship_conditions_yaml`: col 9→14 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 292→293, col 9→11, end_line 292→293, end_col 27→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 296→297, col 9→11, end_line 296→297, end_col 27→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 310→311, col 9→11, end_line 310→311, end_col 26→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 314→315, col 9→11, end_line 314→315, end_col 26→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 319→320, col 9→11, end_line 319→320, end_col 20→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 323→324, col 9→11, end_line 323→324, end_col 20→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 344→345, col 9→11, end_line 344→345, end_col 23→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ApplicationTemplate` in `quickstart_nist_high_main_yaml`: line 352→353, col 9→11, end_line 352→353, end_col 28→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 489→490, col 9→11, end_line 489→490, end_col 23→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 497→498, col 9→11, end_line 497→498, end_col 31→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1001** `ManagementVpcTemplate` in `quickstart_nist_high_main_yaml`: line 501→502, col 9→11, end_line 501→502, end_col 30→21 — The engine points at the exact relationship-condition operand; the reference reports the containing expression. +- **W1011** `Database` in `lsp_comprehensive_json`: line 664→666, col 9→11, end_line 664→666, end_col 29→15 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1011** `Database` in `lsp_comprehensive_yaml`: line 276→277, end_line 276→277 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1011** `rRDSInstanceMySQL` in `quickstart_nist_application_yaml`: line 1016→1017, col 7→9, end_line 1016→1017, end_col 25→12 — The password finding is triggered by the authored MasterUserPassword expression; the engine points at that value rather than its key. +- **W1028** `Stack3` in `good_resources_cloudformation_stacks_yaml`: col 13→16, end_line 50→48, end_col 11→17 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `GroupUnreachableInvalid` in `good_route53_conditional_record_arrays_yaml`: end_line 62→58, end_col 3→12 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `StandaloneUnreachableInvalid` in `good_route53_conditional_record_arrays_yaml`: end_col 43→12 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `Policy` in `good_schema_required_xor_resource_condition_yaml`: col 41→46 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `` in `lsp_comprehensive_json`: line 1014→1015, end_line 1016→1015 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `` in `lsp_comprehensive_yaml`: line 450→451, col 9→14, end_line 450→451 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `ProductionBucket` in `lsp_condition-usage_yaml`: line 66→69, col 9→13, end_line 66→69, end_col 24→18 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `ProductionBucket` in `lsp_condition-usage_yaml`: line 73→76, col 11→15, end_line 73→76, end_col 17→20 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance1` in `quickstart_vpc_json`: end_line 1931→1929 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance2` in `quickstart_vpc_json`: end_line 1983→1981 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance3` in `quickstart_vpc_json`: end_line 2035→2033 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W1028** `NATInstance4` in `quickstart_vpc_json`: end_line 2087→2085 — The engine points at the exact unreachable conditional branch; the reference reports the containing property or Fn::If expression. +- **W2010** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: col 21→24, end_col 24→25 — The engine points at the referenced parameter operand inside metadata; the reference starts at the surrounding Ref syntax. +- **W2531** `TestLambdaFunction` in `good_transform_language_extension_yaml`: line 78→82, end_line 78→82 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W2531** `LambdaFunction` in `lsp_comprehensive_json`: line 738→739, end_line 738→739, end_col 18→17 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W2531** `LambdaFunction` in `lsp_comprehensive_yaml`: line 306→307, end_line 306→307 — The deprecation finding is triggered by the authored Runtime value; the engine points at that value rather than its key. +- **W3696** `myAcl` in `bad_generic_yaml`: line 142→140, col 5→3, end_line 142→140, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `SunsetResource` in `bad_schema_lifecycle_yaml`: line 12→10, col 5→3, end_line 12→10, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh0` in `good_functions_findinmap_default_value_yaml`: line 45→43, col 5→3, end_line 45→43, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh1` in `good_functions_findinmap_default_value_yaml`: line 61→59, col 5→3, end_line 61→59, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh2` in `good_functions_findinmap_default_value_yaml`: line 72→70, col 5→3, end_line 72→70, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh3` in `good_functions_findinmap_default_value_yaml`: line 83→81, col 5→3, end_line 83→81, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh4` in `good_functions_findinmap_default_value_yaml`: line 95→93, col 5→3, end_line 95→93, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh` in `good_functions_findinmap_enhanced_yaml`: line 22→20, col 5→3, end_line 22→20, end_col 15→7 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3696** `Mesh2` in `good_functions_findinmap_enhanced_yaml`: line 35→33, col 5→3, end_line 35→33, end_col 15→8 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LC` in `bad_cross_resource_task10_yaml`: line 13→11, col 5→3, end_line 13→11, end_col 15→5 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyLaunchConfig` in `bad_properties_ebs_yaml`: line 42→40, col 5→3, end_line 42→40, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MaintenanceResource` in `bad_schema_lifecycle_yaml`: line 18→16, col 5→3, end_line 18→16, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_application-load-balancer--LoadBalancerStack.template_json`: line 553→551, col 4→3, end_line 553→551, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_classic-load-balancer--LoadBalancerStack.template_json`: line 553→551, col 4→3, end_line 553→551, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyFleetLaunchConfig5D7F9801` in `cdk_ecs-cluster--MyFirstEcsCluster.template_json`: line 590→588, col 4→3, end_line 590→588, end_col 16→31 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `Ec2ClusterDefaultAutoScalingGroupLaunchConfig7B2FED3A` in `cdk_ecs-ecs-service-with-logging--Willkommen.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→57 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `awsvpcecsdemoclusterDefaultAutoScalingGroupLaunchConfig067B11BF` in `cdk_ecs-ecs-service-with-task-networking--ec2-service-with-task-networking.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→67 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1` in `cdk_ecs-ecs-service-with-task-placement--sample-aws-ecs-integ-ecs.template_json`: line 596→594, col 4→3, end_line 596→594, end_col 16→57 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `appasgLaunchConfig9EFFB3A3` in `cdk_py-docker-app-with-asg-alb--ASGStack.template_json`: line 93→91, col 4→3, end_line 93→91, end_col 16→30 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `ASGLaunchConfigC00AF12B` in `cdk_resource-overrides--resource-overrides.template_json`: line 399→397, col 4→3, end_line 399→397, end_col 16→27 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `MyLaunchConfig` in `gh-issues_issue-37_yaml`: line 5→3, col 5→3, end_line 5→3, end_col 15→17 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_functions_sub_yaml`: line 56→54, col 5→3, end_line 56→54, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_parameters_not_used_parameters_yaml`: line 19→17, col 5→3, end_line 19→17, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `good_parameters_used_transforms_yaml`: line 22→20, col 5→3, end_line 22→20, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfig` in `good_resources_update_policy_supported_yaml`: line 14→12, col 5→3, end_line 14→12 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `LaunchConfiguration` in `integration_ref-types_yaml`: line 113→111, col 5→3, end_line 113→111, end_col 15→22 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `rAutoScalingConfigApp` in `quickstart_nist_application_yaml`: line 377→218, col 5→3, end_line 377→218, end_col 15→24 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `rAutoScalingConfigWeb` in `quickstart_nist_application_yaml`: line 508→416, col 5→3, end_line 508→416, end_col 15→24 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftEtcdLaunchConfig` in `quickstart_openshift_yaml`: line 901→860, col 5→3, end_line 901→860, end_col 15→28 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftMasterASLaunchConfig` in `quickstart_openshift_yaml`: line 1126→1084, col 5→3, end_line 1126→1084, end_col 15→32 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. +- **W3697** `OpenShiftNodesLaunchConfig` in `quickstart_openshift_yaml`: line 1455→1414, col 5→3, end_line 1455→1414, end_col 15→29 — The engine source span follows the exact authored anchor identified by its more precise path; the reference span follows a broader or incorrect anchor. + +## Non-Comparable Source Spans - 110 + +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 19→15, col 25→13, end_line 19→15, end_col 34→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 26→15, col 33→13, end_line 26→15, end_col 42→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance` in `bad_conditions_properties_fn_if_json`: line 30→15, col 33→13, end_line 30→15, end_col 42→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 54→51, col 9→5, end_line 54→51, end_col 16→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 58→51, col 11→5, end_line 58→51, end_col 18→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance3` in `bad_core_conditions_yaml`: line 60→51, col 11→5, end_line 60→51, end_col 18→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: col 35→7, end_col 47→14 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1152** `myInstance4` in `bad_core_conditions_yaml`: col 49→7, end_col 61→14 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E1154** `myInstance1` in `bad_core_conditions_yaml`: col 53→7, end_col 65→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3024** `IamRole1` in `integration_ref-no-value_yaml`: line 22→11, col 11→7, end_line 24→11, end_col 3→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3029** `AliasConflictFirst` in `bad_route53_conditional_scenarios_yaml`: line 20→12, col 9→5, end_line 20→12, end_col 12→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3029** `AliasConflictSecond` in `bad_route53_conditional_scenarios_yaml`: line 41→28, col 9→5, end_line 41→28, end_col 12→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3048** `InvalidDriverInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: line 47→36, col 15→5, end_line 47→36, end_col 24→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3048** `PlacementInFargateBranch` in `bad_resources_ecs_fargate_conditional_properties_yaml`: line 21→15, col 9→5, end_line 21→15, end_col 29→15 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **E3502** `MainQueue` in `bad_sqs_fifo_standard_dlq_yaml`: line 11→12, end_line 11→12, end_col 16→20 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3502** `FifoQueue` in `integration_cfn-gather_yaml`: line 40→42, end_line 40→42, end_col 16→20 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **E3510** `Policy` in `bad_iam_bad_statement_yaml`: col 13→19, end_line 13→10, end_col 7→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 11→19, end_line 26→23, end_col 9→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 13→19, end_line 31→30, end_col 11→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3510** `rIamUser` in `bad_resources_iam_iam_policy_yaml`: col 13→19, end_line 35→31, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3639** `ExplicitRemovedThenValue` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 61→65, col 5→7, end_line 61→65, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3639** `ExplicitValueThenRemoved` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 50→54, col 5→7, end_line 50→54, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3639** `NullThroughput` in `bad_resources_dynamodb_provisioned_throughput_e3639_yaml`: line 35→44, col 5→7, end_line 35→44, end_col 15→28 — The engine path names a missing logical property with no authored token; each implementation therefore falls back to a different existing trigger or container. +- **E3687** `mySecurityGroupVpc1` in `bad_functions_ref_yaml`: col 9→19, end_line 17→15, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_functions_ref_yaml`: col 9→19, end_line 20→18, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc2` in `bad_functions_ref_yaml`: col 9→19, end_line 29→27, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupNonVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 28→26, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 37→35, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 41→38, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 44→42, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 47→45, end_col 7→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc` in `bad_properties_sg_ingress_yaml`: col 9→19, end_line 51→48, end_col 3→20 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 31→29, end_col 9→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc1` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 33→31, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc2` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 41→39, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3687** `mySecurityGroupVpc3` in `bad_resources_circular_dependency_yaml`: col 11→21, end_line 49→47, end_col 3→22 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **E3702** `Pipeline` in `bad_codepipeline_bad_artifact_counts_yaml`: col 15→19, end_line 31→23, end_col 1→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **E3715** `myInstance2` in `bad_core_conditions_yaml`: line 39→36, col 13→7, end_line 39→36, end_col 24→26 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F0001** `` in `bad_not_cloudformation_yaml`: line 2→missing, col 1→missing, end_line 3→missing, end_col 1→missing — The required top-level section is absent, so there is no authored child token; whole-document and missing-location fallbacks are not equivalent ranges. +- **F0001** `` in `gh-issues_issue-201_json`: line 1→missing, col 1→missing, end_line 7→missing, end_col 2→missing — The required top-level section is absent, so there is no authored child token; whole-document and missing-location fallbacks are not equivalent ranges. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→18, end_line 175→172, end_col 9→19 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→17, end_line 187→184, end_col 9→18 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0013** `LogicalConditionResource` in `lsp_condition-usage_yaml`: col 11→18, end_line 194→192, end_col 9→19 — The diagnostic addresses a YAML/JSON container: one implementation reports its full range while the other reports a representative authored member token. +- **F0018** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 21→22, col 38→5, end_line 21→22, end_col 46→24 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3002** `CloudFrontDistribution` in `bad_conditions_yaml`: line 95→89, col 15→11, end_line 95→89, end_col 27→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3003** `myInstance2` in `bad_core_conditions_yaml`: line 39→36, col 13→7, end_line 44→36, end_col 9→26 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3003** `RootRole` in `bad_generic_yaml`: col 11→21, end_line 90→83, end_col 3→22 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 47→46, end_col 7→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `Cluster` in `bad_sagemaker_instance_types_yaml`: col 11→23, end_line 49→48, end_col 1→24 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 27→24, end_col 9→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 27→24, end_col 9→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 32→27, end_col 3→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `InferenceExperiment` in `bad_sagemaker_instance_types_yaml`: col 11→31, end_line 32→27, end_col 3→32 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `ModelPackage` in `bad_sagemaker_instance_types_yaml`: col 13→35, end_line 42→37, end_col 3→36 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `IamRole1` in `integration_ref-no-value_yaml`: line 22→11, col 11→7, end_line 24→11, end_col 3→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_json`: line 564→565, end_line 564→565, end_col 19→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_json`: line 564→565, end_line 564→565, end_col 19→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_yaml`: line 236→237, end_line 236→237 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3003** `AutoScalingGroup` in `lsp_comprehensive_yaml`: line 236→237, end_line 236→237 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **F3012** `CloudFrontDistribution` in `bad_conditions_yaml`: line 93→89, col 19→11, end_line 94→89, end_col 17→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3014** `Policy` in `bad_schema_required_xor_conditional_yaml`: line 17→13, col 7→5, end_line 17→13, end_col 17→15 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3014** `ScalingPolicyBothIds` in `bad_schema_structural_yaml`: line 29→25, col 7→5, end_line 29→25, end_col 17→15 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 25→26, col 33→5, end_line 25→26, end_col 41→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3016** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 25→26, col 43→5, end_line 25→26, end_col 52→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3016** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 17→18, col 33→5, end_line 17→18, end_col 46→19 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3017** `myPolicy2` in `bad_resources_properties_atleastone_yaml`: line 19→17, col 9→7, end_line 21→17, end_col 7→13 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **F3030** `CloudFrontDistribution` in `bad_conditions_yaml`: line 93→89, col 19→11, end_line 94→89, end_col 17→25 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **I3011** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 17→18, end_line 17→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 10→11, end_line 10→11 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 37→38, end_line 37→38 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 17→18, end_line 17→18 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3011** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 10→11, end_line 10→11 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `NoValuePoliciesWithoutTransform` in `bad_lifecycle_policy_shapes_yaml`: line 62→36, end_line 62→36 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `InvalidMapping` in `bad_resources_deletionpolicy_yaml`: line 39→40, end_line 39→40 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 19→20, end_line 19→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 12→13, end_line 12→13 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 39→40, end_line 39→40 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 19→20, end_line 19→20 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 12→13, end_line 12→13 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_resources_deletionpolicy_yaml`: line 28→33, end_line 28→33 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_resources_updatereplacepolicy_yaml`: line 28→33, end_line 28→33 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **I3013** `PolicyList` in `good_transform_language_extension_yaml`: line 51→55, end_line 51→55 — A missing required child has no authored token; container-range and nearest-authored-member fallbacks are not directly comparable. +- **W2533** `Function2` in `bad_resources_lambda_required_properties_yaml`: line 22→18, end_line 22→18, end_col 18→11 — The classified alternative path anchors address different authored endpoints, so their source ranges are not directly comparable. +- **W3011** `BothBranchesInvalid` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 23→26, col 3→5, end_line 23→26, end_col 22→19 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `ConditionalInvalidDeletion` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 15→18, col 3→5, end_line 15→18, end_col 29→19 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `ConditionalInvalidUpdate` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 19→22, col 3→5, end_line 19→22, end_col 27→24 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `DynamicObjectPolicy` in `bad_lifecycle_conditional_invalid_policies_yaml`: line 42→38, end_line 42→38 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MadeUpPolicy` in `bad_resources_deletionpolicy_yaml`: line 17→18, end_line 17→18 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MyIAMUser` in `bad_resources_deletionpolicy_yaml`: line 24→25, end_line 24→25 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `PolicyList` in `bad_resources_deletionpolicy_yaml`: line 10→11, end_line 10→11 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `UnsupportedIntrinsic` in `bad_resources_deletionpolicy_yaml`: line 30→31, end_line 30→31 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `InvalidMapping` in `bad_resources_updatereplacepolicy_yaml`: line 37→38, end_line 37→38 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MadeUpPolicy` in `bad_resources_updatereplacepolicy_yaml`: line 17→18, end_line 17→18 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `MyIAMUser` in `bad_resources_updatereplacepolicy_yaml`: line 24→25, end_line 24→25 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `PolicyList` in `bad_resources_updatereplacepolicy_yaml`: line 10→11, end_line 10→11 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3011** `UnsupportedIntrinsic` in `bad_resources_updatereplacepolicy_yaml`: line 30→31, end_line 30→31 — The recommendation concerns a resource with an absent or invalid lifecycle-policy counterpart; logical-ID, Type, and existing-policy fallbacks have no single shared child token. +- **W3049** `TargetGroup` in `gh-issues_issue-42-if_yaml`: col 47→7, end_col 53→22 — The reference span follows an authored Fn::If branch while the engine span follows the effective logical value produced by condition expansion. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `good_parameters_used_transform_language_extension_json`: line 44→34, col 17→5, end_line 44→34, end_col 46→16 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_json`: line 155→156, end_line 155→156, end_col 23→22 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_json`: line 125→126, end_line 125→126, end_col 22→21 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_yaml`: line 101→102, end_line 101→102 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8001** `` in `lsp_comprehensive_yaml`: line 93→94, end_line 93→94 — Language-extension expansion creates multiple logical conditions from one transform expression, so generated-node and transform-source ranges are not one-to-one. +- **W8003** `` in `bad_lifecycle_policy_shapes_yaml`: line 13→6, end_line 13→6 — The transform-wide lifecycle finding is derived from expanded resource state, so the transform source and generated resource anchors are not one-to-one. diff --git a/scripts/snapshots/rule_categorization_audit.md b/scripts/snapshots/rule_categorization_audit.md index 20671986..08beecf8 100644 --- a/scripts/snapshots/rule_categorization_audit.md +++ b/scripts/snapshots/rule_categorization_audit.md @@ -5,62 +5,39 @@ severity model documented in `product.md`. ## Summary -- Total rules: **302** -- By severity: Fatal=69, Error=148, Warn=62, Info=23 -- By true origin: CfnLint=203, Engine=29, Engine(collision)=1, Schema=69 -- By category: BestPractice=49, Deprecation=8, Intrinsic=52, Parameter=8, Reference=2, Resource=87, Schema=25, Security=14, Structure=57 +- Total rules: **301** +- By severity: Fatal=69, Error=147, Warn=62, Info=23 +- By true origin: CfnLint=183, Engine=24, Engine(collision)=1, Schema=93 +- By category: BestPractice=49, Deprecation=8, Intrinsic=52, Parameter=8, Reference=2, Resource=86, Schema=25, Security=14, Structure=57 - cfn-lint reference: 322 rule IDs loaded -- E→F promoted rules: 51 -- Engine-extra rules: 60 +- cfn-lint→engine mappings: 52 total (40 E→F promotions, 11 E→E same/split, 1 E→W downgrades) +- Engine-extra rules: 52 (1 with number collisions) ## 1. Origin correctness -True origin is computed by checking cfn-lint source, not the registry's -`origin:` field. Mismatches indicate the registry needs updating. +True origin is derived from Fatal severity, explicit non-Fatal schema +evidence verified against required production emitters, and exact or +documented cfn-lint equivalences. The registry `origin:` field is compared +only after that derivation; mismatches indicate metadata needs updating. -**1 issue(s) found.** - -| ID | Registry origin | True origin | Note | -|----|-----------------|-------------|------| -| `W9003` | CfnLint | Engine | registry says CfnLint but no cfn-lint equivalent (exact ID or alias) exists | +_All registry origins match computed true origins._ ## 2. Description parity vs cfn-lint For non-Fatal CfnLint-origin rules, our description should align with cfn-lint's `shortdesc`. Fatal rules are exempt -### Hard mismatches (3) - likely different rule - -| ID | Sev | Sim | Our description | cfn-lint shortdesc | -|----|-----|----:|------------------|--------------------| -| `E1022` | Error | 0.09 | Fn::Join requires a string delimiter and a list of strings or string-producing intrinsics | Join validation of parameters | -| `E1024` | Error | 0.09 | Fn::Cidr requires a CIDR-format ipBlock string and integer count/cidrBits | Cidr validation of parameters | -| `E1031` | Error | 0.09 | Fn::ToJsonString argument must be a non-empty array/object or a supported function | ToJsonString validation of parameters | - -### Soft mismatches (21) - wording divergence +### Soft mismatches (8) - wording divergence | ID | Sev | Sim | Our description | cfn-lint shortdesc | |----|-----|----:|------------------|--------------------| | `E0001` | Error | 0.10 | SAM (AWS::Serverless) transform would reject the template | Error found when transforming the template | -| `E1017` | Error | 0.10 | Fn::Select requires exactly two operands and a list source | Select validation of parameters | -| `E1019` | Error | 0.10 | Fn::Sub variable map values must be strings or string-producing intrinsics | Sub validation of parameters | -| `E1030` | Error | 0.11 | Fn::Length argument must be an array or a list-producing function | Length validation of parameters | -| `E8004` | Error | 0.11 | Fn::And must take between 2 and 10 boolean conditions | Check Fn::And structure for validity | -| `E8006` | Error | 0.11 | Fn::Or must take between 2 and 10 boolean conditions | Check Fn::Or structure for validity | -| `E1011` | Error | 0.12 | Fn::FindInMap operands must be strings or one of Ref/Fn::FindInMap | FindInMap validation of configuration | -| `E1018` | Error | 0.12 | Fn::Split source must be a string or a string-producing intrinsic | Split validation of parameters | -| `E1021` | Error | 0.12 | Fn::Base64 argument must be a string or a string-producing intrinsic | Base64 validation of parameters | -| `E8005` | Error | 0.12 | Fn::Not must take exactly one boolean condition | Check Fn::Not structure for validity | -| `E1028` | Error | 0.14 | Fn::If condition must exist in Conditions section | Check Fn::If structure for validity | | `E2531` | Error | 0.14 | Check if Lambda Function Runtimes are blocked for create | Validate if lambda runtime is deprecated | | `E6003` | Error | 0.14 | Outputs section must be an object of named output definitions | Check the type of Outputs | -| `E8007` | Error | 0.14 | Condition function value must be a string referencing a defined condition | Check Condition structure for validity | | `E3040` | Error | 0.17 | Read only property should not be specified | Validate we aren't configuring read only properties | | `W1051` | Warn | 0.17 | Dynamic reference resolves secret value but property expects the secret ARN | Validate dynamic references to secrets manager are not used when a secrets manager ARN was expected | | `E1050` | Error | 0.22 | Dynamic reference must match the SSM, ssm-secure, or Secrets Manager format | Validate the structure of a dynamic reference | -| `E8003` | Error | 0.22 | Fn::Equals must take exactly two scalar operands | Check Fn::Equals structure for validity | | `E1029` | Error | 0.25 | Substitution variable ${X} requires Fn::Sub | Sub is required if a variable is used in a string | -| `E8001` | Error | 0.25 | Conditions section must have valid structure | Conditions have appropriate properties | | `W1019` | Warn | 0.25 | Parameter in Fn::Sub variable map is not used in the template string | Validate that parameters to a Fn::Sub are used | ## 3. Severity/category model compliance @@ -95,7 +72,7 @@ excuse list: rules cfn-lint also implements are never auto-waved-through.) | ID | Severity | True origin | Description | cfn-lint rule | |----|----------|-------------|-------------|---------------| | `E9003` | Error | CfnLint | GetAtt return type may not match usage context | E1010, E1017 | -| `E9004` | Error | CfnLint | GetAtt attribute must exist on target resource type | E1010, E1017 | +| `E9004` | Error | Schema | GetAtt attribute must exist on target resource type | E1010, E1017 | | `E9006` | Error | CfnLint | Property value not valid for conditional extension enum | E3690, E3691 | ## 7. Missing cfn-lint coverage @@ -133,7 +110,7 @@ schema-validator extensions or Fatal schema rules). | `W3704` | Warn | ForwardedValues is ignored when CachePolicyId is specified | DistributionCacheBehaviorForwardedValuesIgnored.py | | `W3705` | Warn | MethodSettings entry is ignored without any setting properties | StageMethodSettingsIgnored.py | -### Covered via different mechanism (70) +### Covered via different mechanism (69) These cfn-lint rule IDs have no matching engine ID but are enforced through our schema-validator (extensions/patches from cfn-lint) or @@ -143,7 +120,7 @@ via a Fatal schema rule covering the same concern. |-------------|----------------------|---------------|------| | `E0100` | Validate deployment file configuration | `out-of-scope` | CLI deployment file | | `E0200` | Validate parameter file configuration | `out-of-scope` | CLI parameter file | -| `E1001` | Basic CloudFormation Template Configuration | `F0002/F0005` | Base template JSON schema (top-level structure) | +| `E1001` | Basic CloudFormation Template Configuration | `F0002/F0005` | Top-level structure (partial: covers format version + section names only) | | `E1003` | Validate the max size of a description | `F0011` | description max length 1024 | | `E1157` | Validate KMS key ARN format | `schema-format` | KMS key ARN format (schema format field) | | `E1158` | Validate SNS topic ARN format | `schema-format` | SNS topic ARN format (schema format field) | @@ -195,9 +172,8 @@ via a Fatal schema rule covering the same concern. | `E4002` | Validate the configuration of the Metadata section | `F0005` | Metadata section config | | `E6002` | Outputs have required properties | `F0040` | Output Value required | | `E6010` | Output limit not exceeded | `F0004` | Output limit 200 | -| `E7010` | Max number of properties for Mappings | `F0008` | Mappings limit 200 | -| `I1002` | Validate approaching the template size limit | `I2010/I6010` | approaching template size (via parameter/output limit warns) | -| `I3010` | Resource limit | `I2010` | resource limit approach | +| `I1002` | Validate approaching the template size limit | `out-of-scope` | Template body size approaching limit (no approaching-limit analog) | +| `I3010` | Resource limit | `out-of-scope` | Resource count approaching limit (no approaching-limit analog) | | `W1031` | Validate the values that come from a Fn::Sub function | `F3012+W9003` | Fn::Sub resolved values (via resolver) | | `W1032` | Validate the values that come from a Fn::Join function | `F3012+W9003` | Fn::Join resolved values | | `W1033` | Validate the values that come from a Fn::Split function | `F3012+W9003` | Fn::Split resolved values | @@ -214,13 +190,26 @@ via a Fatal schema rule covering the same concern. ## 8. Source emission checks -Static regex scan of `.rs` and `.rego` files for rule ID usage. +Static regex scan of production runtime Rust and Rego source files. + +**Scanned crates:** +- `template-model` (`src/template-model/src`) +- `schema-validator` (`src/schema-validator/src`) +- `validation-engine` (`src/validation-engine/src`) +- `diagnostics` (`src/diagnostics/src`) +- `cel-engine` (`src/cel-engine/src`) +- `rego-engine` (`src/rego-engine/src`) +- `rego-engine/handwritten` (`src/rego-engine/handwritten/rego`) -**Unregistered IDs:** none ✅ +**Excluded:** generated code, registry definition, `#[cfg(test)]` modules, +bindings crates, `cfn-validate` (CLI frontend), `resources` (test fixtures), +`guard-translator` (IR only). + +**Unregistered IDs:** none (across scanned production crates) ✅ **Rego severity mismatches:** none ✅ -### Dual-use rule IDs (13) +### Dual-use rule IDs (14) Same rule ID emitted with semantically different messages. @@ -234,6 +223,11 @@ Same rule ID emitted with semantically different messages. - Cluster 1 (1 sites): "UpdatePolicy is not supported on resource type '{}'" - Cluster 2 (1 sites): "{} is not of type 'object'" +**`E3023`** - registry: "Validate Route53 RecordSets" + +- Cluster 1 (1 sites): "CNAME records must have at most 1 ResourceRecord" +- Cluster 2 (1 sites): "CNAME record Name '{}' must not match HostedZoneName '{}' exactly" + **`E3029`** - registry: "Validate Route53 record set aliases" - Cluster 1 (1 sites): "TTL must not be set when AliasTarget is specified" @@ -294,15 +288,10 @@ Same rule ID emitted with semantically different messages. - Cluster 2 (1 sites): "Property '{}' should not be a hardcoded string - use a parameter with NoEcho or " - Cluster 3 (1 sites): "Parameter {} used as {}, therefore NoEcho should be True" -### Engine source parity gaps - -Rule IDs found in one engine's source but not the other. -May be false positives from regex limitations - cross-reference -with `cargo test -p cfn-validate --test engine_parity` for ground truth. - -**CEL only (2):** `E3023`, `E3510` +**Engine source ID presence:** native CEL and handwritten Rego emit the same rule IDs ✅ +_(ID presence only — behavioral parity is verified by running both engines on real templates.)_ -_Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ +_Scanned 453 Rust sites (284 IDs), 300 Rego sites (194 IDs)._ ## Appendix: full rule inventory @@ -311,21 +300,21 @@ _Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ | `E0001` | Error | Structure | CfnLint | CfnLint | SAM (AWS::Serverless) transform would reject the template | | `E1002` | Error | Structure | CfnLint | CfnLint | Validate if a template size is too large | | `E1005` | Error | Structure | CfnLint | CfnLint | Validate Transform configuration | -| `E1011` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::FindInMap operands must be strings or one of Ref/Fn::FindInMap | -| `E1015` | Error | Intrinsic | Schema ⚠ | CfnLint | GetAz validation of parameters | -| `E1016` | Error | Intrinsic | Schema ⚠ | CfnLint | ImportValue validation of parameters | -| `E1017` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Select requires exactly two operands and a list source | -| `E1018` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Split source must be a string or a string-producing intrinsic | -| `E1019` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Sub variable map values must be strings or string-producing intrinsics | -| `E1021` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Base64 argument must be a string or a string-producing intrinsic | -| `E1022` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Join requires a string delimiter and a list of strings or string-producing intrinsics | -| `E1024` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Cidr requires a CIDR-format ipBlock string and integer count/cidrBits | +| `E1011` | Error | Intrinsic | Schema | Schema | Fn::FindInMap operands must be strings or one of Ref/Fn::FindInMap | +| `E1015` | Error | Intrinsic | Schema | Schema | GetAz validation of parameters | +| `E1016` | Error | Intrinsic | Schema | Schema | ImportValue validation of parameters | +| `E1017` | Error | Intrinsic | Schema | Schema | Fn::Select requires exactly two operands and a list source | +| `E1018` | Error | Intrinsic | Schema | Schema | Fn::Split source must be a string or a string-producing intrinsic | +| `E1019` | Error | Intrinsic | Schema | Schema | Fn::Sub variable map values must be strings or string-producing intrinsics | +| `E1021` | Error | Intrinsic | Schema | Schema | Fn::Base64 argument must be a string or a string-producing intrinsic | +| `E1022` | Error | Intrinsic | Schema | Schema | Fn::Join requires a string delimiter and a list of strings or string-producing intrinsics | +| `E1024` | Error | Intrinsic | Schema | Schema | Fn::Cidr requires a CIDR-format ipBlock string and integer count/cidrBits | | `E1027` | Error | Intrinsic | CfnLint | CfnLint | Check dynamic references secure strings are in supported locations | -| `E1028` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::If condition must exist in Conditions section | +| `E1028` | Error | Intrinsic | Schema | Schema | Fn::If condition must exist in Conditions section | | `E1029` | Error | Intrinsic | CfnLint | CfnLint | Substitution variable ${X} requires Fn::Sub | -| `E1030` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Length argument must be an array or a list-producing function | -| `E1031` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::ToJsonString argument must be a non-empty array/object or a supported function | -| `E1033` | Error | Intrinsic | Schema ⚠ | CfnLint | GetStackOutput validation of parameters | +| `E1030` | Error | Intrinsic | Schema | Schema | Fn::Length argument must be an array or a list-producing function | +| `E1031` | Error | Intrinsic | Schema | Schema | Fn::ToJsonString argument must be a non-empty array/object or a supported function | +| `E1033` | Error | Intrinsic | Schema | Schema | GetStackOutput validation of parameters | | `E1040` | Error | Intrinsic | CfnLint | CfnLint | Check if GetAtt matches destination format | | `E1041` | Error | Intrinsic | CfnLint | CfnLint | Check if Ref matches destination format | | `E1050` | Error | Intrinsic | CfnLint | CfnLint | Dynamic reference must match the SSM, ssm-secure, or Secrets Manager format | @@ -340,7 +329,6 @@ _Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ | `E1155` | Error | Intrinsic | CfnLint | CfnLint | Validate CloudWatch logs group name | | `E1156` | Error | Intrinsic | CfnLint | CfnLint | Validate IAM role ARN format | | `E2001` | Error | Parameter | CfnLint | CfnLint | Parameters have appropriate properties | -| `E2504` | Error | Resource | Engine | Engine | FIFO queue name must end with .fifo | | `E2529` | Error | Resource | CfnLint | CfnLint | Check for SubscriptionFilters beyond 2 attachments to a CloudWatch Log Group | | `E2530` | Error | Resource | CfnLint | CfnLint | SnapStart supports the configured runtime | | `E2531` | Error | Deprecation | CfnLint | CfnLint | Check if Lambda Function Runtimes are blocked for create | @@ -441,21 +429,21 @@ _Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ | `E5001` | Error | Structure | CfnLint | CfnLint | Check that Modules resources are valid | | `E6001` | Error | Structure | CfnLint | CfnLint | Outputs have appropriate properties | | `E6003` | Error | Structure | CfnLint | CfnLint | Outputs section must be an object of named output definitions | -| `E6005` | Error | Structure | Schema ⚠ | CfnLint | Condition referenced by an output must exist in the Conditions section | +| `E6005` | Error | Structure | Schema | Schema | Condition referenced by an output must exist in the Conditions section | | `E7001` | Error | Structure | CfnLint | CfnLint | Mappings are appropriately configured | -| `E8001` | Error | Structure | Schema ⚠ | CfnLint | Conditions section must have valid structure | -| `E8002` | Error | Structure | Schema ⚠ | CfnLint | Condition referenced by resource is not defined | -| `E8003` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Equals must take exactly two scalar operands | -| `E8004` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::And must take between 2 and 10 boolean conditions | -| `E8005` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Not must take exactly one boolean condition | -| `E8006` | Error | Intrinsic | Schema ⚠ | CfnLint | Fn::Or must take between 2 and 10 boolean conditions | -| `E8007` | Error | Intrinsic | Schema ⚠ | CfnLint | Condition function value must be a string referencing a defined condition | +| `E8001` | Error | Structure | Schema | Schema | Conditions section must have valid structure | +| `E8002` | Error | Structure | Schema | Schema | Condition referenced by resource is not defined | +| `E8003` | Error | Intrinsic | Schema | Schema | Fn::Equals must take exactly two scalar operands | +| `E8004` | Error | Intrinsic | Schema | Schema | Fn::And must take between 2 and 10 boolean conditions | +| `E8005` | Error | Intrinsic | Schema | Schema | Fn::Not must take exactly one boolean condition | +| `E8006` | Error | Intrinsic | Schema | Schema | Fn::Or must take between 2 and 10 boolean conditions | +| `E8007` | Error | Intrinsic | Schema | Schema | Condition function value must be a string referencing a defined condition | | `E9002` | Error | Resource | Engine | Engine | SecurityGroup FromPort must be <= ToPort for the TCP and UDP protocols | | `E9003` | Error | Intrinsic | CfnLint | CfnLint | GetAtt return type may not match usage context | -| `E9004` | Error | Intrinsic | Schema ⚠ | CfnLint | GetAtt attribute must exist on target resource type | +| `E9004` | Error | Intrinsic | Schema | Schema | GetAtt attribute must exist on target resource type | | `E9006` | Error | Schema | CfnLint | CfnLint | Property value not valid for conditional extension enum | -| `E9101` | Error | Intrinsic | Schema ⚠ | Engine | Invalid nesting of intrinsic functions | -| `E9106` | Error | Structure | Schema ⚠ | Engine | Circular dependency in condition definitions | +| `E9101` | Error | Intrinsic | Schema | Schema | Invalid nesting of intrinsic functions | +| `E9106` | Error | Structure | Schema | Schema | Circular dependency in condition definitions | | `F0000` | Fatal | Structure | Schema | Schema | Duplicate key in template | | `F0001` | Fatal | Structure | Schema | Schema | Resources section must exist and be non-empty | | `F0002` | Fatal | Structure | Schema | Schema | AWSTemplateFormatVersion must be 2010-09-09 | @@ -567,7 +555,7 @@ _Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ | `W2503` | Warn | BestPractice | Engine | Engine | Resource references conditional resource with mutually exclusive condition | | `W2506` | Warn | BestPractice | CfnLint | CfnLint | Check if ImageId Parameters have the correct type | | `W2508` | Warn | Security | Engine | Engine | Security group allows open access to sensitive port | -| `W2509` | Warn | Security | Engine | Engine | Password parameter should have NoEcho | +| `W2509` | Warn | Security | CfnLint | CfnLint | Password parameter should have NoEcho | | `W2511` | Warn | Security | CfnLint | CfnLint | Check IAM Resource Policies syntax | | `W2512` | Warn | Security | Engine | Engine | IAM policy with NotAction | | `W2530` | Warn | BestPractice | CfnLint | CfnLint | Validate that SnapStart is properly configured | @@ -599,7 +587,7 @@ _Scanned 257 CEL sites (195 IDs), 279 Rego sites (193 IDs)._ | `W8602` | Warn | BestPractice | Engine | Engine | Rule has unknown property | | `W8608` | Warn | BestPractice | Engine | Engine | Rule assertion has unknown property | | `W9002` | Warn | BestPractice | Engine | Engine | Hardcoded ARN property | -| `W9003` | Warn | BestPractice | CfnLint ⚠ | Engine | Property type coercion warning | +| `W9003` | Warn | BestPractice | CfnLint | CfnLint | Property type coercion warning | | `W9006` | Warn | BestPractice | Engine | Engine | String length estimation through Fn::Sub | | `W9007` | Warn | BestPractice | Engine | Engine | Array items must be unique when required | | `W9008` | Warn | Security | Engine | Engine | RDS instance should have StorageEncrypted | diff --git a/scripts/tests/test_audit_rule_categorization.py b/scripts/tests/test_audit_rule_categorization.py new file mode 100644 index 00000000..0054982c --- /dev/null +++ b/scripts/tests/test_audit_rule_categorization.py @@ -0,0 +1,1424 @@ +"""Tests for scripts/audit_rule_categorization.py — focused on todos #23-30. + +Covers: +- Rego regex recognizes _at_source variant (todo #23) +- Production emission scan scope and cfg(test) exclusion (todo #24, #25) +- Explicit schema-grounded non-F set and exact origin mismatch (todo #26, #27) +- No forced W9003/W1019 engine-extra overrides (todo #28) +- Engine-extra invariant validation (todo #29) +- Main exit status for all failure classes (todo #30) +- [NEW] E→F promotion count vs total map size (defect #1) +- [NEW] LOGICAL_COVERAGE correctness: no false parity claims (defect #2) +- [NEW] Schema grounding requires explicit classification (defect #3) +- [NEW] cfg(test) stripping robust against braces in strings/comments (defect #4) +- [NEW] Engine-extra means no semantic equivalent (defect #5) +- [NEW] Source parity wording states ID presence only (defect #6) +""" + +import re +import sys +import textwrap +from pathlib import Path +from unittest.mock import patch, MagicMock + +import pytest + +# Ensure scripts/ is importable +sys.path.insert(0, str(Path(__file__).resolve().parent.parent)) +import audit_rule_categorization as audit + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #23: _REGO_DIAG_RE includes _at_source before _at +# ────────────────────────────────────────────────────────────────────────────── + +class TestRegoRegex: + """Verify _REGO_DIAG_RE matches all make_diag variants including _at_source.""" + + @pytest.fixture + def regex(self): + return audit._REGO_DIAG_RE + + def test_matches_make_diag_at_source(self, regex): + text = 'violation contains make_diag_at_source("E3023", "ERROR", name,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0][0] == "E3023" + assert matches[0][1] == "ERROR" + + def test_matches_make_diag_plain(self, regex): + text = 'violation contains make_diag("E3005", "ERROR", name,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0] == ("E3005", "ERROR") + + def test_matches_make_diag_full(self, regex): + text = 'violation contains make_diag_full("W1028", "WARN", branch.resourceId, branch.path,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0] == ("W1028", "WARN") + + def test_matches_make_diag_at(self, regex): + text = 'violation contains make_diag_at("E3051", "ERROR", name,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0] == ("E3051", "ERROR") + + def test_matches_make_diag_related(self, regex): + text = 'violation contains make_diag_related("W2503", "WARN", source, edge.sourcePath,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0] == ("W2503", "WARN") + + def test_matches_make_diag_conditional(self, regex): + text = 'violation contains make_diag_conditional("I3049", "INFO", name,' + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0] == ("I3049", "INFO") + + def test_at_source_matched_before_at(self, regex): + """_at_source must be listed before _at in the alternation so it matches + fully instead of matching just _at and leaving 'source' as noise.""" + text = 'make_diag_at_source("E3023", "ERROR", name, path, msg)' + matches = regex.findall(text) + assert len(matches) == 1 + # If _at was matched instead of _at_source, the regex would fail to + # capture because 'source("E3023"...' wouldn't match the pattern. + assert matches[0][0] == "E3023" + + def test_multiline_at_source(self, regex): + """Verify DOTALL handles multiline at_source calls.""" + text = textwrap.dedent("""\ + violation contains make_diag_at_source( + "E3023", + "ERROR", + name, + path, + msg + ) + """) + matches = regex.findall(text) + assert len(matches) == 1 + assert matches[0][0] == "E3023" + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #24, #25: Production scan scope and reporting +# ────────────────────────────────────────────────────────────────────────────── + +class TestProductionScanScope: + """Verify the production emission scanner covers all required crates.""" + + def test_production_crates_listed(self): + """All expected crates are in the scan list.""" + expected = { + "template-model", "schema-validator", "validation-engine", + "diagnostics", "cel-engine", "rego-engine", + } + assert set(audit._PRODUCTION_SCAN_CRATES) == expected + + def test_scan_production_scopes_reports_crates(self): + """scan_production_scopes returns all scanned directories.""" + scopes = audit.scan_production_scopes() + crate_names = [name for name, _ in scopes] + assert "template-model" in crate_names + assert "schema-validator" in crate_names + assert "cel-engine" in crate_names + assert "rego-engine/handwritten" in crate_names + + def test_excludes_registry_definition(self): + """Registry file is excluded from emission scanning.""" + assert audit._is_excluded_path("rules/src/registry.rs") + + def test_excludes_generated_code(self): + """Generated artifacts are excluded.""" + assert audit._is_excluded_path("data-source/generated/foo.rs") + + def test_does_not_exclude_production_paths(self): + """Regular production paths are not excluded.""" + assert not audit._is_excluded_path("cel-engine/src/rules/structure.rs") + assert not audit._is_excluded_path("template-model/src/parser/builder.rs") + assert not audit._is_excluded_path("schema-validator/src/validate.rs") + + +class TestCfgTestExclusion: + """Verify #[cfg(test)] modules are stripped before scanning.""" + + def test_strips_simple_cfg_test_module(self): + text = textwrap.dedent("""\ + fn production_code() { + make_parse_defect("F0001", "msg".into(), span); + } + + #[cfg(test)] + mod tests { + fn test_helper() { + make_parse_defect("Z9999", "test only".into(), span); + } + } + """) + stripped = audit._strip_cfg_test_modules(text) + assert "F0001" in stripped + assert "Z9999" not in stripped + + def test_strips_nested_braces_in_test_module(self): + text = textwrap.dedent("""\ + fn real() { make_parse_defect("E2001", "msg".into(), s); } + + #[cfg(test)] + mod tests { + fn nested() { + if true { + make_parse_defect("X1234", "bad".into(), s); + } + } + } + + fn also_real() { make_parse_defect("W3005", "msg".into(), s); } + """) + stripped = audit._strip_cfg_test_modules(text) + assert "E2001" in stripped + assert "W3005" in stripped + assert "X1234" not in stripped + + def test_preserves_code_outside_test_modules(self): + text = textwrap.dedent("""\ + RegisteredDiagnostic::new("F3012", "type mismatch") + + #[cfg(test)] + mod unit_tests { + RegisteredDiagnostic::new("Z0000", "fake") + } + + RegisteredDiagnostic::new("E8002", "condition ref") + """) + stripped = audit._strip_cfg_test_modules(text) + assert "F3012" in stripped + assert "E8002" in stripped + assert "Z0000" not in stripped + + def test_scan_rust_emissions_excludes_test_code(self, tmp_path): + """Integration: scan_rust_emissions skips cfg(test) rule IDs.""" + rs_file = tmp_path / "lib.rs" + rs_file.write_text(textwrap.dedent("""\ + fn emit() { + RegisteredDiagnostic::new("F0001", "real emission"); + } + + #[cfg(test)] + mod tests { + fn test_it() { + RegisteredDiagnostic::new("Z9999", "test only"); + } + } + """)) + emissions = audit.scan_rust_emissions(tmp_path) + ids = {e[0] for e in emissions} + assert "F0001" in ids + assert "Z9999" not in ids + + +class TestConstrainedRustEmissionFallback: + """Dynamic IDs are detected only in diagnostic-flow contexts.""" + + def test_rule_id_bindings_and_tuple_tables_are_detected(self, tmp_path): + (tmp_path / "rules.rs").write_text(textwrap.dedent("""\ + fn emit() { + let selected_rule_id = if enabled { "E1017" } else { "E1015" }; + let enum_checks = &[("E3628", "AWS::EC2::Instance")]; + consume(selected_rule_id, enum_checks); + } + """)) + + emissions = audit.scan_rust_emissions(tmp_path) + + assert {emission[0] for emission in emissions} == { + "E1015", "E1017", "E3628", + } + + def test_arbitrary_rule_shaped_strings_are_not_emissions(self, tmp_path): + (tmp_path / "messages.rs").write_text(textwrap.dedent("""\ + const MESSAGE: &str = "Z9999"; + fn documentation() -> &'static str { "E8888" } + """)) + + assert audit.scan_rust_emissions(tmp_path) == [] + + def test_known_dynamic_diagnostic_helper_is_detected(self, tmp_path): + (tmp_path / "helper.rs").write_text(textwrap.dedent("""\ + fn emit() { + check_bdm_iops_ignored( + &mut findings, + model, + name, + mappings, + path, + "W3671", + ignored_types, + ); + } + """)) + + emissions = audit.scan_rust_emissions(tmp_path) + + assert [emission[0] for emission in emissions] == ["W3671"] + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #24: Constructor-aware regex patterns +# ────────────────────────────────────────────────────────────────────────────── + +class TestRustConstructorRegex: + """Verify _RUST_CONSTRUCTOR_RE matches all required constructor patterns.""" + + @pytest.fixture + def regex(self): + return audit._RUST_CONSTRUCTOR_RE + + def test_make_resource_diagnostic(self, regex): + text = 'make_resource_diagnostic("E3510", &format!("IAM issue: {}", msg), m, rid, &path, None)' + m = regex.search(text) + assert m and m.group(1) == "E3510" + + def test_make_resource_diagnostic_at_source(self, regex): + text = 'make_resource_diagnostic_at_source("E3023", &format!("DNS: {}", msg), m, rid, &p, &sp, None)' + m = regex.search(text) + assert m and m.group(1) == "E3023" + + def test_build_diagnostic(self, regex): + text = 'build_diagnostic("F3002", &msg, m, rid, &format!("{}.{}", base, key), None)' + m = regex.search(text) + assert m and m.group(1) == "F3002" + + def test_build_diagnostic_conditional(self, regex): + text = 'build_diagnostic_conditional("F3030", &message, m, rid, property_path, None, cond)' + m = regex.search(text) + assert m and m.group(1) == "F3030" + + def test_make_parse_defect(self, regex): + text = 'make_parse_defect("F0000", msg, span)' + m = regex.search(text) + assert m and m.group(1) == "F0000" + + def test_make_parse_defect_at(self, regex): + text = 'crate::make_parse_defect_at("F1032", message, arena.span(*value_ref), build_path)' + m = regex.search(text) + assert m and m.group(1) == "F1032" + + def test_make_parse_defect_for_resource(self, regex): + text = 'make_parse_defect_for_resource("E2001", msg.into(), span, "MyResource")' + m = regex.search(text) + assert m and m.group(1) == "E2001" + + def test_registered_diagnostic_new(self, regex): + text = 'RegisteredDiagnostic::new("W9012", message).build()' + m = regex.search(text) + assert m and m.group(1) == "W9012" + + def test_rule_diag_helper(self, regex): + text = 'rule_diag("F8600", "Rules section must be an object".into(), "")' + m = regex.search(text) + assert m and m.group(1) == "F8600" + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #26: Explicit schema-grounded non-F set and exact origin mismatch +# ────────────────────────────────────────────────────────────────────────────── + +class TestSchemaGroundedSet: + """Verify non-Fatal Schema origins require concrete production emitters.""" + + def test_computed_set_matches_required_schema_rules(self): + expected = { + "E8002", "E8001", "E8003", "E8004", "E8005", "E8006", "E8007", + "E9004", "E1028", "E9101", "E9106", "E6005", + "E1015", "E1016", "E1011", "E1017", "E1018", "E1019", + "E1021", "E1022", "E1024", "E1030", "E1031", "E1033", + } + + computed = audit._compute_schema_grounded_non_f( + audit.parse_registry(), + audit.scan_rust_emissions(), + audit.scan_rego_emissions(), + ) + + assert computed == expected + + def test_missing_required_emitter_prevents_schema_grounding(self): + registry = [ + ("E1016", "Error", "Intrinsic", "Schema", "GetAZs argument shape") + ] + rust_emissions = [ + ("E1016", "message", "cel-engine/src/rules/intrinsics.rs", 1) + ] + + computed = audit._compute_schema_grounded_non_f( + registry, rust_emissions, [] + ) + + assert computed == frozenset() + + def test_schema_grounded_non_f_classified_as_schema(self, tmp_path): + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E8003.py").write_text( + 'id = "E8003"\nshortdesc = ("test",)' + ) + + origins = audit.compute_rule_origins(tmp_path) + + assert origins.true_origins["E8003"] == "Schema" + + def test_origin_mismatch_is_exact(self, tmp_path, monkeypatch): + fake_registry = [ + ("E8003", "Error", "Intrinsic", "CfnLint", "Equals structure") + ] + monkeypatch.setattr( + audit, "parse_registry", lambda path=audit.REGISTRY: fake_registry + ) + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E8003.py").write_text( + 'id = "E8003"\nshortdesc = ("test",)' + ) + + origins = audit.compute_rule_origins(tmp_path) + + assert origins.true_origins == {"E8003": "Schema"} + assert len(origins.origin_issues) == 1 + assert origins.origin_issues[0][:3] == ( + "E8003", "CfnLint", "Schema", + ) + + +class TestAppendixMarkerConsistency: + """Todo #27: Appendix ⚠ marker uses the exact same predicate as origin_issues.""" + + def test_marker_matches_origin_issues(self, tmp_path): + """Every rule with an origin issue gets ⚠ in appendix, and no others do.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + # Minimal cfn-lint fixture + (rules_dir / "dummy.py").write_text('id = "E0001"\nshortdesc = ("test",)') + origins = audit.compute_rule_origins(tmp_path) + report = audit.build_report(origins) + + issue_ids = {item[0] for item in origins.origin_issues} + # Check appendix lines + in_appendix = False + for line in report.split("\n"): + if "## Appendix:" in line: + in_appendix = True + continue + if in_appendix and line.startswith("| `"): + rid = line.split("`")[1] + has_marker = "⚠" in line + if rid in issue_ids: + assert has_marker, f"{rid} has origin issue but no ⚠ in appendix" + else: + assert not has_marker, f"{rid} has no origin issue but got ⚠ in appendix" + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #28: No forced W9003/W1019 engine-extra +# ────────────────────────────────────────────────────────────────────────────── + +class TestNoForcedEngineExtra: + """W9003 and W1019 must not be forced into engine-extra.""" + + def test_w9003_not_forced(self, tmp_path): + """W9003 has cfn-lint equivalents (aliases E3012/F3012) and is NOT engine-extra.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E3012.py").write_text('id = "E3012"\nshortdesc = ("Type check",)') + origins = audit.compute_rule_origins(tmp_path) + # W9003 aliases E3012 in the equivalence table, so it has a cfn-lint equivalent + assert "W9003" not in origins.engine_extra + + def test_w1019_not_forced(self, tmp_path): + """W1019 has cfn-lint equivalents and is NOT engine-extra.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "W1019.py").write_text('id = "W1019"\nshortdesc = ("Sub params",)') + origins = audit.compute_rule_origins(tmp_path) + # W1019 has a direct cfn-lint ID + assert "W1019" not in origins.engine_extra + + def test_source_has_no_engine_extra_add_w9003(self): + """The source code must not contain engine_extra.add('W9003').""" + source = Path(audit.__file__).read_text() + assert 'engine_extra.add("W9003")' not in source + + def test_source_has_no_engine_extra_add_w1019(self): + """The source code must not contain engine_extra.add('W1019').""" + source = Path(audit.__file__).read_text() + assert 'engine_extra.add("W1019")' not in source + + +class TestDiagnosticEngineExtraInvariant: + """Diagnostic content cannot bypass direct or aliased equivalence.""" + + def test_equivalent_schema_and_enum_rules_are_never_engine_extra(self, tmp_path): + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "rules.py").write_text(textwrap.dedent("""\ + id = "E3002" + id = "E3003" + id = "E3030" + shortdesc = "schema" + """)) + + origins = audit.compute_rule_origins(tmp_path) + + assert origins.engine_to_cfnlint["W3030"] == {"E3030"} + diagnostics = [ + {"rule_id": "F3002", "message": "failure (from extension)"}, + {"rule_id": "F3003", "message": "OwnershipControls required"}, + {"rule_id": "W3030", "message": "Fn::If value is unknown"}, + ] + assert not any( + origins.is_engine_extra_diagnostic(diagnostic) + for diagnostic in diagnostics + ) + + def test_rule_without_equivalent_uses_computed_engine_extra_set(self, tmp_path): + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "rule.py").write_text( + 'id = "E3002"\nshortdesc = "schema"' + ) + + origins = audit.compute_rule_origins(tmp_path) + + assert "F0001" in origins.engine_extra + assert origins.is_engine_extra_diagnostic({"rule_id": "F0001"}) + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #29: Post-computation invariant validation +# ────────────────────────────────────────────────────────────────────────────── + +class TestEngineExtraInvariant: + """No rule with a direct or aliased cfn-lint equivalent can be engine-extra.""" + + def test_invariant_catches_direct_equivalent(self, tmp_path, monkeypatch): + """If a rule has a direct cfn-lint ID, it cannot be engine-extra.""" + # Patch the registry to return a rule that would naively be engine-extra + # but has a direct cfn-lint equivalent + fake_registry = [("E9999", "Error", "Structure", "Engine", "Test rule")] + monkeypatch.setattr(audit, "parse_registry", lambda path=None: fake_registry) + + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + # E9999 exists in cfn-lint → has a direct equivalent + (rules_dir / "E9999.py").write_text('id = "E9999"\nshortdesc = ("Test",)') + + origins = audit.compute_rule_origins(tmp_path) + # E9999 is CfnLint, not engine-extra + assert "E9999" not in origins.engine_extra + assert origins.true_origins["E9999"] == "CfnLint" + + def test_invariant_violations_report_concrete_aliases(self): + violations = audit._find_engine_extra_invariant_violations( + {"W3030", "F0001"}, + {"E3030": ("enum", "Enum.py")}, + {"W3030"}, + {"W3030": {"E3030"}}, + ) + + assert violations == [("W3030", "alias", ["E3030"])] + + def test_real_engine_extra_has_no_cfnlint_equivalents(self, tmp_path): + """Integration: verify the real engine_extra set satisfies the invariant.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "dummy.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + for rid in origins.engine_extra: + assert rid not in origins.cfnlint_ids, \ + f"{rid} is engine-extra but has direct cfn-lint ID" + # Check aliases + cfn_via_alias = ({rid} | origins.rule_aliases.get(rid, set())) & set(origins.cfnlint_ids) + # The rule may alias cfn-lint IDs that aren't in this checkout + # (cfnlint_ids only contains what's in the fixture), so we check + # against the cfnlint_equivalent set which is the authoritative source + assert rid not in (origins.cfnlint_ids.keys() if hasattr(origins.cfnlint_ids, 'keys') + else origins.cfnlint_ids) + + +class TestStaleLogicalCoverage: + """Logical coverage may reference only registered engine rule IDs.""" + + def test_finds_only_absent_rule_id_components(self): + logical_coverage = { + "E1000": ("F0001/E8002", "both present"), + "E1001": ("F0001+W9999", "one absent"), + "E1002": ("schema-ext", "non-rule mechanism"), + } + + stale = audit._find_stale_logical_coverage( + {"F0001", "E8002"}, logical_coverage + ) + + assert stale == [ + ("E1001", "W9999", "F0001+W9999", "one absent") + ] + + +# ────────────────────────────────────────────────────────────────────────────── +# Todo #30: Main exit status for all failure classes +# ────────────────────────────────────────────────────────────────────────────── + +class TestMainExitStatus: + """main() exits nonzero for any audit failure.""" + + @pytest.fixture(autouse=True) + def no_stale_logical_coverage(self, monkeypatch): + monkeypatch.setattr( + audit, "_find_stale_logical_coverage", lambda registry_ids: [] + ) + + @pytest.fixture + def cfnlint_fixture(self, tmp_path): + """Create a minimal cfn-lint fixture directory.""" + rules_dir = tmp_path / "cfnlint" / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("Base",)') + (rules_dir / "E3012.py").write_text('id = "E3012"\nshortdesc = ("Type",)') + return tmp_path / "cfnlint" + + @pytest.fixture + def output_path(self, tmp_path): + return tmp_path / "output" / "report.md" + + def test_exits_nonzero_on_origin_issues(self, tmp_path, output_path, monkeypatch): + mock_origins = audit.RuleOrigins( + registry=[("E0001", "Error", "Structure", "CfnLint", "test")], + cfnlint_ids={}, + true_origins={"E0001": "Engine"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[ + ("E0001", "CfnLint", "Engine", "no equivalent") + ], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + registry = tmp_path / "registry.rs" + registry.write_text("") + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "REGISTRY", registry) + monkeypatch.setattr( + audit, "compute_rule_origins", lambda root: mock_origins + ) + monkeypatch.setattr(audit, "build_report", lambda origins: "# report\n") + monkeypatch.setattr(audit, "scan_rust_emissions", lambda directory=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + + assert audit.main() == 1 + + def test_exits_nonzero_on_parity_gaps(self, tmp_path, output_path, monkeypatch): + mock_origins = audit.RuleOrigins( + registry=[ + ("E3023", "Error", "Resource", "CfnLint", "record sets") + ], + cfnlint_ids={}, + true_origins={"E3023": "CfnLint"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + registry = tmp_path / "registry.rs" + registry.write_text("") + emission = [("E3023", "record sets", "resources_extra.rs", 10)] + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "REGISTRY", registry) + monkeypatch.setattr( + audit, "compute_rule_origins", lambda root: mock_origins + ) + monkeypatch.setattr(audit, "build_report", lambda origins: "# report\n") + monkeypatch.setattr( + audit, "scan_rust_emissions", lambda directory=None: emission + ) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + + assert audit.main() == 1 + + def test_exits_zero_when_all_pass(self, tmp_path, monkeypatch): + """When no failures, main returns 0.""" + # Mock everything to return no issues + mock_origins = audit.RuleOrigins( + registry=[], + cfnlint_ids={}, + true_origins={}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda d: False, + ) + output_path = tmp_path / "report.md" + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "compute_rule_origins", lambda x: mock_origins) + monkeypatch.setattr(audit, "build_report", lambda x: "# empty\n") + monkeypatch.setattr(audit, "audit_results", lambda x: {}) + monkeypatch.setattr(audit, "REGISTRY", tmp_path / "fake_registry.rs") + (tmp_path / "fake_registry.rs").write_text("") + result = audit.main() + assert result == 0 + + def test_exits_nonzero_on_unregistered_emissions(self, tmp_path, monkeypatch): + """Nonzero exit when unregistered emissions are found.""" + mock_origins = audit.RuleOrigins( + registry=[("E0001", "Error", "Structure", "CfnLint", "test")], + cfnlint_ids={"E0001": ("test", "test.py")}, + true_origins={"E0001": "CfnLint"}, + cfnlint_to_engine={"E0001": "E0001"}, + engine_to_cfnlint={"E0001": {"E0001"}}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda d: False, + ) + output_path = tmp_path / "report.md" + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "compute_rule_origins", lambda x: mock_origins) + monkeypatch.setattr(audit, "build_report", lambda x: "# report\n") + # Mock scan to return unregistered ID + monkeypatch.setattr(audit, "scan_rust_emissions", + lambda d=None: [("Z9999", "bad", "fake.rs", 1)]) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + monkeypatch.setattr(audit, "REGISTRY", tmp_path / "fake_registry.rs") + (tmp_path / "fake_registry.rs").write_text("") + result = audit.main() + assert result == 1 + + def test_exits_nonzero_on_severity_mismatch(self, tmp_path, monkeypatch): + """Nonzero exit when Rego severity mismatches are found.""" + mock_origins = audit.RuleOrigins( + registry=[("E3005", "Error", "Reference", "CfnLint", "deps")], + cfnlint_ids={"E3005": ("deps", "deps.py")}, + true_origins={"E3005": "CfnLint"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda d: False, + ) + output_path = tmp_path / "report.md" + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "compute_rule_origins", lambda x: mock_origins) + monkeypatch.setattr(audit, "build_report", lambda x: "# report\n") + # Mock scan: Rego emits E3005 with wrong severity "WARN" (should be ERROR) + monkeypatch.setattr(audit, "scan_rust_emissions", lambda d=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", + lambda: [("E3005", "WARN", "rego/deps.rego", 10)]) + monkeypatch.setattr(audit, "REGISTRY", tmp_path / "fake_registry.rs") + (tmp_path / "fake_registry.rs").write_text("") + result = audit.main() + assert result == 1 + + def test_exits_nonzero_on_invariant_violation(self, tmp_path, monkeypatch): + """Nonzero exit when engine-extra invariant is violated.""" + mock_origins = audit.RuleOrigins( + registry=[("E0001", "Error", "Structure", "CfnLint", "test")], + cfnlint_ids={"E0001": ("test", "test.py")}, + true_origins={"E0001": "CfnLint"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[("W9003", "alias", ["E3012"])], + is_engine_extra_diagnostic=lambda d: False, + ) + output_path = tmp_path / "report.md" + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "compute_rule_origins", lambda x: mock_origins) + monkeypatch.setattr(audit, "build_report", lambda x: "# report\n") + monkeypatch.setattr(audit, "scan_rust_emissions", lambda d=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + monkeypatch.setattr(audit, "REGISTRY", tmp_path / "fake_registry.rs") + (tmp_path / "fake_registry.rs").write_text("") + result = audit.main() + assert result == 1 + + def test_exits_nonzero_on_stale_logical_coverage(self, tmp_path, monkeypatch): + mock_origins = audit.RuleOrigins( + registry=[], + cfnlint_ids={}, + true_origins={}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + output_path = tmp_path / "report.md" + registry = tmp_path / "registry.rs" + registry.write_text("") + stale = [("E9999", "F9999", "F9999", "missing implementation")] + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(output_path), + ]) + monkeypatch.setattr(audit, "REGISTRY", registry) + monkeypatch.setattr(audit, "compute_rule_origins", lambda root: mock_origins) + monkeypatch.setattr(audit, "build_report", lambda origins: "# report\n") + monkeypatch.setattr(audit, "scan_rust_emissions", lambda directory=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + monkeypatch.setattr( + audit, "_find_stale_logical_coverage", lambda registry_ids: stale + ) + + assert audit.main() == 1 + + def test_exits_two_on_missing_registry(self, tmp_path, monkeypatch): + """Exit code 2 when registry file is missing.""" + monkeypatch.setattr(sys, "argv", [ + "audit", "--cfn-lint-root", str(tmp_path), + "--output", str(tmp_path / "report.md"), + ]) + monkeypatch.setattr(audit, "REGISTRY", tmp_path / "nonexistent.rs") + result = audit.main() + assert result == 2 + + +# ────────────────────────────────────────────────────────────────────────────── +# Integration: audit_results structure +# ────────────────────────────────────────────────────────────────────────────── + +class TestAuditResults: + """Verify audit_results returns structured data.""" + + @pytest.fixture(autouse=True) + def no_stale_logical_coverage(self, monkeypatch): + monkeypatch.setattr( + audit, "_find_stale_logical_coverage", lambda registry_ids: [] + ) + + def test_returns_dict(self, tmp_path): + """audit_results returns a dict.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + results = audit.audit_results(origins) + assert isinstance(results, dict) + + def test_empty_dict_means_all_pass(self, tmp_path, monkeypatch): + """Empty dict from audit_results means no failures.""" + mock_origins = audit.RuleOrigins( + registry=[], + cfnlint_ids={}, + true_origins={}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda d: False, + ) + monkeypatch.setattr(audit, "scan_rust_emissions", lambda d=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + results = audit.audit_results(mock_origins) + assert results == {} + + def test_shared_rust_emission_is_not_an_engine_parity_gap(self, monkeypatch): + origins = audit.RuleOrigins( + registry=[("F3003", "Fatal", "Schema", "Schema", "required property")], + cfnlint_ids={}, + true_origins={"F3003": "Schema"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + monkeypatch.setattr( + audit, + "scan_rust_emissions", + lambda directory=None: [("F3003", "required", "schema-validator/src/validate.rs", 1)] + if directory is None + else [], + ) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + + assert audit.audit_results(origins) == {} + + def test_at_source_rule_present_in_both_engines_has_no_gap(self, monkeypatch): + origins = audit.RuleOrigins( + registry=[("E3023", "Error", "Resource", "CfnLint", "record sets")], + cfnlint_ids={}, + true_origins={"E3023": "CfnLint"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + emission = [("E3023", "record sets", "resources_extra.rs", 10)] + monkeypatch.setattr(audit, "scan_rust_emissions", lambda directory=None: emission) + monkeypatch.setattr( + audit, + "scan_rego_emissions", + lambda: [("E3023", "ERROR", "rego/resources/route53.rego", 5)], + ) + + assert audit.audit_results(origins) == {} + + def test_engine_owned_emission_mismatch_is_a_parity_gap(self, monkeypatch): + origins = audit.RuleOrigins( + registry=[("E3023", "Error", "Resource", "CfnLint", "record sets")], + cfnlint_ids={}, + true_origins={"E3023": "CfnLint"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + emission = [("E3023", "record sets", "resources_extra.rs", 10)] + monkeypatch.setattr(audit, "scan_rust_emissions", lambda directory=None: emission) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + + assert audit.audit_results(origins)["parity_gaps"] == {"rust_only": ["E3023"], "rego_only": []} + + def test_stale_logical_coverage_propagated(self, monkeypatch): + origins = audit.RuleOrigins( + registry=[("F0001", "Fatal", "Structure", "Schema", "resources")], + cfnlint_ids={}, + true_origins={"F0001": "Schema"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda diagnostic: False, + ) + stale = [("E9999", "F9999", "F9999", "missing implementation")] + monkeypatch.setattr( + audit, "_find_stale_logical_coverage", lambda registry_ids: stale + ) + monkeypatch.setattr(audit, "scan_rust_emissions", lambda directory=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + + assert audit.audit_results(origins)["stale_logical_coverage"] == stale + + def test_origin_issues_propagated(self, tmp_path, monkeypatch): + """Origin issues are included in results.""" + mock_origins = audit.RuleOrigins( + registry=[("E0001", "Error", "Structure", "CfnLint", "test")], + cfnlint_ids={}, + true_origins={"E0001": "Engine"}, + cfnlint_to_engine={}, + engine_to_cfnlint={}, + engine_extra=set(), + engine_extra_collisions=set(), + engine_stricter=set(), + rule_aliases={}, + origin_issues=[("E0001", "CfnLint", "Engine", "no equivalent")], + engine_extra_invariant_violations=[], + is_engine_extra_diagnostic=lambda d: False, + ) + monkeypatch.setattr(audit, "scan_rust_emissions", lambda d=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + results = audit.audit_results(mock_origins) + assert "origin_issues" in results + assert len(results["origin_issues"]) == 1 + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #1: E→F promotion count vs total map size +# ────────────────────────────────────────────────────────────────────────────── + +class TestMappingBreakdown: + """The report must distinguish E→F promotions from E→E/E→W mappings.""" + + def test_e_to_f_count_is_40(self): + """The explicit mapping table has exactly 40 E→F promotions.""" + # Extract the raw table from the source (before filtering by cfn-lint + # checkout). This tests the table definition itself. + source = Path(audit.__file__).read_text() + import re as _re + entries = _re.findall( + r'"(E\d{4})"\s*:\s*"(F\d{4})"', source + ) + assert len(entries) == 40, ( + f"Expected 40 E→F promotions in _CFNLINT_TO_ENGINE, got {len(entries)}" + ) + + def test_e_to_e_mappings_counted_separately(self): + """E→E mappings are not counted as promotions.""" + source = Path(audit.__file__).read_text() + import re as _re + e_to_e = _re.findall(r'"(E\d{4})"\s*:\s*"(E\d{4})"', source) + assert len(e_to_e) == 11, ( + f"Expected 11 E→E mappings, got {len(e_to_e)}" + ) + + def test_e_to_w_mappings_counted_separately(self): + """E→W downgrades are not counted as promotions.""" + source = Path(audit.__file__).read_text() + import re as _re + e_to_w = _re.findall(r'"(E\d{4})"\s*:\s*"(W\d{4})"', source) + assert len(e_to_w) == 1, ( + f"Expected 1 E→W downgrade, got {len(e_to_w)}" + ) + + def test_report_labels_mapping_types_separately(self, tmp_path): + """build_report shows E→F, E→E, E→W counts separately.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + (rules_dir / "E3012.py").write_text('id = "E3012"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + report = audit.build_report(origins) + # The report must contain separate counts, not just the total + assert "E→F promotions" in report + assert "E→E same/split" in report + assert "E→W downgrades" in report + # Must NOT contain the old misleading label + assert "E→F promoted rules: " not in report + + def test_verified_split_aliases_share_reference_ids(self, tmp_path): + """Split engine rules retain the reference IDs for their shared concern.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "rules.py").write_text(textwrap.dedent("""\ + id = "E2015" + id = "E7001" + id = "E7010" + id = "E1011" + id = "W2501" + shortdesc = "test" + """)) + + origins = audit.compute_rule_origins(tmp_path) + + expected = { + "F2012": "E2015", + "F0017": "E7001", + "F0050": "E7010", + "F1012": "E1011", + "W2509": "W2501", + } + for engine_id, reference_id in expected.items(): + assert reference_id in origins.rule_aliases[engine_id] + assert reference_id in origins.engine_to_cfnlint[engine_id] + assert engine_id not in origins.engine_extra + assert origins.true_origins["W2509"] == "CfnLint" + + def test_direct_cli_does_not_spawn_pytest(self): + """Normal report generation must not depend on a pytest installation.""" + source = Path(audit.__file__).read_text() + assert "run_script_tests" not in source + assert "subprocess.run" not in source + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #2: LOGICAL_COVERAGE correctness +# ────────────────────────────────────────────────────────────────────────────── + +class TestLogicalCoverageCorrectness: + """LOGICAL_COVERAGE entries must not claim unproven behavioral parity.""" + + def test_i1002_is_out_of_scope(self): + """I1002 (approaching template size) is out-of-scope, not covered.""" + mechanism, _ = audit.LOGICAL_COVERAGE["I1002"] + assert mechanism == "out-of-scope", ( + f"I1002 should be out-of-scope, got '{mechanism}'" + ) + + def test_i3010_is_out_of_scope(self): + """I3010 (resource count approaching limit) is out-of-scope.""" + mechanism, _ = audit.LOGICAL_COVERAGE["I3010"] + assert mechanism == "out-of-scope", ( + f"I3010 should be out-of-scope, got '{mechanism}'" + ) + + def test_w1019_references_direct_implementation(self): + """W1019 references its own direct ID, not F1018/E1029.""" + mechanism, note = audit.LOGICAL_COVERAGE["W1019"] + assert mechanism == "W1019", ( + f"W1019 should reference itself as direct implementation, got '{mechanism}'" + ) + assert "F1018" not in mechanism + assert "E1029" not in mechanism + + def test_e1001_notes_partial_coverage(self): + """E1001 note must state partial coverage, not full equivalence.""" + _, note = audit.LOGICAL_COVERAGE["E1001"] + assert "partial" in note.lower(), ( + f"E1001 note must state partial coverage: '{note}'" + ) + + def test_e1011_notes_structural_only(self): + """E1011 note must clarify it's structural shape only.""" + _, note = audit.LOGICAL_COVERAGE["E1011"] + assert "structural" in note.lower() or "shape" in note.lower(), ( + f"E1011 note must clarify structural-only: '{note}'" + ) + + def test_e7010_notes_structural_limit_only(self): + """E7010 points to the per-mapping structural limit implementation.""" + mechanism, note = audit.LOGICAL_COVERAGE["E7010"] + assert mechanism == "F0050" + assert "structural limit only" in note.lower() or "limit only" in note.lower(), ( + f"E7010 note must mention structural limit only: '{note}'" + ) + + def test_header_disclaims_behavioral_parity(self): + """The LOGICAL_COVERAGE source must disclaim behavioral parity.""" + source = Path(audit.__file__).read_text() + # Find the docblock before LOGICAL_COVERAGE + idx = source.index("LOGICAL_COVERAGE = {") + block = source[max(0, idx - 1000):idx] + assert "behavioral parity" in block.lower() or "NOT claim" in block, ( + "LOGICAL_COVERAGE header must disclaim behavioral parity" + ) + + def test_no_false_coverage_via_unrelated_rules(self): + """Entries must not claim coverage by rules that check a different concern.""" + # W1019 checks UNUSED Sub params; E1029/F1018 check MISSING Sub vars. + # These are different concerns. + mechanism, _ = audit.LOGICAL_COVERAGE["W1019"] + assert "E1029" not in mechanism and "F1018" not in mechanism + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #3: Schema grounding requires explicit classification +# ────────────────────────────────────────────────────────────────────────────── + +class TestSchemaGroundingExplicitClassification: + """Schema origin requires explicit contract classification, not just source location.""" + + def test_unlisted_template_model_rule_not_promoted(self): + """A rule emitted from template-model but NOT in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS + is NOT classified as Schema.""" + # F9999 is hypothetically emitted from template-model but not in the + # explicit classification set → should not be Schema for non-F rules + registry = [ + ("E9999", "Error", "Structure", "Engine", "Hypothetical rule") + ] + rust_emissions = [ + ("E9999", "message", "template-model/src/parser.rs", 42) + ] + computed = audit._compute_schema_grounded_non_f( + registry, rust_emissions, [] + ) + # E9999 is NOT in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS, so not grounded + assert "E9999" not in computed + + def test_listed_rule_with_emitters_is_grounded(self): + """A rule listed in _SCHEMA_GROUNDING_SOURCE_REQUIREMENTS with confirmed + emitters IS classified as Schema.""" + # E8003 is in _TEMPLATE_MODEL_SCHEMA_RULES + registry = [ + ("E8003", "Error", "Intrinsic", "Schema", "Fn::Equals structure") + ] + rust_emissions = [ + ("E8003", "msg", "template-model/src/conditions.rs", 10) + ] + computed = audit._compute_schema_grounded_non_f( + registry, rust_emissions, [] + ) + assert "E8003" in computed + + def test_docstring_mentions_explicit_classification(self): + """The _compute_schema_grounded_non_f docstring must mention explicit classification.""" + docstring = audit._compute_schema_grounded_non_f.__doc__ + assert "explicit" in docstring.lower() + assert "source location alone" in docstring.lower() or "NOT proof" in docstring + + def test_schema_grounding_requirements_documented(self): + """_SCHEMA_GROUNDING_SOURCE_REQUIREMENTS has a doccomment explaining + that source location alone is not proof.""" + source = Path(audit.__file__).read_text() + idx = source.index("_SCHEMA_GROUNDING_SOURCE_REQUIREMENTS") + block = source[max(0, idx - 800):idx + 100] + assert "source location alone" in block.lower() or "NOT sufficient" in block + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #4: cfg(test) stripping robust against strings/comments +# ────────────────────────────────────────────────────────────────────────────── + +class TestCfgTestStrippingRobustness: + """cfg(test) stripping must handle braces in strings, raw strings, and comments.""" + + def test_brace_in_string_does_not_close_module(self): + """A '}' inside a string literal must not end the test module early.""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0001", "real"); + } + + #[cfg(test)] + mod tests { + fn test_it() { + let msg = "closing brace } in string"; + RegisteredDiagnostic::new("Z9999", "test only"); + } + } + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0001" in stripped + assert "Z9999" not in stripped, ( + "Brace in string caused premature module close" + ) + + def test_brace_in_raw_string_does_not_close_module(self): + """A '}' inside a raw string r#"..."# must not end the test module.""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0002", "real"); + } + + #[cfg(test)] + mod tests { + fn test_it() { + let pattern = r#"regex with } brace"#; + RegisteredDiagnostic::new("Z8888", "test"); + } + } + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0002" in stripped + assert "Z8888" not in stripped + + def test_brace_in_line_comment_does_not_close_module(self): + """A '}' in a line comment must not end the test module.""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0003", "real"); + } + + #[cfg(test)] + mod tests { + // This comment has a } brace + fn test_it() { + RegisteredDiagnostic::new("Z7777", "test"); + } + } + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0003" in stripped + assert "Z7777" not in stripped + + def test_brace_in_block_comment_does_not_close_module(self): + """A '}' in a block comment must not end the test module.""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0004", "real"); + } + + #[cfg(test)] + mod tests { + /* block comment with } brace */ + fn test_it() { + RegisteredDiagnostic::new("Z6666", "test"); + } + } + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0004" in stripped + assert "Z6666" not in stripped + + def test_escaped_quote_in_string_does_not_break_scanning(self): + """An escaped quote \\\" inside a string must not break string detection.""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0005", "real"); + } + + #[cfg(test)] + mod tests { + fn test_it() { + let s = "escaped \\" and } brace"; + RegisteredDiagnostic::new("Z5555", "test"); + } + } + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0005" in stripped + assert "Z5555" not in stripped + + def test_fail_closed_on_unbalanced_input(self): + """If matching brace is never found, strip remainder (fail-closed).""" + text = textwrap.dedent('''\ + fn production() { + RegisteredDiagnostic::new("E0006", "real"); + } + + #[cfg(test)] + mod tests { + fn test_it() { + RegisteredDiagnostic::new("Z4444", "test"); + // missing closing brace + ''') + stripped = audit._strip_cfg_test_modules(text) + assert "E0006" in stripped + # Fail-closed: Z4444 must be stripped even though brace is unbalanced + assert "Z4444" not in stripped + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #5: Engine-extra means no semantic equivalent +# ────────────────────────────────────────────────────────────────────────────── + +class TestEngineExtraSemanticEquivalent: + """Engine-extra must mean no semantic equivalent, not just no numeric mapping.""" + + def test_collision_rules_are_engine_extra(self, tmp_path): + """Rules with Engine(collision) origin are engine-extra because the + colliding cfn-lint rule implements a DIFFERENT check.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "dummy.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + # Any Engine(collision) rule should be in engine_extra + for rid, true_o in origins.true_origins.items(): + if true_o == "Engine(collision)": + assert rid in origins.engine_extra, ( + f"{rid} has Engine(collision) but is not in engine_extra" + ) + assert rid in origins.engine_extra_collisions + + def test_engine_extra_collisions_is_subset(self, tmp_path): + """engine_extra_collisions is always a subset of engine_extra.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + assert origins.engine_extra_collisions <= origins.engine_extra + + def test_report_shows_collision_count(self, tmp_path): + """The report summary shows collision count alongside engine-extra.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + report = audit.build_report(origins) + assert "number collisions" in report + + def test_aliased_rule_never_engine_extra(self, tmp_path): + """A rule with a cfn-lint semantic equivalent via alias is never engine-extra.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E3012.py").write_text('id = "E3012"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + # W9003 aliases E3012 — it must NOT be engine-extra + assert "W9003" not in origins.engine_extra + # W3030 aliases E3030 — if E3030 is present in cfn-lint + if "E3030" in origins.cfnlint_ids: + assert "W3030" not in origins.engine_extra + + +# ────────────────────────────────────────────────────────────────────────────── +# Defect #6: Source parity wording states ID presence only +# ────────────────────────────────────────────────────────────────────────────── + +class TestSourceParityWording: + """Source parity reporting must state it checks ID presence only.""" + + def test_report_gap_section_disclaims_behavioral_parity(self, tmp_path): + """When there are gaps, the section title/text must disclaim behavioral parity.""" + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + report = audit.build_report(origins) + # Must use "ID presence" language, not "parity" + if "Engine source" in report: + assert "ID presence" in report or "presence only" in report + + def test_report_success_disclaims_behavioral_parity(self, tmp_path, monkeypatch): + """When no gaps exist, the success message still disclaims behavioral parity.""" + # Mock to have no gaps + rules_dir = tmp_path / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + (rules_dir / "E0001.py").write_text('id = "E0001"\nshortdesc = ("t",)') + origins = audit.compute_rule_origins(tmp_path) + # Rebuild report with mocked empty gaps + monkeypatch.setattr(audit, "scan_rust_emissions", + lambda directory=None: []) + monkeypatch.setattr(audit, "scan_rego_emissions", lambda: []) + report = audit.build_report(origins) + # The success line should mention ID presence + if "Engine source ID presence" in report: + assert "behavioral parity" in report.lower() or "ID presence" in report + + def test_audit_results_parity_gaps_comment_mentions_id_presence(self): + """The audit_results code comment must mention ID presence.""" + source = Path(audit.__file__).read_text() + # Find the parity_gaps section in audit_results function + # Look for the comment block that precedes parity_gaps assignment + audit_fn_start = source.index("def audit_results(") + parity_idx = source.index("parity_gaps", audit_fn_start) + block = source[max(audit_fn_start, parity_idx - 400):parity_idx + 50] + assert "ID presence" in block or "id presence" in block.lower() or \ + "NOT verify behavioral parity" in block diff --git a/scripts/tests/test_compare_cfnlint.py b/scripts/tests/test_compare_cfnlint.py new file mode 100644 index 00000000..31fd7d65 --- /dev/null +++ b/scripts/tests/test_compare_cfnlint.py @@ -0,0 +1,1755 @@ +import json +import sys +import tempfile +import unittest +from pathlib import Path +from unittest.mock import patch + +SCRIPTS_DIR = Path(__file__).resolve().parents[1] +sys.path.insert(0, str(SCRIPTS_DIR)) + +import compare_cfnlint as comparison + + +class ComparisonIdentityTests(unittest.TestCase): + def setUp(self): + self.original_aliases = comparison._RULE_ALIASES + self.original_engine_to_cfnlint = comparison._ENGINE_TO_CFNLINT + comparison._RULE_ALIASES = {} + comparison._ENGINE_TO_CFNLINT = {} + + def tearDown(self): + comparison._RULE_ALIASES = self.original_aliases + comparison._ENGINE_TO_CFNLINT = self.original_engine_to_cfnlint + + def test_resource_metadata_keeps_logical_id_and_slash_keys(self): + identity = comparison._normalize_engine_identity( + "Instance", + "Metadata.AWS::CloudFormation::Init.files./etc/cfn/cfn-hup.conf.content.Fn::Join", + ) + + self.assertEqual( + ( + "Instance", + "Metadata.AWS::CloudFormation::Init.files./etc/cfn/cfn-hup.conf.content.Fn::Join", + ), + identity, + ) + + def test_top_level_output_uses_resource_free_dotted_identity(self): + identity = comparison._normalize_engine_identity("", "Outputs/WebsiteUrl/Value.Fn::Join") + + self.assertEqual(("", "Outputs.WebsiteUrl.Value.Fn::Join"), identity) + + def test_proven_equivalent_anchors_share_match_keys(self): + cases = [ + ("I1022", "Metadata.Command.Fn::Join.0", "Metadata.Command.Fn::Join"), + ("W2010", "Metadata.Secret.Ref", "Metadata.Secret"), + ("W2010", "Metadata.Secret.Fn::Sub", "Metadata.Secret"), + ("F1018", "Metadata.Name.Fn::Sub", "Metadata.Name"), + ("F1020", "Metadata.Target.Ref", "Metadata.Target"), + ("W1020", "Properties.Command.Fn::Sub", "Properties.Command"), + ( + "E3053", + "Properties.ContainerDefinitions.0.PortMappings.0.HostPort", + "Properties.ContainerDefinitions[0].PortMappings[0].HostPort", + ), + ( + "E1152", + "Properties.Fn::If.2.Fn::If.1.ImageId", + "Properties.ImageId", + ), + ] + + for rule_id, reference_path, engine_path in cases: + with self.subTest(rule_id=rule_id, reference_path=reference_path): + reference = self._diagnostic(rule_id, "Resource", reference_path) + engine = self._diagnostic(rule_id, "Resource", engine_path) + self.assertEqual(comparison._match_key(reference), comparison._match_key(engine)) + + def test_depends_on_indices_remain_distinct(self): + scalar = self._diagnostic("W3005", "Resource", "DependsOn") + indexed = self._diagnostic("W3005", "Resource", "DependsOn.1") + + self.assertNotEqual(comparison._match_key(scalar), comparison._match_key(indexed)) + + def test_resource_root_json_path_matches_empty_engine_resource_path(self): + reference = self._diagnostic("I3011", "Table", "") + reference["json_path"] = "Resources.Table" + engine = self._diagnostic("I3011", "Table", "") + + self.assertEqual( + ("I3011", "Table", ""), + comparison._match_key(reference), + ) + self.assertEqual( + comparison._match_key(reference), + comparison._match_key(engine), + ) + + def test_unrelated_intrinsic_paths_remain_distinct(self): + reference = self._diagnostic("F1020", "Resource", "Metadata.Target.Fn::GetAtt") + engine = self._diagnostic("F1020", "Resource", "Metadata.Target") + + self.assertNotEqual(comparison._match_key(reference), comparison._match_key(engine)) + + def test_resource_directive_suppresses_only_the_named_rule_and_resource(self): + template = { + "Resources": { + "Suppressed": { + "Metadata": { + "cfn-lint": { + "config": {"ignore_checks": ["E3001", "E3030"]} + } + } + }, + "Unsuppressed": {"Type": "AWS::S3::Bucket"}, + } + } + suppressions = comparison._extract_reference_suppressions(template) + + self.assertTrue(suppressions.suppresses({"E3001"}, "Suppressed")) + self.assertFalse(suppressions.suppresses({"E3001"}, "Unsuppressed")) + self.assertFalse(suppressions.suppresses({"E3019"}, "Suppressed")) + + def test_resource_directive_uses_reference_rule_id_for_promoted_rule(self): + comparison._ENGINE_TO_CFNLINT = {"F3003": {"E3003"}} + template = { + "Resources": { + "Resource": { + "Metadata": { + "cfn-lint": {"config": {"ignore_checks": ["E3003"]}} + } + } + } + } + suppressions = comparison._extract_reference_suppressions(template) + + self.assertTrue( + comparison._is_reference_suppressed("F3003", "Resource", suppressions) + ) + + def test_global_ignore_prefix_applies_without_resource_scope(self): + template = { + "Metadata": { + "cfn-lint": {"config": {"ignore_checks": ["W", "E2530"]}} + } + } + suppressions = comparison._extract_reference_suppressions(template) + + self.assertTrue(suppressions.suppresses({"W2010"}, "AnyResource")) + self.assertTrue(suppressions.suppresses({"E2530"}, "")) + self.assertFalse(suppressions.suppresses({"E3001"}, "AnyResource")) + + def test_reference_suppression_precedes_engine_extra_classification(self): + diagnostic = { + "rule_id": "F3002", + "reference_suppressed": True, + } + original_engine_extra_rules = comparison.ENGINE_EXTRA_RULES + comparison.ENGINE_EXTRA_RULES = {"F3002"} + try: + # Reference suppression takes precedence: a suppressed finding is RS + # regardless of whether it would also be engine-extra. + self.assertTrue( + comparison._is_reference_suppressed_for_comparison(diagnostic) + ) + finally: + comparison.ENGINE_EXTRA_RULES = original_engine_extra_rules + + def test_sam_stateful_effective_types_are_intentional_divergences(self): + for resource_type in ("AWS::Serverless::Application", "AWS::Serverless::SimpleTable"): + with self.subTest(resource_type=resource_type): + diagnostic = self._diagnostic("I3011", "Resource", "") + diagnostic.update({ + "resource_type": resource_type, + "message": "'DeletionPolicy' is a required property (stateful resource)", + }) + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["resource_type"] = "AWS::DynamoDB::Table" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_forbidden_identity_policy_id_is_an_intentional_divergence(self): + diagnostic = self._diagnostic("E3510", "Policy", "Properties.PolicyDocument.Id") + diagnostic.update({ + "resource_type": "AWS::IAM::ManagedPolicy", + "message": "Additional properties are not allowed ('Id' was unexpected)", + }) + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["resource_type"] = "AWS::S3::BucketPolicy" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_concrete_identity_policy_document_list_is_an_intentional_divergence(self): + diagnostic = self._diagnostic("E3510", "Policy", "Properties.PolicyDocument") + diagnostic.update({ + "resource_type": "AWS::IAM::Policy", + "message": "[{\"Statement\":{}}] is not of type 'object'", + }) + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["resource_path"] = "Properties.PolicyDocument.Statement" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["resource_path"] = "Properties.PolicyDocument" + diagnostic["message"] = "{\"Statement\":{}} is not of type 'object'" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["message"] = "[{\"Statement\":{}}] is not of type 'object'" + diagnostic["resource_type"] = "AWS::S3::BucketPolicy" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_default_provisioned_billing_is_not_blanket_intentional_divergence(self): + diagnostic = self._diagnostic("E3639", "Table", "Properties.ProvisionedThroughput") + diagnostic.update({ + "resource_type": "AWS::DynamoDB::Table", + "message": "ProvisionedThroughput is required when BillingMode defaults to 'PROVISIONED'", + }) + + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_formatted_diagnostic_strips_trailing_whitespace(self): + diagnostic = self._diagnostic("E3001", "Resource", "") + diagnostic.update( + { + "resource_type": "AWS::S3::Bucket", + "line": 1, + "end_line": 1, + "message": "message with trailing space ", + } + ) + + formatted = comparison.fmt_diag(diagnostic, "template_yaml") + + self.assertEqual(" > message with trailing space", formatted.splitlines()[-1]) + + def test_yaml_loader_handles_cloudformation_tags_and_directives(self): + template = """\ +Resources: + Bucket: + Type: AWS::S3::Bucket + Metadata: + cfn-lint: + config: + ignore_checks: + - E3001 + Properties: + BucketName: !Sub '${AWS::StackName}-bucket' +""" + with tempfile.TemporaryDirectory() as directory: + path = Path(directory) / "template.yaml" + path.write_text(template) + + suppressions = comparison._load_reference_suppressions(path) + + self.assertTrue(suppressions.suppresses({"E3001"}, "Bucket")) + + @staticmethod + def _diagnostic(rule_id, resource_id, resource_path): + return { + "rule_id": rule_id, + "resource_id": resource_id, + "resource_path": resource_path, + "json_path": "", + "message": "message", + } + + +class ReferenceNormalizationTests(unittest.TestCase): + def setUp(self): + self.original_mapping = comparison._CFNLINT_TO_ENGINE + + def tearDown(self): + comparison._CFNLINT_TO_ENGINE = self.original_mapping + + @staticmethod + def _raw(rule_id, message, level="Error"): + return { + "Rule": {"Id": rule_id, "ShortDescription": "description"}, + "Level": level, + "Location": {}, + "Message": message, + } + + def test_promoted_identity_retains_raw_reference_id_and_severity(self): + comparison._CFNLINT_TO_ENGINE = {"E3003": "F3003"} + + diagnostic = comparison.normalize_cfnlint_diags([ + self._raw("E3003", "'Name' is a required property") + ])[0] + + self.assertEqual("F3003", diagnostic["rule_id"]) + self.assertEqual("E3003", diagnostic["cfnlint_rule_id"]) + self.assertEqual("Fatal", diagnostic["severity"]) + self.assertEqual("Error", diagnostic["cfnlint_severity"]) + + def test_missing_resources_e1001_maps_to_f0001_only_for_that_occurrence(self): + comparison._CFNLINT_TO_ENGINE = {} + + missing_resources, invalid_globals = comparison.normalize_cfnlint_diags([ + self._raw("E1001", "'Resources' is a required property"), + self._raw("E1001", "'notadict' is not of type 'object'"), + ]) + + self.assertEqual("F0001", missing_resources["rule_id"]) + self.assertEqual("E1001", missing_resources["cfnlint_rule_id"]) + self.assertEqual("Fatal", missing_resources["severity"]) + self.assertEqual("E1001", invalid_globals["rule_id"]) + self.assertEqual("Error", invalid_globals["severity"]) + + +class EngineToReferenceAliasTests(unittest.TestCase): + """Tests for the reverse-alias (engine_to_cfnlint) resolution mechanism. + + Verifies that _reference_rule_ids correctly resolves engine rule IDs to the + full set of cfn-lint IDs they correspond to, enabling reference suppressions + to work for all many-to-one mappings. + """ + + def setUp(self): + self.original_engine_to_cfnlint = comparison._ENGINE_TO_CFNLINT + self.original_aliases = comparison._RULE_ALIASES + self.original_engine_extra = comparison.ENGINE_EXTRA_RULES + + def tearDown(self): + comparison._ENGINE_TO_CFNLINT = self.original_engine_to_cfnlint + comparison._RULE_ALIASES = self.original_aliases + comparison.ENGINE_EXTRA_RULES = self.original_engine_extra + + def test_single_alias_resolves_to_singleton_set(self): + """A 1:1 mapping returns a single-element set.""" + comparison._ENGINE_TO_CFNLINT = {"F3003": {"E3003"}} + result = comparison._reference_rule_ids("F3003") + self.assertEqual(result, {"E3003"}) + + def test_many_to_one_e3691_e3690_resolve_to_e9006(self): + """E3691→E9006 and E3690→E9006: both cfn-lint IDs must be in the set.""" + comparison._ENGINE_TO_CFNLINT = {"E9006": {"E3690", "E3691"}} + result = comparison._reference_rule_ids("E9006") + self.assertEqual(result, {"E3690", "E3691"}) + + def test_many_to_one_e1022_e1020_resolve_to_f1020(self): + """E1022→F1020 and E1020→F1020: both cfn-lint IDs in the reverse set.""" + comparison._ENGINE_TO_CFNLINT = {"F1020": {"E1020", "E1022"}} + result = comparison._reference_rule_ids("F1020") + self.assertEqual(result, {"E1020", "E1022"}) + + def test_many_to_one_e8001_e1028_resolve_to_f0013(self): + """E8001→F0013 and E1028→F0013: both cfn-lint IDs in the reverse set.""" + comparison._ENGINE_TO_CFNLINT = {"F0013": {"E1028", "E8001"}} + result = comparison._reference_rule_ids("F0013") + self.assertEqual(result, {"E1028", "E8001"}) + + def test_fallback_returns_engine_id_when_no_mapping_exists(self): + """An unmapped engine ID falls back to itself.""" + comparison._ENGINE_TO_CFNLINT = {} + result = comparison._reference_rule_ids("E9999") + self.assertEqual(result, {"E9999"}) + + def test_global_suppression_covers_all_reverse_aliases(self): + """A global ignore_checks prefix like 'E' suppresses engine findings + whose cfn-lint reverse-aliases start with E.""" + comparison._ENGINE_TO_CFNLINT = {"E9006": {"E3690", "E3691"}} + comparison.ENGINE_EXTRA_RULES = set() + template = { + "Metadata": { + "cfn-lint": {"config": {"ignore_checks": ["E"]}} + } + } + suppressions = comparison._extract_reference_suppressions(template) + # The engine finding E9006 reverse-maps to E3690/E3691, both start with E + self.assertTrue( + comparison._is_reference_suppressed("E9006", "AnyResource", suppressions), + "Global 'E' prefix should suppress E9006 via reverse-aliases E3690/E3691" + ) + + def test_resource_suppression_with_many_to_one_alias(self): + """A per-resource ignore_checks for E3691 suppresses engine E9006 on that resource.""" + comparison._ENGINE_TO_CFNLINT = {"E9006": {"E3690", "E3691"}} + comparison.ENGINE_EXTRA_RULES = set() + template = { + "Resources": { + "MyDB": { + "Metadata": { + "cfn-lint": {"config": {"ignore_checks": ["E3691"]}} + } + } + } + } + suppressions = comparison._extract_reference_suppressions(template) + self.assertTrue( + comparison._is_reference_suppressed("E9006", "MyDB", suppressions), + "E3691 suppression on MyDB should suppress engine E9006" + ) + self.assertFalse( + comparison._is_reference_suppressed("E9006", "OtherDB", suppressions), + "Other resources should not be suppressed" + ) + + def test_compute_rule_origins_retains_all_reverse_aliases(self): + from audit_rule_categorization import compute_rule_origins + + cfnlint_rule_ids = ["E1020", "E1022", "E1028", "E3690", "E3691", "E8001"] + with tempfile.TemporaryDirectory() as directory: + rules_dir = Path(directory) / "src" / "cfnlint" / "rules" + rules_dir.mkdir(parents=True) + rules_dir.joinpath("fixture_rules.py").write_text( + "shortdesc = \"fixture\"\n" + + "\n".join(f'id = "{rule_id}"' for rule_id in cfnlint_rule_ids) + ) + + origins = compute_rule_origins(Path(directory)) + + self.assertTrue(origins.engine_to_cfnlint) + self.assertTrue(all(isinstance(ids, set) for ids in origins.engine_to_cfnlint.values())) + self.assertEqual(origins.engine_to_cfnlint["F1020"], {"E1020", "E1022"}) + self.assertEqual(origins.engine_to_cfnlint["E9006"], {"E3690", "E3691"}) + self.assertEqual(origins.engine_to_cfnlint["F0013"], {"E1028", "E8001"}) + + +class OccurrenceMatchingTests(unittest.TestCase): + """Behavioral identity is independent from final diagnostic anchoring.""" + + def setUp(self): + self.original_aliases = comparison._RULE_ALIASES + comparison._RULE_ALIASES = {} + + def tearDown(self): + comparison._RULE_ALIASES = self.original_aliases + + def test_unrelated_paths_on_same_resource_remain_unmatched(self): + reference = [_diag("E3012", "MyBucket", "Properties.BucketName")] + engine = [_diag("E3012", "MyBucket", "Properties.AccessControl")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual([], comparison._collect_match_mismatches(matched)) + + def test_same_path_matches_without_path_mismatch(self): + reference = [_diag("E3012", "MyBucket", "Properties.BucketName")] + engine = [_diag("E3012", "MyBucket", "Properties.BucketName")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual([], comparison._collect_match_mismatches(matched)) + + def test_top_level_different_paths_remain_unmatched(self): + reference = [_diag("E3001", "", "Outputs.Foo")] + engine = [_diag("E3001", "", "Outputs.Bar")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + + def test_same_rule_on_different_resources_remains_unmatched(self): + reference = [_diag("E3012", "First", "Properties.Name")] + engine = [_diag("E3012", "Second", "Properties.Name")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + + def test_different_rules_on_same_resource_remain_unmatched(self): + reference = [_diag("E3012", "Resource", "Properties.Name")] + engine = [_diag("E3001", "Resource", "Properties.Name")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + + def test_duplicate_exact_identities_pair_deterministically_by_message(self): + reference = [ + _diag("E3012", "Resource", "Properties.Name", message="first"), + _diag("E3012", "Resource", "Properties.Name", message="second"), + ] + engine = [ + _diag("E3012", "Resource", "Properties.Name", message="second"), + _diag("E3012", "Resource", "Properties.Name", message="first"), + ] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((2, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual( + [("first", "first"), ("second", "second")], + sorted((expected["message"], actual["message"]) for expected, actual in matched), + ) + + def test_transform_error_message_identity_reports_path_quality_separately(self): + message = "Error transforming template: invalid generated resource" + reference = [_diag("E0001", "", "", message=message)] + engine = [_diag("E0001", "Generated", "Properties.Source", message=message)] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + mismatches = comparison._collect_match_mismatches(matched) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual(("", "Properties.Source"), mismatches[0][2]) + classification = comparison._classify_path_difference(*matched[0]) + self.assertEqual(comparison._ENGINE_PREFERRED, classification.kind) + + def test_condition_branch_path_is_representational(self): + reference = [_diag( + "E1152", "Instance", "Properties.Fn::If.2.Fn::If.1.ImageId" + )] + engine = [_diag("E1152", "Instance", "Properties.ImageId")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + classification = comparison._classify_path_difference(*matched[0]) + self.assertEqual(comparison._REPRESENTATIONAL, classification.kind) + + def test_engine_preferred_anchor_pairs_only_explicit_rule(self): + reference = [_diag("E3047", "Task", "Properties")] + engine = [_diag("E3047", "Task", "Properties.Cpu")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + classification = comparison._classify_path_difference(*matched[0]) + self.assertEqual(comparison._ENGINE_PREFERRED, classification.kind) + + def test_non_comparable_relationship_endpoints_pair(self): + reference = [_diag("E3502", "Queue", "Properties.FifoQueue")] + engine = [_diag("E3502", "Queue", "Properties.RedrivePolicy")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + classification = comparison._classify_path_difference(*matched[0]) + self.assertEqual(comparison._NON_COMPARABLE, classification.kind) + + def test_same_rule_resource_pairing_artifact_remains_unmatched(self): + reference = [_diag("F3012", "Database", "Properties.MultiAZ")] + engine = [_diag("F3012", "Database", "Properties.AllocatedStorage")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + + +class SAMPathMatchingTests(unittest.TestCase): + """SAM hash-suffix equivalents still require the same canonical path.""" + + def setUp(self): + self.original_aliases = comparison._RULE_ALIASES + comparison._RULE_ALIASES = {} + + def tearDown(self): + comparison._RULE_ALIASES = self.original_aliases + + def test_sam_hash_match_with_same_path_has_no_path_mismatch(self): + reference = [_diag("E3012", "Layer7f955f606e", "Properties.Content")] + engine = [_diag("E3012", "Layer", "Properties.Content")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((1, 0, 0), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual([], comparison._collect_match_mismatches(matched)) + + def test_sam_hash_match_with_different_path_remains_unmatched(self): + reference = [_diag("E3012", "Layer7f955f606e", "Properties.Content")] + engine = [_diag("E3012", "Layer", "Properties.Runtime")] + + matched, false_positives, false_negatives = comparison.compare_template( + reference, engine + ) + + self.assertEqual((0, 1, 1), ( + len(matched), len(false_positives), len(false_negatives) + )) + self.assertEqual([], comparison._collect_match_mismatches(matched)) + + +class CollisionResolutionTests(unittest.TestCase): + """Tests for duplicate cfn-lint baseline collision resolution.""" + + def test_identical_diagnostics_deduplicate_silently(self): + """When normalized diagnostics are identical, keep either without error.""" + existing = ("good/serverless.yaml", [{"rule_id": "E0001"}], Path("/a/b.json")) + new_entry = ("good/serverless.yaml", [{"rule_id": "E0001"}], Path("/c/d.json")) + + result = comparison._resolve_cfnlint_collision("key", existing, new_entry) + + self.assertEqual(result, existing) + + def test_quickstart_non_strict_preferred_over_strict(self): + """For QuickStart collisions, non_strict wins.""" + strict_file = Path("/results/quickstart/strict/cis.json") + non_strict_file = Path("/results/quickstart/non_strict/cis.json") + + existing = ("quickstart/cis.yaml", [{"rule_id": "E3012"}], non_strict_file) + new_entry = ("quickstart/cis.yaml", [{"rule_id": "F3012"}], strict_file) + + result = comparison._resolve_cfnlint_collision("key", existing, new_entry) + + self.assertEqual(result, existing) + + def test_quickstart_strict_replaced_by_non_strict(self): + """When strict is existing and non_strict comes second, non_strict wins.""" + strict_file = Path("/results/quickstart/strict/cis.json") + non_strict_file = Path("/results/quickstart/non_strict/cis.json") + + existing = ("quickstart/cis.yaml", [{"rule_id": "F3012"}], strict_file) + new_entry = ("quickstart/cis.yaml", [{"rule_id": "E3012"}], non_strict_file) + + result = comparison._resolve_cfnlint_collision("key", existing, new_entry) + + self.assertEqual(result, new_entry) + + def test_quickstart_non_strict_preferred_over_root_in_both_orders(self): + """An explicit non_strict baseline wins over the root/default result.""" + root_file = Path("/results/quickstart/cis_benchmark_yaml.json") + non_strict_file = Path("/results/quickstart/non_strict/cis_benchmark_yaml.json") + root_entry = ("quickstart/cis_benchmark.yaml", [{"rule_id": "F3012"}], root_file) + non_strict_entry = ("quickstart/cis_benchmark.yaml", [{"rule_id": "E3012"}], non_strict_file) + + for existing, new_entry in ((root_entry, non_strict_entry), (non_strict_entry, root_entry)): + with self.subTest(existing=existing[2]): + result = comparison._resolve_cfnlint_collision( + "quickstart_cis_benchmark_yaml", existing, new_entry + ) + self.assertEqual(result, non_strict_entry) + + def test_ambiguous_collision_raises(self): + """Unresolvable collision raises ValueError.""" + file_a = Path("/results/other/a.json") + file_b = Path("/results/another/b.json") + + existing = ("", [{"rule_id": "E3012"}], file_a) + new_entry = ("", [{"rule_id": "F3012"}], file_b) + + with self.assertRaises(ValueError) as ctx: + comparison._resolve_cfnlint_collision("test_key", existing, new_entry) + self.assertIn("test_key", str(ctx.exception)) + + +class StrictNonStrictSelectionTests(unittest.TestCase): + """Test that QuickStart strict/non_strict selection works correctly.""" + + def test_corpus_dir_preference_for_non_quickstart(self): + """For non-QuickStart, prefer result tree matching template top-level dir.""" + global CFN_LINT_RESULTS + original = comparison.CFN_LINT_RESULTS + comparison.CFN_LINT_RESULTS = Path("/results") + try: + # Template is in bad/, existing result is in bad/ tree, new is in good/ + bad_file = Path("/results/bad/template.json") + good_file = Path("/results/good/template.json") + + existing = ("bad/template.yaml", [{"rule_id": "E3012"}], bad_file) + new_entry = ("bad/template.yaml", [{"rule_id": "E3012", "extra": True}], good_file) + + result = comparison._resolve_cfnlint_collision("key", existing, new_entry) + self.assertEqual(result, existing) + finally: + comparison.CFN_LINT_RESULTS = original + + +class TaxonomyPrecedenceTests(unittest.TestCase): + """Tests suppression, evidence-backed divergence, and engine-extra precedence.""" + + def setUp(self): + self.original_engine_to_cfnlint = comparison._ENGINE_TO_CFNLINT + self.original_engine_extra_rules = comparison.ENGINE_EXTRA_RULES + self.original_engine_extra_predicate = comparison._IS_ENGINE_EXTRA_DIAGNOSTIC + + def tearDown(self): + comparison._ENGINE_TO_CFNLINT = self.original_engine_to_cfnlint + comparison.ENGINE_EXTRA_RULES = self.original_engine_extra_rules + comparison._IS_ENGINE_EXTRA_DIAGNOSTIC = self.original_engine_extra_predicate + + def test_w9003_requires_schema_coercion_evidence(self): + diagnostic = _diag( + "W9003", + "Resource", + "Properties.Foo", + phase="SCHEMA", + message="'5' is not of type 'integer' - automatically coerced (string to integer)", + ) + + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + diagnostic["message"] = "unrecognized warning" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_w1019_requires_unused_sub_parameter_evidence(self): + diagnostic = _diag( + "W1019", + "Resource", + "Properties.Foo", + phase="LINT", + message="Parameter 'Unused' not used in Fn::Sub template string", + ) + + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + diagnostic["phase"] = "SCHEMA" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_extension_schema_findings_require_known_property_and_phase(self): + diagnostic = _diag( + "F3003", + "Resource", + "Properties", + phase="SCHEMA", + message="'ProvisionedThroughput' is a required property (from extension)", + ) + self.assertTrue(comparison._is_intentional_divergence(diagnostic)) + + diagnostic["message"] = "'UnreviewedProperty' is a required property (from extension)" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + diagnostic["message"] = "'ProvisionedThroughput' is a required property (from extension)" + diagnostic["phase"] = "LINT" + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + + def test_f3002_condition_short_circuit_requires_same_resource_e1028(self): + diagnostic = _diag( + "F3002", + "Resource", + "Properties.Foo", + message="Additional properties are not allowed ('BadKey' was unexpected)", + ) + same_resource_evidence = [ + _diag( + "F0013", + "Resource", + "Properties.Foo.Fn::If", + cfnlint_rule_id="E1028", + ) + ] + other_resource_evidence = [ + _diag( + "F0013", + "OtherResource", + "Properties.Foo.Fn::If", + cfnlint_rule_id="E1028", + ) + ] + + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + self.assertFalse( + comparison._is_intentional_divergence( + diagnostic, other_resource_evidence + ) + ) + self.assertTrue( + comparison._is_intentional_divergence( + diagnostic, same_resource_evidence + ) + ) + + def test_e1028_short_circuit_requires_same_resource_reference_finding(self): + diagnostic = _diag("E1028", "Resource", "Properties.Foo") + same_resource_evidence = [ + _diag( + "E1028", + "Resource", + "Properties.Foo", + cfnlint_rule_id="E1028", + ) + ] + other_resource_evidence = [ + _diag( + "E1028", + "OtherResource", + "Properties.Foo", + cfnlint_rule_id="E1028", + ) + ] + + self.assertFalse(comparison._is_intentional_divergence(diagnostic)) + self.assertFalse( + comparison._is_intentional_divergence( + diagnostic, other_resource_evidence + ) + ) + self.assertTrue( + comparison._is_intentional_divergence( + diagnostic, same_resource_evidence + ) + ) + + def test_resource_shape_short_circuit_requires_same_resource_e3001(self): + same_resource_evidence = [ + _diag("E3001", "Resource", "", cfnlint_rule_id="E3001") + ] + other_resource_evidence = [ + _diag("E3001", "OtherResource", "", cfnlint_rule_id="E3001") + ] + + for rule_id in ("F0006", "E5001", "F6004"): + with self.subTest(rule_id=rule_id): + diagnostic = _diag(rule_id, "Resource", "") + self.assertFalse( + comparison._is_intentional_divergence(diagnostic) + ) + self.assertFalse( + comparison._is_intentional_divergence( + diagnostic, other_resource_evidence + ) + ) + self.assertTrue( + comparison._is_intentional_divergence( + diagnostic, same_resource_evidence + ) + ) + + def test_w3030_suppression_uses_e3030_reverse_equivalence(self): + comparison._ENGINE_TO_CFNLINT = {"W3030": {"E3030"}} + template = { + "Resources": { + "SuppressedBucket": { + "Metadata": { + "cfn-lint": { + "config": {"ignore_checks": ["E3030"]} + } + } + } + } + } + suppressions = comparison._extract_reference_suppressions(template) + + self.assertTrue( + comparison._is_reference_suppressed( + "W3030", "SuppressedBucket", suppressions + ) + ) + + def test_rule_with_reverse_equivalent_can_never_be_engine_extra(self): + comparison._ENGINE_TO_CFNLINT = {"W3030": {"E3030"}} + comparison.ENGINE_EXTRA_RULES = {"W3030"} + comparison._IS_ENGINE_EXTRA_DIAGNOSTIC = lambda diagnostic: True + + self.assertFalse( + comparison._is_engine_extra( + _diag("W3030", "Bucket", "Properties.AccessControl") + ) + ) + + def test_parse_error_is_not_blanket_engine_extra(self): + comparison._ENGINE_TO_CFNLINT = {} + comparison.ENGINE_EXTRA_RULES = set() + comparison._IS_ENGINE_EXTRA_DIAGNOSTIC = lambda diagnostic: False + + self.assertFalse(comparison._is_engine_extra(_diag("F0000", "", ""))) + + def test_reference_suppression_precedes_engine_extra(self): + diagnostic = {"rule_id": "F0001", "reference_suppressed": True} + comparison.ENGINE_EXTRA_RULES = {"F0001"} + + self.assertTrue( + comparison._is_reference_suppressed_for_comparison(diagnostic) + ) + + +class ReferenceIncorrectTests(unittest.TestCase): + """Tests for the RI (Reference Incorrect) category. + + Exactly eight known Fargate RI cases, excluded from FN and recall. + """ + + def test_e3047_fargate_good_template_is_ri(self): + """E3047 x3 in good/ecs_fargate_units_and_sizes.yaml are RI.""" + for resource_id in ("ThirtyTwoVcpuSixtyGb", "ThirtyTwoVcpuOneTwentyGb", "ThirtyTwoVcpuTwoFortyFourGb"): + with self.subTest(resource_id=resource_id): + d = _diag("E3047", resource_id, "Properties.Cpu") + self.assertTrue(comparison._is_reference_incorrect( + "good/ecs_fargate_units_and_sizes.yaml", d + )) + + def test_e3048_fargate_good_template_is_ri(self): + """E3048 x3 in good/ecs_fargate_units_and_sizes.yaml are RI.""" + for resource_id in ("ThirtyTwoVcpuSixtyGb", "ThirtyTwoVcpuOneTwentyGb", "ThirtyTwoVcpuTwoFortyFourGb"): + with self.subTest(resource_id=resource_id): + d = _diag("E3048", resource_id, "Properties.Memory") + self.assertTrue(comparison._is_reference_incorrect( + "good/ecs_fargate_units_and_sizes.yaml", d + )) + + def test_e3048_fargate_bad_template_specific_resources_are_ri(self): + """E3048 x2 in bad/resources/ecs/fargate_task_sizes_e3047.yaml are RI.""" + for resource_id in ("ThirtyTwoVcpuUnsupportedSixtyFourGb", "ThirtyTwoVcpuUnsupportedTwoFortyGb"): + with self.subTest(resource_id=resource_id): + d = _diag("E3048", resource_id, "Properties.Memory") + self.assertTrue(comparison._is_reference_incorrect( + "bad/resources/ecs/fargate_task_sizes_e3047.yaml", d + )) + + def test_total_ri_count_is_exactly_eight(self): + """Verify exactly 8 known RI cases exist.""" + count = 0 + for (path, rule_id), resources in comparison._REFERENCE_INCORRECT_RESOURCES.items(): + count += len(resources) + self.assertEqual(count, 8) + + def test_ri_excluded_from_fn(self): + """RI findings do not appear as FN in comparison results.""" + # An RI finding that is in cfn-lint but not engine should not be FN + d = _diag("E3047", "ThirtyTwoVcpuSixtyGb", "Properties.Cpu") + self.assertTrue(comparison._is_reference_incorrect( + "good/ecs_fargate_units_and_sizes.yaml", d + )) + + def test_non_ri_resource_for_same_rule_is_not_ri(self): + """A different resource for the same rule is not RI.""" + d = _diag("E3047", "OtherTask", "Properties.Cpu") + self.assertFalse(comparison._is_reference_incorrect( + "good/ecs_fargate_units_and_sizes.yaml", d + )) + + def test_non_ri_template_for_same_rule_is_not_ri(self): + """Same rule on a different template is not RI.""" + d = _diag("E3047", "ThirtyTwoVcpuSixtyGb", "Properties.Cpu") + self.assertFalse(comparison._is_reference_incorrect( + "bad/other_template.yaml", d + )) + + +class SeverityMismatchTests(unittest.TestCase): + """Tests that severity differences are surfaced explicitly.""" + + def test_severity_divergence_detected(self): + """Matched pair with different severity is detected.""" + exp = _diag("E3012", "Res", "Properties.Foo") + exp["severity"] = "Error" + act = _diag("E3012", "Res", "Properties.Foo") + act["severity"] = "Fatal" + + self.assertTrue(comparison._severity_diverges(exp, act)) + + def test_same_severity_not_flagged(self): + """Matched pair with same severity is not flagged.""" + exp = _diag("E3012", "Res", "Properties.Foo") + exp["severity"] = "Error" + act = _diag("E3012", "Res", "Properties.Foo") + act["severity"] = "Error" + + self.assertFalse(comparison._severity_diverges(exp, act)) + + def test_empty_severity_not_flagged(self): + """Missing severity on either side is not flagged.""" + exp = _diag("E3012", "Res", "Properties.Foo") + exp["severity"] = "" + act = _diag("E3012", "Res", "Properties.Foo") + act["severity"] = "Error" + + self.assertFalse(comparison._severity_diverges(exp, act)) + + +class FullSpanMatchingTests(unittest.TestCase): + """Tests for full span (line, column, end_line, end_column) comparison.""" + + def test_span_divergence_detects_column_difference(self): + """Column difference is detected in span comparison.""" + exp = {"line": 10, "column": 5, "end_line": 10, "end_column": 20} + act = {"line": 10, "column": 8, "end_line": 10, "end_column": 20} + + result = comparison._span_diverges(exp, act) + + self.assertIsNotNone(result) + self.assertIn("col 5→8", result) + + def test_span_divergence_detects_end_column_difference(self): + """end_column difference is detected.""" + exp = {"line": 10, "column": 5, "end_line": 10, "end_column": 20} + act = {"line": 10, "column": 5, "end_line": 10, "end_column": 25} + + result = comparison._span_diverges(exp, act) + + self.assertIsNotNone(result) + self.assertIn("end_col 20→25", result) + + def test_half_open_reference_endpoint_matches_inclusive_engine_endpoint(self): + exp = {"line": 10, "column": 5, "end_line": 10, "end_column": 20} + act = {"line": 10, "column": 5, "end_line": 10, "end_column": 19} + + self.assertIsNone(comparison._span_diverges(exp, act)) + + def test_endpoint_convention_is_removed_without_hiding_other_differences(self): + exp = {"line": 10, "column": 5, "end_line": 10, "end_column": 20} + act = {"line": 10, "column": 8, "end_line": 10, "end_column": 19} + + result = comparison._span_diverges(exp, act) + + self.assertEqual("col 5→8", result) + + def test_span_divergence_detects_line_difference(self): + """Line difference is detected.""" + exp = {"line": 10, "column": 5, "end_line": 12, "end_column": 20} + act = {"line": 11, "column": 5, "end_line": 12, "end_column": 20} + + result = comparison._span_diverges(exp, act) + + self.assertIsNotNone(result) + self.assertIn("line 10→11", result) + + def test_span_divergence_detects_end_line_difference(self): + """end_line difference is detected.""" + exp = {"line": 10, "column": 5, "end_line": 12, "end_column": 20} + act = {"line": 10, "column": 5, "end_line": 15, "end_column": 20} + + result = comparison._span_diverges(exp, act) + + self.assertIsNotNone(result) + self.assertIn("end_line 12→15", result) + + def test_identical_span_returns_none(self): + """Identical spans return None (no divergence).""" + exp = {"line": 10, "column": 5, "end_line": 12, "end_column": 20} + act = {"line": 10, "column": 5, "end_line": 12, "end_column": 20} + + result = comparison._span_diverges(exp, act) + + self.assertIsNone(result) + + def test_missing_coordinates_are_reported(self): + exp = {"line": 10, "column": 0, "end_line": 10, "end_column": 0} + act = {"line": 10, "column": 5, "end_line": 10, "end_column": 20} + + span_difference = comparison._span_diverges(exp, act) + + self.assertIn("col missing→5", span_difference) + self.assertIn("end_col missing→20", span_difference) + + def test_pathless_structural_findings_span_compared(self): + """Pathless (structural/top-level) findings have spans compared too.""" + exp = {"line": 1, "column": 1, "end_line": 1, "end_column": 10} + act = {"line": 1, "column": 1, "end_line": 2, "end_column": 5} + + result = comparison._span_diverges(exp, act) + + self.assertIsNotNone(result) + self.assertIn("end_line 1→2", result) + + +class SpanQualityClassificationTests(unittest.TestCase): + def test_endpoint_convention_is_representational(self): + reference = _diag( + "E3012", "Resource", "Properties.Foo", + line=10, column=5, end_line=10, end_column=20, + ) + engine = _diag( + "E3012", "Resource", "Properties.Foo", + line=10, column=5, end_line=10, end_column=19, + ) + + classification = comparison._classify_span_difference(reference, engine) + + self.assertEqual(comparison._REPRESENTATIONAL, classification.kind) + + def test_exact_invalid_operand_is_engine_preferred(self): + reference = _diag( + "I3042", "Key", "Properties.Description", + line=10, column=5, end_line=10, end_column=16, + ) + engine = _diag( + "I3042", "Key", "Properties.Description", + line=11, column=12, end_line=11, end_column=30, + ) + + classification = comparison._classify_span_difference(reference, engine) + + self.assertEqual(comparison._ENGINE_PREFERRED, classification.kind) + + def test_missing_required_child_is_non_comparable(self): + reference = _diag( + "F3003", "Resource", "Properties.Items.0", + message="'Name' is a required property", + line=10, column=5, end_line=12, end_column=3, + ) + engine = _diag( + "F3003", "Resource", "Properties.Items.0", + message="'Name' is a required property", + line=10, column=9, end_line=10, end_column=13, + ) + + classification = comparison._classify_span_difference(reference, engine) + + self.assertEqual(comparison._NON_COMPARABLE, classification.kind) + + def test_condition_source_ranges_are_non_comparable(self): + reference = _diag( + "E1152", "Resource", "Properties.Fn::If.1.ImageId", + line=12, column=9, end_line=12, end_column=16, + ) + engine = _diag( + "E1152", "Resource", "Properties.ImageId", + line=8, column=5, end_line=8, end_column=12, + ) + path_classification = comparison._classify_path_difference( + reference, engine + ) + + classification = comparison._classify_span_difference( + reference, engine, path_classification + ) + + self.assertEqual(comparison._NON_COMPARABLE, classification.kind) + + def test_unproven_source_difference_remains_unclassified(self): + reference = _diag( + "E3012", "Resource", "Properties.Foo", + line=10, column=5, end_line=10, end_column=20, + ) + engine = _diag( + "E3012", "Resource", "Properties.Foo", + line=11, column=8, end_line=11, end_column=25, + ) + + self.assertIsNone( + comparison._classify_span_difference(reference, engine) + ) + + def test_intrinsic_property_value_is_engine_preferred(self): + reference = _diag( + "E3022", "Association", "Properties.SubnetId", + line=10, column=9, end_line=10, end_column=17, + ) + engine = _diag( + "E3022", "Association", "Properties.SubnetId", + line=11, column=11, end_line=11, end_column=14, + ) + + classification = comparison._classify_span_difference(reference, engine) + + self.assertEqual(comparison._ENGINE_PREFERRED, classification.kind) + + def test_missing_lifecycle_counterpart_is_non_comparable(self): + reference = _diag( + "W3011", "Database", "", + line=10, column=3, end_line=10, end_column=11, + ) + engine = _diag( + "W3011", "Database", "", + line=11, column=5, end_line=11, end_column=13, + ) + + classification = comparison._classify_span_difference(reference, engine) + + self.assertEqual(comparison._NON_COMPARABLE, classification.kind) + + +class MatchQualityReportingTests(unittest.TestCase): + """Identity pairs remain matched when severity or spans differ.""" + + @staticmethod + def _comparison_counts(reference, engine): + matched, false_positives, false_negatives = comparison.compare_template( + [reference], [engine] + ) + mismatches = comparison._collect_match_mismatches(matched) + return ( + len(matched), + len(false_positives), + len(false_negatives), + len(mismatches), + ) + + def test_severity_mismatch_remains_matched_and_is_reported(self): + reference = _diag( + "E3012", "Resource", "Properties.Foo", severity="Error" + ) + engine = _diag( + "E3012", "Resource", "Properties.Foo", severity="Fatal" + ) + + self.assertEqual( + (1, 0, 0, 1), self._comparison_counts(reference, engine) + ) + + def test_span_mismatch_remains_matched_and_is_reported(self): + reference = _diag( + "E3012", + "Resource", + "Properties.Foo", + line=10, + column=5, + end_line=10, + end_column=20, + ) + engine = _diag( + "E3012", + "Resource", + "Properties.Foo", + line=10, + column=8, + end_line=10, + end_column=20, + ) + + self.assertEqual( + (1, 0, 0, 1), self._comparison_counts(reference, engine) + ) + + def test_classified_path_difference_remains_matched_and_is_reported(self): + reference = _diag("E3047", "Resource", "Properties") + engine = _diag("E3047", "Resource", "Properties.Cpu") + + self.assertEqual( + (1, 0, 0, 1), self._comparison_counts(reference, engine) + ) + classification = comparison._classify_path_difference(reference, engine) + self.assertEqual(comparison._ENGINE_PREFERRED, classification.kind) + + def test_explicit_transform_identity_path_mismatch_is_reported(self): + message = "Error transforming template: invalid generated resource" + reference = _diag("E0001", "", "", message=message) + engine = _diag( + "E0001", "Generated", "Properties.Source", message=message + ) + + self.assertEqual( + (1, 0, 0, 1), self._comparison_counts(reference, engine) + ) + + def test_exact_pair_remains_matched_without_mismatch(self): + reference = _diag( + "E3012", + "Resource", + "Properties.Foo", + line=10, + column=5, + end_line=10, + end_column=20, + ) + engine = dict(reference) + + self.assertEqual( + (1, 0, 0, 0), self._comparison_counts(reference, engine) + ) + + +class RootCauseEvidenceTests(unittest.TestCase): + """Unmatched causes are derived from diagnostics on the counterpart side.""" + + def setUp(self): + self.original_aliases = comparison._RULE_ALIASES + comparison._RULE_ALIASES = {} + + def tearDown(self): + comparison._RULE_ALIASES = self.original_aliases + + def test_missing_equivalent_rule_identifies_counterpart_side(self): + diagnostic = _diag("E3012", "Resource", "Properties.Foo") + unrelated = [_diag("W3005", "Resource", "DependsOn")] + + self.assertEqual( + "No equivalent reference rule emitted", + comparison._false_positive_root_cause(diagnostic, unrelated), + ) + self.assertEqual( + "No equivalent engine rule emitted", + comparison._false_negative_root_cause(diagnostic, unrelated), + ) + + def test_equivalent_rule_on_different_resource_is_identified(self): + diagnostic = _diag("E3012", "First", "Properties.Foo") + counterparts = [_diag("E3012", "Second", "Properties.Foo")] + + self.assertEqual( + "Equivalent rule emitted on a different resource/entity", + comparison._false_positive_root_cause(diagnostic, counterparts), + ) + + def test_equivalent_rule_and_resource_on_different_path_is_identified(self): + diagnostic = _diag("E3012", "Resource", "Properties.Foo") + counterparts = [_diag("E3012", "Resource", "Properties.Bar")] + + self.assertEqual( + "Equivalent rule/resource emitted on a different property path", + comparison._false_negative_root_cause(diagnostic, counterparts), + ) + + def test_same_identity_is_identified_as_multiplicity_difference(self): + diagnostic = _diag("E3012", "Resource", "Properties.Foo") + counterparts = [_diag("E3012", "Resource", "Properties.Foo")] + + self.assertEqual( + "Diagnostic count differs after exact identity pairing", + comparison._false_positive_root_cause(diagnostic, counterparts), + ) + + def test_multiplicity_is_partitioned_from_behavioral_mismatches(self): + duplicate = _diag("E3012", "Resource", "Properties.Foo") + behavioral, multiplicity = comparison._partition_multiplicity( + [duplicate], + [_diag("E3012", "Resource", "Properties.Foo")], + comparison._false_positive_root_cause, + ) + + self.assertEqual([], behavioral) + self.assertEqual([duplicate], multiplicity) + + def test_alias_equivalent_rule_uses_counterpart_identity_evidence(self): + comparison._RULE_ALIASES = {"F3012": {"E3012"}} + diagnostic = _diag("E3012", "Resource", "Properties.Foo") + counterparts = [_diag("F3012", "Resource", "Properties.Foo")] + + self.assertEqual( + "Diagnostic count differs after exact identity pairing", + comparison._false_negative_root_cause(diagnostic, counterparts), + ) + + +class ReferenceScopeTests(unittest.TestCase): + def test_internal_and_runtime_only_rules_are_renderable_but_unscored(self): + rule_ids = ("E0002", "E3043", "W4001", "W4005", "W6001") + diagnostics = [ + { + "Rule": {"Id": rule_id}, + "Level": "Error", + "Location": {}, + "Message": "not comparable", + } + for rule_id in rule_ids + ] + + normalized = comparison.normalize_cfnlint_diags(diagnostics) + + self.assertEqual(list(rule_ids), [d["rule_id"] for d in normalized]) + self.assertTrue(all(d["comparison_excluded_reason"] for d in normalized)) + + def test_comparable_rule_has_no_scope_exclusion(self): + normalized = comparison.normalize_cfnlint_diags([{ + "Rule": {"Id": "E3001"}, + "Level": "Error", + "Location": {}, + "Message": "comparable", + }]) + + self.assertEqual("", normalized[0]["comparison_excluded_reason"]) + + +class LoaderAndParsingFailureTests(unittest.TestCase): + """Tests that malformed JSON, non-list results, and parse failures raise.""" + + def test_malformed_json_in_cfnlint_result_raises(self): + """Non-parseable JSON in a cfn-lint result file raises ValueError.""" + with tempfile.TemporaryDirectory() as td: + f = Path(td) / "bad.json" + f.write_text("{not valid json") + results = {} + + with self.assertRaises(ValueError) as ctx: + comparison._load_cfnlint_result_file(f, "prefix", results) + self.assertIn("Malformed JSON", str(ctx.exception)) + + def test_non_list_cfnlint_result_raises(self): + """A cfn-lint result that is not a JSON list raises ValueError.""" + with tempfile.TemporaryDirectory() as td: + f = Path(td) / "obj.json" + f.write_text('{"not": "a list"}') + results = {} + + with self.assertRaises(ValueError) as ctx: + comparison._load_cfnlint_result_file(f, "prefix", results) + self.assertIn("does not contain a JSON list", str(ctx.exception)) + + def test_engine_json_decode_failure_raises(self): + """Engine report with invalid JSON raises ValueError.""" + with tempfile.TemporaryDirectory() as td: + reports_dir = Path(td) + bad_report = reports_dir / "template_yaml.json" + bad_report.write_text("{invalid") + + original_reports = comparison.ENGINE_REPORTS + comparison.ENGINE_REPORTS = reports_dir + try: + with self.assertRaises(ValueError) as ctx: + comparison.load_engine_results() + self.assertIn("Engine report JSON decode failure", str(ctx.exception)) + finally: + comparison.ENGINE_REPORTS = original_reports + + def test_engine_report_top_level_must_be_an_object(self): + with tempfile.TemporaryDirectory() as directory: + reports_dir = Path(directory) + (reports_dir / "template_yaml.json").write_text("[]") + original_reports = comparison.ENGINE_REPORTS + comparison.ENGINE_REPORTS = reports_dir + try: + with self.assertRaisesRegex(ValueError, "JSON object"): + comparison.load_engine_results() + finally: + comparison.ENGINE_REPORTS = original_reports + + def test_engine_report_diagnostics_must_be_present_as_a_list(self): + for payload in ({}, {"diagnostics": {}}): + with self.subTest(payload=payload), tempfile.TemporaryDirectory() as directory: + reports_dir = Path(directory) + (reports_dir / "template_yaml.json").write_text( + json.dumps(payload) + ) + original_reports = comparison.ENGINE_REPORTS + comparison.ENGINE_REPORTS = reports_dir + try: + with self.assertRaisesRegex(ValueError, "diagnostics.*JSON list"): + comparison.load_engine_results() + finally: + comparison.ENGINE_REPORTS = original_reports + + def test_engine_report_each_diagnostic_must_be_an_object(self): + with tempfile.TemporaryDirectory() as directory: + reports_dir = Path(directory) + (reports_dir / "template_yaml.json").write_text( + '{"filePath": "good/template.yaml", "diagnostics": ["bad"]}' + ) + original_reports = comparison.ENGINE_REPORTS + comparison.ENGINE_REPORTS = reports_dir + try: + with self.assertRaisesRegex(ValueError, "diagnostic 0.*JSON object"): + comparison.load_engine_results() + finally: + comparison.ENGINE_REPORTS = original_reports + + def test_engine_report_load_retains_validated_template_path(self): + with tempfile.TemporaryDirectory() as directory: + reports_dir = Path(directory) + (reports_dir / "template_yaml.json").write_text( + '{"filePath": "good/template.yaml", "diagnostics": []}' + ) + original_reports = comparison.ENGINE_REPORTS + comparison.ENGINE_REPORTS = reports_dir + try: + diagnostics, template_paths = comparison.load_engine_results() + finally: + comparison.ENGINE_REPORTS = original_reports + + self.assertEqual({"template_yaml": []}, diagnostics) + self.assertEqual( + {"template_yaml": "good/template.yaml"}, template_paths + ) + + def test_inline_result_parse_failure_raises(self): + """Malformed inline scenarios file raises ValueError.""" + with tempfile.TemporaryDirectory() as td: + test_dir = Path(td) / "test" / "integration" + test_dir.mkdir(parents=True) + py_file = test_dir / "test_good_templates.py" + # Write a file with a scenarios list that contains invalid Python syntax + py_file.write_text('scenarios = [{"filename": invalid_syntax]') + + original_root = comparison.CFN_LINT_ROOT + comparison.CFN_LINT_ROOT = Path(td) + try: + with self.assertRaises(ValueError) as ctx: + comparison.load_cfnlint_inline_results() + self.assertIn("Failed to parse inline cfn-lint scenarios", str(ctx.exception)) + finally: + comparison.CFN_LINT_ROOT = original_root + + def test_unterminated_inline_scenarios_raise(self): + """An opening scenarios list without a closing bracket is an error.""" + with tempfile.TemporaryDirectory() as td: + test_dir = Path(td) / "test" / "integration" + test_dir.mkdir(parents=True) + (test_dir / "test_good_templates.py").write_text( + 'scenarios = [{"filename": "test/fixtures/templates/good/a.yaml"}' + ) + + original_root = comparison.CFN_LINT_ROOT + comparison.CFN_LINT_ROOT = Path(td) + try: + with self.assertRaisesRegex(ValueError, "Unterminated inline"): + comparison.load_cfnlint_inline_results() + finally: + comparison.CFN_LINT_ROOT = original_root + + def test_inline_scenario_must_be_an_object(self): + with tempfile.TemporaryDirectory() as directory: + test_dir = Path(directory) / "test" / "integration" + test_dir.mkdir(parents=True) + (test_dir / "test_good_templates.py").write_text( + 'scenarios = ["not an object"]\n' + ) + + original_root = comparison.CFN_LINT_ROOT + comparison.CFN_LINT_ROOT = Path(directory) + try: + with self.assertRaisesRegex(ValueError, "scenario 0.*not an object"): + comparison.load_cfnlint_inline_results() + finally: + comparison.CFN_LINT_ROOT = original_root + + def test_inline_scenario_results_must_be_a_list(self): + """Inline scenario result payloads must be diagnostic lists.""" + with tempfile.TemporaryDirectory() as td: + test_dir = Path(td) / "test" / "integration" + test_dir.mkdir(parents=True) + (test_dir / "test_good_templates.py").write_text( + 'scenarios = [{"filename": "test/fixtures/templates/good/a.yaml", "results": {}}]\n' + ) + + original_root = comparison.CFN_LINT_ROOT + comparison.CFN_LINT_ROOT = Path(td) + try: + with self.assertRaisesRegex(ValueError, "results.*not a list"): + comparison.load_cfnlint_inline_results() + finally: + comparison.CFN_LINT_ROOT = original_root + + +class CanonicalPathTests(unittest.TestCase): + """Tests for canonical POSIX path derivation.""" + + def test_canonical_path_from_cfnlint_filename(self): + """Filename field is stripped to corpus-relative POSIX path.""" + result = comparison._canonical_template_path_from_filename( + "test/fixtures/templates/bad/resources/foo.yaml" + ) + self.assertEqual(result, "bad/resources/foo.yaml") + + def test_canonical_key_from_path(self): + """Canonical path produces correct flattened key.""" + self.assertEqual( + comparison._canonical_key_from_path("bad/resources/foo.yaml"), + "bad_resources_foo_yaml", + ) + self.assertEqual( + comparison._canonical_key_from_path("good/serverless.yml"), + "good_serverless_yml", + ) + self.assertEqual( + comparison._canonical_key_from_path("quickstart/cis.json"), + "quickstart_cis_json", + ) + + def test_canonical_path_without_prefix_returns_unchanged(self): + """Filename without the expected prefix is returned as-is.""" + result = comparison._canonical_template_path_from_filename("some/other/path.yaml") + self.assertEqual(result, "some/other/path.yaml") + + +class RunSingleSafetyTests(unittest.TestCase): + """Comparison runs fail closed and render deterministic tracked reports.""" + + def test_zero_comparable_templates_fails(self): + with ( + patch.object(comparison, "load_cfnlint_inline_results", return_value={}), + patch.object( + comparison, + "load_cfnlint_results_from_files", + return_value={"reference_only": []}, + ), + patch.object( + comparison, + "load_engine_results", + return_value=( + {"engine_only": []}, + {"engine_only": "good/engine-only.yaml"}, + ), + ), + ): + with self.assertRaisesRegex(RuntimeError, "no comparable templates"): + comparison.run_single() + + def test_out_of_scope_reference_findings_are_rendered_but_not_scored(self): + reference = comparison.normalize_cfnlint_diags([{ + "Rule": {"Id": "E0002", "ShortDescription": "internal failure"}, + "Level": "Error", + "Location": {}, + "Message": "reference rule failed", + }]) + with tempfile.TemporaryDirectory() as directory: + output = Path(directory) / "report.md" + original_output = comparison.OUTPUT_PATH + comparison.OUTPUT_PATH = output + try: + with ( + patch.object(comparison, "load_cfnlint_inline_results", return_value={}), + patch.object( + comparison, + "load_cfnlint_results_from_files", + return_value={"shared": reference}, + ), + patch.object( + comparison, + "load_engine_results", + return_value=( + {"shared": []}, + {"shared": "good/shared.yaml"}, + ), + ), + ): + comparison.run_single() + report = output.read_text() + finally: + comparison.OUTPUT_PATH = original_output + + self.assertIn( + "| Reference findings from checks outside comparison scope; excluded from scoring (OOS) | 1 |", + report, + ) + self.assertIn("## Reference Out of Scope - 1 findings excluded from recall", report) + self.assertIn("**E0002**", report) + self.assertIn("False Negatives - 0 missed findings", report) + + def test_summary_rows_define_their_population_or_calculation(self): + with tempfile.TemporaryDirectory() as directory: + output = Path(directory) / "report.md" + original_output = comparison.OUTPUT_PATH + comparison.OUTPUT_PATH = output + try: + with ( + patch.object(comparison, "load_cfnlint_inline_results", return_value={}), + patch.object( + comparison, + "load_cfnlint_results_from_files", + return_value={"shared": []}, + ), + patch.object( + comparison, + "load_engine_results", + return_value=( + {"shared": []}, + {"shared": "good/shared.yaml"}, + ), + ), + ): + comparison.run_single() + report = output.read_text() + finally: + comparison.OUTPUT_PATH = original_output + + self.assertIn( + "Counts are diagnostic occurrences unless the row explicitly says templates, rules, or a percentage.", + report, + ) + self.assertIn("| Population or calculation | Value |", report) + labels = ( + "Findings paired as the same occurrence (TP)", + "Unmatched comparable findings emitted only by the engine (FP)", + "Correct unmatched engine findings for rules with a reference equivalent (ID)", + "Correct engine findings for rules with no reference equivalent (EE)", + "Engine findings disabled by template reference configuration; excluded from scoring (RS)", + "Reference findings from checks outside comparison scope; excluded from scoring (OOS)", + "Demonstrably incorrect reference findings; excluded from recall (RI)", + "Unpaired duplicate occurrences of an otherwise matched identity; excluded from FP/FN (Multiplicity)", + "Unmatched comparable findings emitted only by the reference (FN)", + "Precision: TP / (TP + FP)", + "Recall: TP / (TP + FN)", + "F1: harmonic mean of precision and recall", + "Canonical rule IDs represented in TP/FP/ID/EE/FN/RI populations", + "Templates with no FP, FN, multiplicity, or matched path/span/severity difference", + "Matched occurrences with notation-only path differences (representational)", + "Matched occurrences where the engine path is more precise or correct", + "Matched occurrences with no unique shared path anchor", + "Matched occurrences with endpoint-notation-only span differences (representational)", + "Matched occurrences where the engine source span is more precise or correct", + "Matched occurrences with no uniquely comparable source span", + "Paired occurrences with an unclassified path difference (unresolved)", + "Paired occurrences with an unclassified start-line difference (unresolved)", + "Paired occurrences with an unclassified full-span difference (unresolved)", + "Matched occurrences with different severities", + ) + for label in labels: + with self.subTest(label=label): + self.assertIn(f"| {label} |", report) + self.assertNotIn("| Metric | Value |", report) + self.assertNotIn("| Perfect templates |", report) + self.assertNotIn("| Unique rules detected |", report) + + def test_identical_inputs_produce_byte_identical_report(self): + with tempfile.TemporaryDirectory() as directory: + output = Path(directory) / "report.md" + original_output = comparison.OUTPUT_PATH + comparison.OUTPUT_PATH = output + try: + with ( + patch.object(comparison, "load_cfnlint_inline_results", return_value={}), + patch.object( + comparison, + "load_cfnlint_results_from_files", + return_value={"shared": []}, + ), + patch.object( + comparison, + "load_engine_results", + return_value=( + {"shared": []}, + {"shared": "good/shared.yaml"}, + ), + ), + ): + comparison.run_single() + first = output.read_bytes() + comparison.run_single() + second = output.read_bytes() + finally: + comparison.OUTPUT_PATH = original_output + + self.assertEqual(first, second) + self.assertNotIn(b"Generated:", first) + + +def _diag(rule_id, resource_id, resource_path, **kwargs): + """Helper to construct a minimal diagnostic dict for tests.""" + d = { + "rule_id": rule_id, + "resource_id": resource_id, + "resource_path": resource_path, + "json_path": "", + "message": kwargs.get("message", "test message"), + "severity": kwargs.get("severity", "Error"), + "line": kwargs.get("line", 0), + "column": kwargs.get("column", 0), + "end_line": kwargs.get("end_line", 0), + "end_column": kwargs.get("end_column", 0), + } + d.update(kwargs) + return d + + +if __name__ == "__main__": + unittest.main() diff --git a/src/cel-engine/src/rules/intrinsics.rs b/src/cel-engine/src/rules/intrinsics.rs index 1541c3dd..812d463e 100644 --- a/src/cel-engine/src/rules/intrinsics.rs +++ b/src/cel-engine/src/rules/intrinsics.rs @@ -14,6 +14,32 @@ use template_model::resolver::RefKind; use template_model::{PSEUDO_PARAMETERS, SemanticModel, is_custom_resource_type, is_known_region}; use validation_engine::make_resource_diagnostic; +/// Build a diagnostic property path pointing at the GetAtt resource-name element +/// (index 0). Appends `.Fn::GetAtt.0` unless sourcePath already ends with +/// `Fn::GetAtt`, in which case `.0` is sufficient. +fn getatt_target_path(source_path: &str) -> String { + if source_path.is_empty() { + "Fn::GetAtt.0".to_string() + } else if source_path.ends_with("Fn::GetAtt") { + format!("{}.0", source_path) + } else { + format!("{}.Fn::GetAtt.0", source_path) + } +} + +/// Build a diagnostic property path pointing at the GetAtt attribute element +/// (index 1). Appends `.Fn::GetAtt.1` unless sourcePath already ends with +/// `Fn::GetAtt`, in which case `.1` is sufficient. +fn getatt_attr_path(source_path: &str) -> String { + if source_path.is_empty() { + "Fn::GetAtt.1".to_string() + } else if source_path.ends_with("Fn::GetAtt") { + format!("{}.1", source_path) + } else { + format!("{}.Fn::GetAtt.1", source_path) + } +} + pub fn register(reg: &mut NativeRuleRegistry) { reg.add(Category::Intrinsic, eval_intrinsics); reg.add(Category::Intrinsic, eval_intrinsic_params); @@ -88,7 +114,7 @@ fn eval_intrinsics(ctx: &EvalContext) -> Vec { &format!("Fn::GetAtt references non-existent resource '{}'", target), m, name, - "", + &getatt_target_path(source_path), Some("Check that the GetAtt target resource exists in the template"), )); } else if !attr.is_empty() @@ -109,7 +135,7 @@ fn eval_intrinsics(ctx: &EvalContext) -> Vec { &format!("'{}' is not one of {}", attr, render_str_list(valid_list)), m, name, - source_path, + &getatt_attr_path(source_path), Some("Check the resource type documentation for valid GetAtt attributes"), )); } @@ -162,17 +188,17 @@ fn eval_intrinsics(ctx: &EvalContext) -> Vec { } } - if let Some(refs) = res.get("findInMapRefs").and_then(|r| r.as_array()) { - for map_ref in refs { - if let Some(map_name) = map_ref.as_str() - && !m.mappings.contains_key(map_name) - { + if let Some(refs) = res.get("findInMapRefPaths").and_then(|r| r.as_array()) { + for entry in refs { + let map_name = entry.get("target").and_then(|target| target.as_str()).unwrap_or(""); + let path = entry.get("path").and_then(|path| path.as_str()).unwrap_or(""); + if !map_name.is_empty() && !m.mappings.contains_key(map_name) { out.push(make_resource_diagnostic( "F1012", &format!("Fn::FindInMap references non-existent mapping '{}'", map_name), m, name, - "", + path, None, )); } diff --git a/src/cel-engine/src/rules/references.rs b/src/cel-engine/src/rules/references.rs index 945ea37d..128d82d0 100644 --- a/src/cel-engine/src/rules/references.rs +++ b/src/cel-engine/src/rules/references.rs @@ -1,6 +1,7 @@ use super::{EvalContext, NativeRuleRegistry}; use diagnostics::Diagnostic; use rules::Category; +use template_model::SemanticModel; use template_model::consts::{ EDGE_KIND_GET_ATT, EDGE_KIND_REF, EDGE_KIND_SUB, FIELD_CONDITION_CONTEXT, FIELD_KIND, FIELD_OUTGOING_REFS, FIELD_RESOURCES, FIELD_SOURCE_PATH, FIELD_TARGET, KEY_DEPENDS_ON, OUTPUT_PSEUDO_RESOURCE_PREFIX, @@ -21,13 +22,27 @@ fn path_inside_fn_if_branch(path: &str) -> bool { segments.windows(2).any(|w| w[0] == "Fn::If" && (w[1] == "1" || w[1] == "2")) } +fn depends_on_path(model: &SemanticModel, resource_id: &str, dependency_index: usize) -> String { + let indexed_path = format!("{}.{}", KEY_DEPENDS_ON, dependency_index); + if model + .graph + .outgoing(resource_id) + .iter() + .any(|edge| matches!(&edge.kind, RefKind::DependsOn) && edge.source_path == indexed_path) + { + indexed_path + } else { + KEY_DEPENDS_ON.to_string() + } +} + fn eval_references(ctx: &EvalContext) -> Vec { let mut out = Vec::new(); let m = ctx.model; let input = ctx.input; for (name, res) in &m.resources { - for dep in &res.depends_on { + for (dependency_index, dep) in res.depends_on.iter().enumerate() { if !m.resources.contains_key(dep.as_str()) && !m.sam_implicit_resources.contains(dep.as_str()) { // A dynamic reference cannot name a resource: DependsOn takes // literal logical IDs only, so say that rather than implying a @@ -37,13 +52,14 @@ fn eval_references(ctx: &EvalContext) -> Vec { } else { format!("DependsOn target '{}' does not exist as a resource", dep) }; - out.push(make_resource_diagnostic("E3005", &message, m, name, "", None)); + let property_path = depends_on_path(m, name, dependency_index); + out.push(make_resource_diagnostic("E3005", &message, m, name, &property_path, None)); } } } for (name, res) in &m.resources { - for dep in &res.depends_on { + for (dependency_index, dep) in res.depends_on.iter().enumerate() { if let Some(dep_res) = m.resources.get(dep.as_str()) && let Some(ref dep_cond) = dep_res.condition { @@ -56,12 +72,13 @@ fn eval_references(ctx: &EvalContext) -> Vec { None => false, // unconditional resource depends on conditional }; if !implies { + let property_path = depends_on_path(m, name, dependency_index); out.push(make_resource_diagnostic( "E3005", &format!("'{}' will not exist when condition '{}' is False", dep, dep_cond), m, name, - KEY_DEPENDS_ON, + &property_path, Some(&format!("Add a Condition to '{}' that implies '{}'", name, dep_cond)), )); } @@ -71,7 +88,7 @@ fn eval_references(ctx: &EvalContext) -> Vec { } for (name, res) in &m.resources { - for dep in &res.depends_on { + for (dep_idx, dep) in res.depends_on.iter().enumerate() { for edge in m.graph.outgoing(name) { if edge.target == *dep { let kind_str = match &edge.kind { @@ -80,12 +97,13 @@ fn eval_references(ctx: &EvalContext) -> Vec { RefKind::Sub { var: _ } => EDGE_KIND_SUB, _ => continue, }; + let anchor = depends_on_path(m, name, dep_idx); out.push(make_resource_diagnostic( "W3005", &format!("'{}' dependency already enforced by a '{}' at '{}'", dep, kind_str, edge.source_path), m, name, - KEY_DEPENDS_ON, + &anchor, Some("Remove the DependsOn entry"), )); } diff --git a/src/cel-engine/src/rules/resources.rs b/src/cel-engine/src/rules/resources.rs index f8ab8fa4..bf53afa8 100644 --- a/src/cel-engine/src/rules/resources.rs +++ b/src/cel-engine/src/rules/resources.rs @@ -201,22 +201,6 @@ fn eval_resources(ctx: &EvalContext) -> Vec { } } - for name in m.resources_of_type("AWS::SQS::Queue") { - if let Some(serde_json::Value::Bool(true)) = resolve_concrete(m, name, "Properties.FifoQueue") - && let Some(serde_json::Value::String(qname)) = resolve_concrete(m, name, "Properties.QueueName") - && !qname.ends_with(".fifo") - { - out.push(make_resource_diagnostic( - "E2504", - &format!("FIFO queue name '{}' must end with '.fifo'", qname), - m, - name, - "Properties.QueueName", - None, - )); - } - } - out } diff --git a/src/cel-engine/src/rules/resources_extra.rs b/src/cel-engine/src/rules/resources_extra.rs index c24d7003..70123fca 100644 --- a/src/cel-engine/src/rules/resources_extra.rs +++ b/src/cel-engine/src/rules/resources_extra.rs @@ -581,7 +581,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { &format!("Unknown resource type '{}'", res.resource_type), m, name, - "", + "Type", None, )); } @@ -1022,9 +1022,8 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { if let Some(serde_json::Value::Array(stages)) = resolve_concrete(m, name, "Properties.Stages") && let Some(first) = stages.first() { - let has_source = first - .get("Actions") - .and_then(|a| a.as_array()) + let actions = first.get("Actions").and_then(|a| a.as_array()); + let has_source = actions .map(|actions| { actions.iter().any(|a| { a.get("ActionTypeId").and_then(|at| at.get("Category")).and_then(|c| c.as_str()) @@ -1033,12 +1032,29 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { }) .unwrap_or(false); if !has_source { + // When exactly one action exists and has a non-Source Category, + // anchor to its Category property for precise attribution. + // With multiple actions, no single action is uniquely at fault, + // so the stage object is the most defensible anchor. + let prop_path = match actions { + Some(acts) + if acts.len() == 1 + && acts[0] + .get("ActionTypeId") + .and_then(|at| at.get("Category")) + .and_then(|c| c.as_str()) + .is_some() => + { + "Properties.Stages.0.Actions.0.ActionTypeId.Category" + } + _ => "Properties.Stages[0]", + }; out.push(make_resource_diagnostic( "E3700", "First stage of a pipeline must contain at least one Source action", m, name, - "Properties.Stages[0]", + prop_path, Some("Add an action with ActionTypeId.Category=Source to the first stage"), )); } @@ -1057,17 +1073,18 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { &format!("Runtime '{}' is not supported with Code.ZipFile - use nodejs or python", rt), m, name, - "", + "Properties.Runtime", None, )); } } for name in m.resources_of_type("AWS::SQS::Queue") { - if let Some(serde_json::Value::Bool(true)) = resolve_concrete(m, name, "Properties.FifoQueue") - && let Some(serde_json::Value::String(qname)) = resolve_concrete(m, name, "Properties.QueueName") - && !qname.ends_with(".fifo") - { + let fifo = resolve_concrete(m, name, "Properties.FifoQueue"); + let Some(serde_json::Value::String(qname)) = resolve_concrete(m, name, "Properties.QueueName") else { + continue; + }; + if fifo == Some(serde_json::Value::Bool(true)) && !qname.ends_with(".fifo") { out.push(make_resource_diagnostic( "E3501", &format!("FIFO queue name '{}' must end with '.fifo'", qname), @@ -1076,6 +1093,15 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { "Properties.QueueName", Some("Append .fifo to the queue name"), )); + } else if fifo != Some(serde_json::Value::Bool(true)) && qname.ends_with(".fifo") { + out.push(make_resource_diagnostic( + "E3501", + &format!("Non-FIFO queue name '{}' must not end with '.fifo'", qname), + m, + name, + "Properties.QueueName", + Some("Remove .fifo suffix or set FifoQueue to true"), + )); } } @@ -1491,7 +1517,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { "NetworkConfiguration required when TaskDefinition NetworkMode is 'awsvpc'", m, name, - "", + "Properties", None, )); } @@ -1548,19 +1574,21 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { for (si, stage) in stages.iter().enumerate() { let stage_name = stage.get("Name").and_then(|n| n.as_str()).unwrap_or("unknown"); if let Some(actions) = stage.get("Actions").and_then(|a| a.as_array()) { - for action in actions { + for (ai, action) in actions.iter().enumerate() { let aname = action.get("Name").and_then(|n| n.as_str()).unwrap_or("unknown"); if let Some(outs) = action.get("OutputArtifacts").and_then(|o| o.as_array()) { - for o in outs { + for (oi, o) in outs.iter().enumerate() { if let Some(n) = o.get("Name").and_then(|n| n.as_str()) && !seen_outputs.insert(n.to_string()) { + let path = + format!("Properties.Stages.{}.Actions.{}.OutputArtifacts.{}.Name", si, ai, oi); out.push(make_resource_diagnostic( "E3701", &format!("Duplicate OutputArtifact name '{}'", n), m, name, - "", + &path, None, )); } @@ -1569,11 +1597,13 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { if si > 0 && let Some(ins) = action.get("InputArtifacts").and_then(|i| i.as_array()) { - for i in ins { + for (ii, i) in ins.iter().enumerate() { if let Some(n) = i.get("Name").and_then(|n| n.as_str()) && !seen_outputs.contains(n) { - out.push(make_resource_diagnostic("E3701", &format!("InputArtifact '{}' in stage '{}' action '{}' does not reference a previously defined OutputArtifact", n, stage_name, aname), m, name, "", None)); + let path = + format!("Properties.Stages.{}.Actions.{}.InputArtifacts.{}.Name", si, ai, ii); + out.push(make_resource_diagnostic("E3701", &format!("InputArtifact '{}' in stage '{}' action '{}' does not reference a previously defined OutputArtifact", n, stage_name, aname), m, name, &path, None)); } } } @@ -1589,9 +1619,9 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { let stages_json = m.resolve_deep(name, "Properties.Stages").map(|rv| resolved_to_json_preserving_conditionals(&rv)); if let Some(serde_json::Value::Array(stages)) = stages_json { - for stage in &stages { + for (si, stage) in stages.iter().enumerate() { if let Some(actions) = stage.get("Actions").and_then(|a| a.as_array()) { - for action in actions { + for (ai, action) in actions.iter().enumerate() { let action_type_id = action.get("ActionTypeId"); let owner = action_type_id.and_then(|a| a.get("Owner")).and_then(|c| c.as_str()); let category = action_type_id.and_then(|a| a.get("Category")).and_then(|c| c.as_str()); @@ -1606,6 +1636,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { }; let aname = action.get("Name").and_then(|n| n.as_str()).unwrap_or("unknown"); let key = format!("{owner}/{category}/{provider}"); + let action_path = format!("Properties.Stages.{}.Actions.{}", si, ai); if let Some(counts) = ctx.cached_data.codepipeline_artifact_counts.get(&key) { // An artifact list may be authored directly or wrapped // in an Fn::If; enumerate every branch's count (walk each @@ -1621,7 +1652,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { ), m, name, - "", + &action_path, None, )); } @@ -1634,7 +1665,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { ), m, name, - "", + &action_path, None, )); } @@ -1649,7 +1680,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { ), m, name, - "", + &action_path, None, )); } @@ -1662,7 +1693,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { ), m, name, - "", + &action_path, None, )); } @@ -1809,7 +1840,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { "SnapStart is enabled but no AWS::Lambda::Version resource is attached", m, name, - "Properties.SnapStart", + "Properties.SnapStart.ApplyOn", Some("Add an AWS::Lambda::Version resource that references this function"), )); } @@ -2778,7 +2809,7 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { &format!("Environment variable '{}' is a Lambda reserved key", key), m, name, - "Properties.Environment.Variables", + &format!("Properties.Environment.Variables.{}", key), None, )); } @@ -3061,54 +3092,63 @@ pub fn eval_extra_resources(ctx: &EvalContext) -> Vec { } } - let wildcard_enum_checks: &[(&str, &str, &str, &str, &str)] = &[ + let indexed_enum_checks: &[(&str, &str, &str, &str, &str)] = &[ ( "E3642", "AWS::SageMaker::InferenceExperiment", - "Properties.ModelVariants.{}.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", - "Properties.ModelVariants.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", + "Properties.ModelVariants", + "InfrastructureConfig.RealTimeInferenceConfig.InstanceType", "data/aws_sagemaker_hosting_instancetype_enum", ), ( "E3643", "AWS::SageMaker::ModelPackage", - "Properties.ValidationSpecification.ValidationProfiles.{}.TransformJobDefinition.TransformResources.InstanceType", - "Properties.ValidationSpecification.ValidationProfiles.TransformJobDefinition.TransformResources.InstanceType", + "Properties.ValidationSpecification.ValidationProfiles", + "TransformJobDefinition.TransformResources.InstanceType", "data/aws_sagemaker_transform_instancetype_enum", ), ( "E3644", "AWS::SageMaker::Cluster", - "Properties.InstanceGroups.{}.InstanceType", - "Properties.InstanceGroups.InstanceType", + "Properties.InstanceGroups", + "InstanceType", "data/aws_sagemaker_cluster_instancetype_enum", ), ( "E3644", "AWS::SageMaker::Cluster", - "Properties.RestrictedInstanceGroups.{}.InstanceType", - "Properties.RestrictedInstanceGroups.InstanceType", + "Properties.RestrictedInstanceGroups", + "InstanceType", "data/aws_sagemaker_cluster_instancetype_enum", ), ]; - for &(rule_id, rtype, wildcard_path, report_path, enum_key) in wildcard_enum_checks { + for &(rule_id, rtype, list_path, item_path, enum_key) in indexed_enum_checks { let Some(allowed) = region_flat_allowed(&ctx.cached_data.enum_data, enum_key, region) else { continue; }; for name in m.resources_of_type(rtype) { let mut reported = HashSet::new(); - for val in resolve_concrete_strings(m, name, wildcard_path) { - if allowed.contains(val.as_str()) || !reported.insert(val.clone()) { - continue; + for list_value in resolve_all_json(m, name, list_path) { + let Some(items) = list_value.as_array() else { continue }; + for (index, item) in items.iter().enumerate() { + let Some(value) = item_path.split('.').try_fold(item, |current, segment| current.get(segment)) + else { + continue; + }; + let Some(val) = value.as_str() else { continue }; + let report_path = format!("{}.{}.{}", list_path, index, item_path); + if allowed.contains(val) || !reported.insert((report_path.clone(), val.to_string())) { + continue; + } + out.push(make_resource_diagnostic( + rule_id, + ®ion_enums::flat_invalid_message(val, region), + m, + name, + &report_path, + None, + )); } - out.push(make_resource_diagnostic( - rule_id, - ®ion_enums::flat_invalid_message(&val, region), - m, - name, - report_path, - None, - )); } } } @@ -4111,40 +4151,6 @@ fn resolve_enum_string(m: &SemanticModel, rid: &str, path: &str) -> Option Vec { - let Some(resolved) = m.resolve_deep(rid, path).or_else(|| m.resolve(rid, path).cloned()) else { - return Vec::new(); - }; - let mut out = Vec::new(); - collect_concrete_strings(&resolved, &mut out); - out -} - -fn collect_concrete_strings(value: &ResolvedValue, out: &mut Vec) { - match value { - ResolvedValue::Concrete { value: v } => { - if let Some(s) = v.0.as_str() { - out.push(s.to_string()); - } - } - ResolvedValue::Enum { variants } => { - for variant in variants { - collect_concrete_strings(variant, out); - } - } - ResolvedValue::List { items } => { - for item in items { - collect_concrete_strings(item, out); - } - } - ResolvedValue::Conditional { if_true, if_false, .. } => { - collect_concrete_strings(if_true, out); - collect_concrete_strings(if_false, out); - } - _ => {} - } -} - /// Renders `{'Prop1': 'val1', 'Prop2': 'val2'}` in Python `repr` style for duplicate-identifier messages. fn render_primary_id_dict(props: &[String], values: &[String]) -> String { let pairs: Vec = props.iter().zip(values.iter()).map(|(p, v)| format!("'{}': '{}'", p, v)).collect(); diff --git a/src/cel-engine/src/rules/structure.rs b/src/cel-engine/src/rules/structure.rs index 1c299861..d8650b78 100644 --- a/src/cel-engine/src/rules/structure.rs +++ b/src/cel-engine/src/rules/structure.rs @@ -504,7 +504,7 @@ fn eval_structure(ctx: &EvalContext) -> Vec { &format!("Resource type '{}' requires the AWS::Serverless-2016-10-31 transform", res.resource_type), m, name, - "", + "Type", None, )); } diff --git a/src/cel-engine/tests/conformance.rs b/src/cel-engine/tests/conformance.rs index 26d55b7c..e1e93d95 100644 --- a/src/cel-engine/tests/conformance.rs +++ b/src/cel-engine/tests/conformance.rs @@ -520,7 +520,7 @@ mod rule_category_tests { #[test] fn resources_sqs_fifo_no_suffix() { let ids = validate_file("bad/sqs_fifo_no_suffix.yaml"); - assert!(has_rule(&ids, "E3501") || has_rule(&ids, "E2504"), "Expected SQS FIFO error, got: {:?}", ids); + assert!(has_rule(&ids, "E3501"), "Expected SQS FIFO error, got: {:?}", ids); } #[test] diff --git a/src/cfn-validate/src/benchmark.rs b/src/cfn-validate/src/benchmark.rs index e8964d28..e7c91f96 100644 --- a/src/cfn-validate/src/benchmark.rs +++ b/src/cfn-validate/src/benchmark.rs @@ -22,6 +22,16 @@ fn replace_extension_suffix(s: &str, suffix: &str, replacement: &str) -> String } } +fn reset_benchmark_performance(report: &mut ValidationReport) { + report.performance.schema_init.duration_ms = 0.0; + report.performance.engine_init.duration_ms = 0.0; + report.performance.model_build.duration_ms = 0.0; + report.performance.schema_validate.duration_ms = 0.0; + report.performance.rule_evaluation.duration_ms = 0.0; + report.performance.diagnostic_finalize.duration_ms = 0.0; + report.performance.validate_total.duration_ms = 0.0; +} + fn main() { env_logger::Builder::from_env(env_logger::Env::default().default_filter_or("warn")).init(); if let Err(e) = run() { @@ -240,19 +250,10 @@ fn run() -> Result<(), String> { .map_err(|report_error| { format!("failed to create parse-failure report for '{relative_path}': {report_error}") })?; - report.diagnostics.clear(); - report.metadata.counts.fatal = 0; - report.metadata.counts.errors = 0; - report.metadata.counts.warnings = 0; - report.metadata.counts.informational = 0; - report.metadata.counts.debug = 0; - report.performance.schema_init.duration_ms = 0.0; - report.performance.engine_init.duration_ms = 0.0; - report.performance.model_build.duration_ms = 0.0; - report.performance.schema_validate.duration_ms = 0.0; - report.performance.rule_evaluation.duration_ms = 0.0; - report.performance.diagnostic_finalize.duration_ms = 0.0; - report.performance.validate_total.duration_ms = 0.0; + // Retain parse diagnostics so the benchmark report matches + // command-line validation. Only zero the performance timings + // because no iterated measurement was performed. + reset_benchmark_performance(&mut report); let benchmark_metrics = serde_json::json!({ "iterations": 0, "firstIteration": { @@ -923,3 +924,38 @@ fn run_fingerprint(corpus_fp: &str, engine: &str, format: &str, iterations: usiz h.update(format!("{}|{}|{}|{}", corpus_fp, engine, format, iterations).as_bytes()); to_hex(h.finalize()) } + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn performance_reset_preserves_parse_findings() { + let schema_validator = SchemaValidator::default(); + let engine = RegoEngine::new(EngineConfig::default()).unwrap(); + let mut report = validate_bytes_with_path( + &engine, + &schema_validator, + b"totally not yaml { or json [", + ValidateConfig::default(), + "bad.yaml".to_string(), + ) + .unwrap(); + let diagnostic_count = report.diagnostics.len(); + let fatal_count = report.metadata.counts.fatal; + assert!(diagnostic_count > 0); + assert!(fatal_count > 0); + + reset_benchmark_performance(&mut report); + + assert_eq!(report.diagnostics.len(), diagnostic_count); + assert_eq!(report.metadata.counts.fatal, fatal_count); + assert_eq!(report.performance.schema_init.duration_ms, 0.0); + assert_eq!(report.performance.engine_init.duration_ms, 0.0); + assert_eq!(report.performance.model_build.duration_ms, 0.0); + assert_eq!(report.performance.schema_validate.duration_ms, 0.0); + assert_eq!(report.performance.rule_evaluation.duration_ms, 0.0); + assert_eq!(report.performance.diagnostic_finalize.duration_ms, 0.0); + assert_eq!(report.performance.validate_total.duration_ms, 0.0); + } +} diff --git a/src/cfn-validate/tests/cross_engine.rs b/src/cfn-validate/tests/cross_engine.rs index 35ec90cf..4ec9eb1e 100644 --- a/src/cfn-validate/tests/cross_engine.rs +++ b/src/cfn-validate/tests/cross_engine.rs @@ -659,3 +659,254 @@ fn walk_recursive(dir: &std::path::Path, out: &mut Vec) { } } } + +#[test] +fn standard_queue_names_respect_the_fifo_suffix_boundary() { + let invalid = "bad/resources/sqs/standard_queue_fifo_suffix.yaml"; + let valid = "good/resources/sqs/standard_queue_name.yaml"; + let findings = |engine: &dyn ValidationEngine, template: &str| { + validate_template(engine, template) + .into_iter() + .filter(|diagnostic| diagnostic.rule_id == "E3501") + .collect::>() + }; + + let rego_invalid = findings(&*REGO, invalid); + let cel_invalid = findings(&*CEL, invalid); + assert_eq!(rego_invalid.len(), 1); + assert_eq!(rego_invalid[0].property_path.as_deref(), Some("Properties.QueueName")); + assert_eq!(serde_json::to_value(®o_invalid).unwrap(), serde_json::to_value(&cel_invalid).unwrap()); + + assert!(findings(&*REGO, valid).is_empty()); + assert!(findings(&*CEL, valid).is_empty()); +} + +#[test] +fn obsolete_dependencies_anchor_each_array_entry() { + let template = br#" +Resources: + FirstTopic: + Type: AWS::SNS::Topic + SecondTopic: + Type: AWS::SNS::Topic + ConsumerTopic: + Type: AWS::SNS::Topic + DependsOn: + - FirstTopic + - SecondTopic + Properties: + DisplayName: !Sub "${FirstTopic}-${SecondTopic}" +"#; + let schema_validator = SchemaValidator::default(); + let findings = |engine: &dyn ValidationEngine| { + let report = validate_bytes(engine, &schema_validator, template, ValidateConfig::default()).unwrap(); + let mut diagnostics: Vec = + report.diagnostics.into_iter().filter(|diagnostic| diagnostic.rule_id == "W3005").collect(); + diagnostics.sort_by(|left, right| left.property_path.cmp(&right.property_path)); + diagnostics + }; + + let rego = findings(&*REGO); + let cel = findings(&*CEL); + assert_eq!( + rego.iter().filter_map(|diagnostic| diagnostic.property_path.as_deref()).collect::>(), + ["DependsOn.0", "DependsOn.1"] + ); + assert_eq!(serde_json::to_value(®o).unwrap(), serde_json::to_value(&cel).unwrap()); +} + +#[test] +fn nested_metadata_intrinsics_use_authored_source_locations() { + let template = br#"Resources: + R: + Type: AWS::EC2::Instance + Metadata: + AWS::CloudFormation::Init: + config: + files: + /etc/cfn/cfn-hup.conf: + content: !Sub constant + /etc/cfn/cfn-auto-reloader.conf: + content: !Join ["", ["a", "b"]] +"#; + let schema_validator = SchemaValidator::default(); + let findings = |engine: &dyn ValidationEngine| { + let report = validate_bytes(engine, &schema_validator, template, ValidateConfig::default()).unwrap(); + let mut diagnostics: Vec = report + .diagnostics + .into_iter() + .filter(|diagnostic| matches!(diagnostic.rule_id.as_str(), "W1020" | "I1022")) + .collect(); + diagnostics.sort_by(|left, right| left.rule_id.cmp(&right.rule_id)); + diagnostics + }; + + let rego = findings(&*REGO); + let cel = findings(&*CEL); + assert_eq!(serde_json::to_value(®o).unwrap(), serde_json::to_value(&cel).unwrap()); + assert_eq!(rego.len(), 2, "expected one finding for each redundant intrinsic: {rego:?}"); + assert_eq!(rego[0].rule_id, "I1022"); + assert_eq!(rego[0].location.as_ref().map(|location| location.start_line), Some(11)); + assert_eq!(rego[1].rule_id, "W1020"); + assert_eq!(rego[1].location.as_ref().map(|location| location.start_line), Some(9)); +} + +#[test] +fn dependency_diagnostics_preserve_authored_scalar_and_array_paths() { + let template = br#"Resources: + Existing: + Type: AWS::SNS::Topic + MissingArray: + Type: AWS::SNS::Topic + DependsOn: + - NotPresentArray + MissingScalar: + Type: AWS::SNS::Topic + DependsOn: NotPresentScalar + RedundantArray: + Type: AWS::SNS::Topic + DependsOn: + - Existing + Properties: + DisplayName: !Ref Existing + RedundantScalar: + Type: AWS::SNS::Topic + DependsOn: Existing + Properties: + DisplayName: !Ref Existing +"#; + let schema_validator = SchemaValidator::default(); + let findings = |engine: &dyn ValidationEngine| { + let report = validate_bytes(engine, &schema_validator, template, ValidateConfig::default()).unwrap(); + let mut diagnostics: Vec = report + .diagnostics + .into_iter() + .filter(|diagnostic| matches!(diagnostic.rule_id.as_str(), "E3005" | "W3005")) + .collect(); + diagnostics.sort_by(|left, right| { + left.entity + .as_ref() + .map(|entity| entity.logical_id.as_str()) + .cmp(&right.entity.as_ref().map(|entity| entity.logical_id.as_str())) + }); + diagnostics + }; + + let rego = findings(&*REGO); + let cel = findings(&*CEL); + assert_eq!(serde_json::to_value(®o).unwrap(), serde_json::to_value(&cel).unwrap()); + let identities: Vec<(&str, &str, &str)> = rego + .iter() + .map(|diagnostic| { + ( + diagnostic.entity.as_ref().map(|entity| entity.logical_id.as_str()).unwrap_or_default(), + diagnostic.rule_id.as_str(), + diagnostic.property_path.as_deref().unwrap_or_default(), + ) + }) + .collect(); + assert_eq!( + identities, + [ + ("MissingArray", "E3005", "DependsOn.0"), + ("MissingScalar", "E3005", "DependsOn"), + ("RedundantArray", "W3005", "DependsOn.0"), + ("RedundantScalar", "W3005", "DependsOn"), + ] + ); +} + +#[test] +fn diagnostics_retain_precise_authored_member_paths() { + let cases = [ + ("bad/E9001_unknown_resource_type.yaml", "F3006", "Mystery", "Type"), + ("bad/sam/transform_bogus_name.yaml", "E3038", "MyFn", "Type"), + ("bad/lambda_zipfile_java.yaml", "E3677", "LambdaFn", "Properties.Runtime"), + ("bad/fargate_daemon.yaml", "E3052", "FargateDaemon", "Properties"), + ("bad/findinmap_bad.yaml", "F1012", "Bucket", "Properties.Tags.0.Value.Fn::FindInMap.0"), + ( + "bad/functions_getaz.yaml", + "E9004", + "mySubnet3", + "Properties.AvailabilityZone.Fn::Select.1.Fn::GetAZs.Fn::GetAtt.1", + ), + ( + "bad/codepipeline_bad_artifacts.yaml", + "E3701", + "Pipeline", + "Properties.Stages.1.Actions.0.InputArtifacts.0.Name", + ), + ("bad/codepipeline_bad_artifact_counts.yaml", "E3702", "Pipeline", "Properties.Stages.1.Actions.0"), + ("bad/stepfunctions_bad_start_at.yaml", "E3601", "SM", "Properties.DefinitionString.StartAt"), + ("bad/core/E3001_resource_shape.yaml", "E3001", "NumericType", "Type"), + ("bad/undefined_condition.yaml", "E8002", "R", "Condition"), + ("bad/lambda_snapstart_no_version.yaml", "W2530", "Func", "Properties.SnapStart.ApplyOn"), + ("bad/cross_resource_task10.yaml", "E3663", "BadEnvLambda", "Properties.Environment.Variables.AWS_REGION"), + ( + "bad/sagemaker_instance_types.yaml", + "E3642", + "InferenceExperiment", + "Properties.ModelVariants.0.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", + ), + ( + "bad/sagemaker_instance_types.yaml", + "E3643", + "ModelPackage", + "Properties.ValidationSpecification.ValidationProfiles.0.TransformJobDefinition.TransformResources.InstanceType", + ), + ("bad/sagemaker_instance_types.yaml", "E3644", "Cluster", "Properties.InstanceGroups.0.InstanceType"), + ]; + + for (template, rule_id, resource_id, expected_path) in cases { + let selected = |engine: &dyn ValidationEngine| { + validate_template(engine, template) + .into_iter() + .filter(|diagnostic| { + diagnostic.rule_id == rule_id + && diagnostic.entity.as_ref().map(|entity| entity.logical_id.as_str()) == Some(resource_id) + }) + .collect::>() + }; + let rego = selected(&*REGO); + let cel = selected(&*CEL); + assert_eq!(serde_json::to_value(®o).unwrap(), serde_json::to_value(&cel).unwrap(), "{template}"); + assert!( + rego.iter().any(|diagnostic| diagnostic.property_path.as_deref() == Some(expected_path)), + "{template}: expected {rule_id} on {resource_id} at {expected_path}, got {rego:?}" + ); + } +} + +#[test] +fn output_intrinsics_use_authored_value_spans() { + let findings = |engine: &dyn ValidationEngine, template: &str, rule_id: &str| { + let mut diagnostics: Vec = validate_template(engine, template) + .into_iter() + .filter(|diagnostic| diagnostic.rule_id == rule_id) + .collect(); + diagnostics.sort_by_key(|diagnostic| diagnostic.location.as_ref().map(|location| location.start_line)); + diagnostics + }; + + let rego_invalid = findings(&*REGO, "bad/output_invalid_references.yaml", "F6101"); + let cel_invalid = findings(&*CEL, "bad/output_invalid_references.yaml", "F6101"); + assert_eq!(serde_json::to_value(®o_invalid).unwrap(), serde_json::to_value(&cel_invalid).unwrap()); + assert_eq!( + rego_invalid + .iter() + .filter_map(|diagnostic| diagnostic.location.as_ref().map(|location| location.start_line)) + .collect::>(), + [7, 9] + ); + + let rego_joins = findings(&*REGO, "integration/getatt-types.yaml", "I1022"); + let cel_joins = findings(&*CEL, "integration/getatt-types.yaml", "I1022"); + assert_eq!(serde_json::to_value(®o_joins).unwrap(), serde_json::to_value(&cel_joins).unwrap()); + assert_eq!( + rego_joins + .iter() + .filter_map(|diagnostic| diagnostic.location.as_ref().map(|location| location.start_line)) + .collect::>(), + [91, 93] + ); +} diff --git a/src/cfn-validate/tests/golden_tests.rs b/src/cfn-validate/tests/golden_tests.rs index 74c49199..d17235a3 100644 --- a/src/cfn-validate/tests/golden_tests.rs +++ b/src/cfn-validate/tests/golden_tests.rs @@ -5,7 +5,7 @@ use common::{DETAILED_ONLY_DIAGNOSTIC_FIELDS, deep_diff, discover_all_templates, use data_source::embedded::{CFN_LINT_VERSION, RESOURCE_SCHEMA_VERSION}; use diagnostics::DetailLevel; use rego_engine::RegoEngine; -use rules::Severity; +use rules::{RULE_REGISTRY, Severity}; use schema_validator::SchemaValidator; use validation_engine::{EngineConfig, ValidateConfig, ValidationEngine, validate_bytes_with_path}; @@ -171,7 +171,9 @@ fn cel_standard_matches_golden() { check_standard("cel", &engine); } -const EXPECTED_RULES_EVALUATED: u64 = 302; +fn expected_rules_evaluated() -> u64 { + RULE_REGISTRY.len() as u64 +} #[test] fn rules_evaluated_is_full_rule_count() { @@ -185,7 +187,7 @@ fn rules_evaluated_is_full_rule_count() { ] { assert_eq!( report["metadata"]["rulesEvaluated"].as_u64(), - Some(EXPECTED_RULES_EVALUATED), + Some(expected_rules_evaluated()), "{name}: rulesEvaluated must be the full built-in rule count" ); } @@ -225,7 +227,7 @@ fn report_metadata_contains_embedded_source_versions_on_all_outcomes() { ]); for (name, bytes, expected_rules_evaluated) in [ - ("success", load_template("good/generic.yaml"), EXPECTED_RULES_EVALUATED), + ("success", load_template("good/generic.yaml"), expected_rules_evaluated()), ("parse error", b"Resources: [".to_vec(), 0), ] { let report = validate_to_json(®o, &bytes, name, DetailLevel::Detailed); diff --git a/src/rego-engine/handwritten/rego/intrinsics/findinmap.rego b/src/rego-engine/handwritten/rego/intrinsics/findinmap.rego index 3069e3e8..a7fb24ec 100644 --- a/src/rego-engine/handwritten/rego/intrinsics/findinmap.rego +++ b/src/rego-engine/handwritten/rego/intrinsics/findinmap.rego @@ -2,10 +2,12 @@ package intrinsics import rego.v1 -# F1012: FindInMap map name must exist in Mappings -violation contains make_diag("F1012", "FATAL", name, - sprintf("Fn::FindInMap references non-existent mapping '%s'", [map_name])) if { +# A literal mapping name must identify a declared Mappings entry. +violation contains make_diag_full("F1012", "FATAL", name, entry.path, + sprintf("Fn::FindInMap references non-existent mapping '%s'", [map_name]), + "", "") if { some name, res in input.resources - some map_name in res.findInMapRefs + some entry in res.findInMapRefPaths + map_name := entry.target not object.get(input, "mappings", {})[map_name] } diff --git a/src/rego-engine/handwritten/rego/intrinsics/getatt.rego b/src/rego-engine/handwritten/rego/intrinsics/getatt.rego index 2f83b044..0d7fc006 100644 --- a/src/rego-engine/handwritten/rego/intrinsics/getatt.rego +++ b/src/rego-engine/handwritten/rego/intrinsics/getatt.rego @@ -3,7 +3,7 @@ package intrinsics import rego.v1 # E9004: GetAtt attribute must exist on target resource type -violation contains make_diag_full("E9004", "ERROR", name, edge.sourcePath, +violation contains make_diag_full("E9004", "ERROR", name, _getatt_attr_path(edge.sourcePath), sprintf("'%s' is not one of %s", [attr, render_list(valid_attrs)]), "Check the resource type documentation for valid GetAtt attributes", "") if { @@ -39,7 +39,7 @@ _is_map_member_attr(attr, target_type) if { # to strings when the destination property is typed as string. # E1020: GetAtt resource must exist in template -violation contains make_diag_full("F1020", "FATAL", name, "", +violation contains make_diag_full("F1020", "FATAL", name, _getatt_target_path(edge.sourcePath), sprintf("Fn::GetAtt references non-existent resource '%s'", [target]), "Check that the GetAtt target resource exists in the template", "") if { @@ -78,6 +78,38 @@ _skip_getatt_types := { "AWS::CloudFormation::Macro", } +# Build a property path pointing at the GetAtt resource-name element (index 0). +# If sourcePath already ends with `Fn::GetAtt` (or is empty), append `.0`; +# otherwise append `.Fn::GetAtt.0`. +_getatt_target_path(source_path) := sprintf("%s.Fn::GetAtt.0", [source_path]) if { + source_path != "" + not endswith(source_path, "Fn::GetAtt") +} + +_getatt_target_path(source_path) := sprintf("%s.0", [source_path]) if { + source_path != "" + endswith(source_path, "Fn::GetAtt") +} + +_getatt_target_path(source_path) := "Fn::GetAtt.0" if { + source_path == "" +} + +# Build a property path pointing at the GetAtt attribute element (index 1). +_getatt_attr_path(source_path) := sprintf("%s.Fn::GetAtt.1", [source_path]) if { + source_path != "" + not endswith(source_path, "Fn::GetAtt") +} + +_getatt_attr_path(source_path) := sprintf("%s.1", [source_path]) if { + source_path != "" + endswith(source_path, "Fn::GetAtt") +} + +_getatt_attr_path(source_path) := "Fn::GetAtt.1" if { + source_path == "" +} + # GetAtt attribute format mapping default _getatt_format(_, _) := "" _getatt_format("AWS::EC2::SecurityGroup", "GroupId") := "AWS::EC2::SecurityGroup.Id" diff --git a/src/rego-engine/handwritten/rego/references/depends_on_obsolete.rego b/src/rego-engine/handwritten/rego/references/depends_on_obsolete.rego index b5df42da..b8adb66f 100644 --- a/src/rego-engine/handwritten/rego/references/depends_on_obsolete.rego +++ b/src/rego-engine/handwritten/rego/references/depends_on_obsolete.rego @@ -4,7 +4,7 @@ import rego.v1 # W3005: DependsOn is unnecessary when an intrinsic function already creates a dependency violation contains make_diag_full("W3005", "WARN", name, - "DependsOn", + dep_path, sprintf("'%s' dependency already enforced by a '%s' at '%s'", [dep, edge.kind, edge.sourcePath]), "Remove the DependsOn entry", "") if { @@ -16,4 +16,5 @@ violation contains make_diag_full("W3005", "WARN", name, some edge in res.outgoingRefs edge.target == dep edge.kind in {"Ref", "GetAtt", "Sub"} + some dep_path in authored_depends_on_paths(res, dep) } diff --git a/src/rego-engine/handwritten/rego/references/deps.rego b/src/rego-engine/handwritten/rego/references/deps.rego index bf361b51..f8602a64 100644 --- a/src/rego-engine/handwritten/rego/references/deps.rego +++ b/src/rego-engine/handwritten/rego/references/deps.rego @@ -8,36 +8,47 @@ import rego.v1 # E3005: DependsOn target must exist. A dynamic reference cannot name a # resource - DependsOn takes literal logical IDs only - so its message says # that rather than implying a resource of that name could be added. -violation contains make_diag("E3005", "ERROR", name, - sprintf("DependsOn target '%s' does not exist as a resource", [dep])) if { - some name in object.keys(input.resources) - some dep in input.resources[name].dependsOn +violation contains make_diag_full("E3005", "ERROR", name, dep_path, + sprintf("DependsOn target '%s' does not exist as a resource", [dep]), + "", "") if { + some name, res in input.resources + some dep in res.dependsOn not dep in object.keys(input.resources) not dep in object.get(input, "samImplicitResources", []) not contains(dep, "{{resolve:") + some dep_path in authored_depends_on_paths(res, dep) } -violation contains make_diag("E3005", "ERROR", name, - sprintf("DependsOn must be a resource logical ID, not a dynamic reference: '%s'", [dep])) if { - some name in object.keys(input.resources) - some dep in input.resources[name].dependsOn +violation contains make_diag_full("E3005", "ERROR", name, dep_path, + sprintf("DependsOn must be a resource logical ID, not a dynamic reference: '%s'", [dep]), + "", "") if { + some name, res in input.resources + some dep in res.dependsOn not dep in object.keys(input.resources) not dep in object.get(input, "samImplicitResources", []) contains(dep, "{{resolve:") + some dep_path in authored_depends_on_paths(res, dep) } # E3005: DependsOn target is conditional and may not exist # If resource A has DependsOn: B, and B has a condition, then A's condition # must imply B's condition - otherwise B may not exist when A is created. -violation contains make_diag_full("E3005", "ERROR", name, "DependsOn", +violation contains make_diag_full("E3005", "ERROR", name, dep_path, sprintf("'%s' will not exist when condition '%s' is False", [dep, dep_cond]), sprintf("Add a Condition to '%s' that implies '%s'", [name, dep_cond]), "") if { - some name in object.keys(input.resources) - some dep in input.resources[name].dependsOn + some name, res in input.resources + some dep in res.dependsOn dep in object.keys(input.resources) dep_cond := resource_condition(dep) dep_cond != null source_cond := resource_condition(name) not condition_implies(source_cond, dep_cond) + some dep_path in authored_depends_on_paths(res, dep) +} + +authored_depends_on_paths(res, dependency) := {edge.sourcePath | + some edge in res.outgoingRefs + edge.kind == "DependsOn" + edge.target == dependency } diff --git a/src/rego-engine/handwritten/rego/resources/codepipeline/artifact_counts.rego b/src/rego-engine/handwritten/rego/resources/codepipeline/artifact_counts.rego index f3c12141..c4b8d5e8 100644 --- a/src/rego-engine/handwritten/rego/resources/codepipeline/artifact_counts.rego +++ b/src/rego-engine/handwritten/rego/resources/codepipeline/artifact_counts.rego @@ -7,7 +7,8 @@ import rego.v1 # artifact list authored behind a condition can violate the min/max in one # branch but not another). That branch enumeration is provided by the # pipeline_artifact_count_issues builtin. -violation contains make_diag("E3702", "ERROR", name, issue.message) if { +violation contains make_diag_full("E3702", "ERROR", name, issue.path, + issue.message, "", "") if { some name in resources_of_type("AWS::CodePipeline::Pipeline") result := pipeline_artifact_count_issues(name) some issue in result.issues diff --git a/src/rego-engine/handwritten/rego/resources/codepipeline/artifacts.rego b/src/rego-engine/handwritten/rego/resources/codepipeline/artifacts.rego index 638664ce..9e893d1a 100644 --- a/src/rego-engine/handwritten/rego/resources/codepipeline/artifacts.rego +++ b/src/rego-engine/handwritten/rego/resources/codepipeline/artifacts.rego @@ -3,7 +3,8 @@ package resources import rego.v1 # E3701: CodePipeline artifact validation -violation contains make_diag("E3701", "ERROR", name, issue.message) if { +violation contains make_diag_full("E3701", "ERROR", name, issue.path, + issue.message, "", "") if { some name in resources_of_type("AWS::CodePipeline::Pipeline") result := pipeline_artifacts(name) some issue in result.issues diff --git a/src/rego-engine/handwritten/rego/resources/codepipeline/first_stage_source.rego b/src/rego-engine/handwritten/rego/resources/codepipeline/first_stage_source.rego index ccf17bde..7620074f 100644 --- a/src/rego-engine/handwritten/rego/resources/codepipeline/first_stage_source.rego +++ b/src/rego-engine/handwritten/rego/resources/codepipeline/first_stage_source.rego @@ -2,7 +2,29 @@ package resources import rego.v1 -# E3700: First stage of CodePipeline must contain a Source action +# E3700: First stage of CodePipeline must contain a Source action. +# When exactly one action exists with a non-Source Category, anchor the +# diagnostic at that Category property for precise attribution. With +# multiple actions, no single action is uniquely at fault, so the +# stage object is the most defensible anchor. +violation contains make_diag_full("E3700", "ERROR", name, + "Properties.Stages.0.Actions.0.ActionTypeId.Category", + "First stage of a pipeline must contain at least one Source action", + "Add an action with ActionTypeId.Category=Source to the first stage", + "") if { + some name in resources_of_type("AWS::CodePipeline::Pipeline") + stages := resolve(name, "Properties.Stages") + is_array(stages) + count(stages) > 0 + first_stage := stages[0] + is_object(first_stage) + actions := object.get(first_stage, "Actions", []) + is_array(actions) + not any_source_action(actions) + count(actions) == 1 + actions[0].ActionTypeId.Category +} + violation contains make_diag_full("E3700", "ERROR", name, "Properties.Stages[0]", "First stage of a pipeline must contain at least one Source action", @@ -17,6 +39,12 @@ violation contains make_diag_full("E3700", "ERROR", name, actions := object.get(first_stage, "Actions", []) is_array(actions) not any_source_action(actions) + not _single_action_with_category(actions) +} + +_single_action_with_category(actions) if { + count(actions) == 1 + actions[0].ActionTypeId.Category } any_source_action(actions) if { diff --git a/src/rego-engine/handwritten/rego/resources/cross_resource_task10.rego b/src/rego-engine/handwritten/rego/resources/cross_resource_task10.rego index 815393fb..07e38cd3 100644 --- a/src/rego-engine/handwritten/rego/resources/cross_resource_task10.rego +++ b/src/rego-engine/handwritten/rego/resources/cross_resource_task10.rego @@ -29,7 +29,7 @@ violation contains make_diag_at("E3676", "ERROR", name, # E3663: Lambda environment variable reserved keys violation contains make_diag_at("E3663", "ERROR", name, - "Properties.Environment.Variables", + sprintf("Properties.Environment.Variables.%s", [key]), sprintf("Environment variable '%s' is a Lambda reserved key", [key])) if { some name in resources_of_type("AWS::Lambda::Function") env := resolve(name, "Properties.Environment.Variables") diff --git a/src/rego-engine/handwritten/rego/resources/ecs/service_rules.rego b/src/rego-engine/handwritten/rego/resources/ecs/service_rules.rego index d1714037..5fd3507e 100644 --- a/src/rego-engine/handwritten/rego/resources/ecs/service_rules.rego +++ b/src/rego-engine/handwritten/rego/resources/ecs/service_rules.rego @@ -46,8 +46,9 @@ violation contains make_diag_full("E3054", "ERROR", target_name, } # E3052: ECS Service network config - awsvpc TaskDef requires NetworkConfiguration -violation contains make_diag("E3052", "ERROR", svc_name, - "NetworkConfiguration required when TaskDefinition NetworkMode is 'awsvpc'") if { +violation contains make_diag_full("E3052", "ERROR", svc_name, "Properties", + "NetworkConfiguration required when TaskDefinition NetworkMode is 'awsvpc'", + "", "") if { some svc_name in resources_of_type("AWS::ECS::Service") target_name := follow_ref(svc_name, "Properties.TaskDefinition") target_name != null diff --git a/src/rego-engine/handwritten/rego/resources/instance_type_enums.rego b/src/rego-engine/handwritten/rego/resources/instance_type_enums.rego index 516e088b..74086312 100644 --- a/src/rego-engine/handwritten/rego/resources/instance_type_enums.rego +++ b/src/rego-engine/handwritten/rego/resources/instance_type_enums.rego @@ -127,35 +127,45 @@ violation contains make_diag_full("E3640", "ERROR", name, path, msg, "", "") if msg := region_flat_invalid(data.aws_sagemaker_processing_instancetype_enum, val) } -# E3642: SageMaker hosting/inference InstanceType not valid for region -violation contains make_diag_full("E3642", "ERROR", name, - "Properties.ModelVariants.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", msg, "", "") if { +# Hosting/inference instance types are reported at the exact model-variant entry. +violation contains make_diag_full("E3642", "ERROR", name, report_path, msg, "", "") if { some name in resources_of_type("AWS::SageMaker::InferenceExperiment") - some val in resolve_all(name, "Properties.ModelVariants.{}.InfrastructureConfig.RealTimeInferenceConfig.InstanceType") + some variants in resolve_all(name, "Properties.ModelVariants") + is_array(variants) + some index, variant in variants + val := variant.InfrastructureConfig.RealTimeInferenceConfig.InstanceType is_string(val) + report_path := sprintf("Properties.ModelVariants.%d.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", [index]) msg := region_flat_invalid(data.aws_sagemaker_hosting_instancetype_enum, val) } -# E3643: SageMaker transform InstanceType not valid for region. -violation contains make_diag_full("E3643", "ERROR", name, - "Properties.ValidationSpecification.ValidationProfiles.TransformJobDefinition.TransformResources.InstanceType", msg, "", "") if { +# Transform instance types are reported at the exact validation-profile entry. +violation contains make_diag_full("E3643", "ERROR", name, report_path, msg, "", "") if { some name in resources_of_type("AWS::SageMaker::ModelPackage") - some val in resolve_all(name, "Properties.ValidationSpecification.ValidationProfiles.{}.TransformJobDefinition.TransformResources.InstanceType") + some profiles in resolve_all(name, "Properties.ValidationSpecification.ValidationProfiles") + is_array(profiles) + some index, profile in profiles + val := profile.TransformJobDefinition.TransformResources.InstanceType is_string(val) + report_path := sprintf("Properties.ValidationSpecification.ValidationProfiles.%d.TransformJobDefinition.TransformResources.InstanceType", [index]) msg := region_flat_invalid(data.aws_sagemaker_transform_instancetype_enum, val) } -# E3644: SageMaker cluster InstanceType not valid for region -_e3644_paths := { - "Properties.InstanceGroups.InstanceType": "Properties.InstanceGroups.{}.InstanceType", - "Properties.RestrictedInstanceGroups.InstanceType": "Properties.RestrictedInstanceGroups.{}.InstanceType", +_cluster_instance_type_lists := { + "Properties.InstanceGroups", + "Properties.RestrictedInstanceGroups", } +# Cluster instance types are reported at the exact group entry. violation contains make_diag_full("E3644", "ERROR", name, report_path, msg, "", "") if { some name in resources_of_type("AWS::SageMaker::Cluster") - some report_path, wildcard_path in _e3644_paths - some val in resolve_all(name, wildcard_path) + some list_path in _cluster_instance_type_lists + some groups in resolve_all(name, list_path) + is_array(groups) + some index, group in groups + val := group.InstanceType is_string(val) + report_path := sprintf("%s.%d.InstanceType", [list_path, index]) msg := region_flat_invalid(data.aws_sagemaker_cluster_instancetype_enum, val) } diff --git a/src/rego-engine/handwritten/rego/resources/lambda/snapstart_version.rego b/src/rego-engine/handwritten/rego/resources/lambda/snapstart_version.rego index d5039545..cbca635f 100644 --- a/src/rego-engine/handwritten/rego/resources/lambda/snapstart_version.rego +++ b/src/rego-engine/handwritten/rego/resources/lambda/snapstart_version.rego @@ -4,7 +4,7 @@ import rego.v1 # W2530: SnapStart enabled but no Lambda::Version resource attached violation contains make_diag_full("W2530", "WARN", name, - "Properties.SnapStart", + "Properties.SnapStart.ApplyOn", "SnapStart is enabled but no AWS::Lambda::Version resource is attached", "Add an AWS::Lambda::Version resource that references this function", "") if { diff --git a/src/rego-engine/handwritten/rego/resources/lambda/zipfile_runtime.rego b/src/rego-engine/handwritten/rego/resources/lambda/zipfile_runtime.rego index 77f97c7a..6dbbe448 100644 --- a/src/rego-engine/handwritten/rego/resources/lambda/zipfile_runtime.rego +++ b/src/rego-engine/handwritten/rego/resources/lambda/zipfile_runtime.rego @@ -3,8 +3,9 @@ package resources import rego.v1 # E3677: When Code.ZipFile is present, Runtime must be nodejs or python -violation contains make_diag("E3677", "ERROR", name, - sprintf("Runtime '%s' is not supported with Code.ZipFile - use nodejs or python", [runtime])) if { +violation contains make_diag_full("E3677", "ERROR", name, "Properties.Runtime", + sprintf("Runtime '%s' is not supported with Code.ZipFile - use nodejs or python", [runtime]), + "", "") if { some name in resources_of_type("AWS::Lambda::Function") zipfile := resolve(name, "Properties.Code.ZipFile") zipfile != null diff --git a/src/rego-engine/handwritten/rego/resources/properties/resource_type.rego b/src/rego-engine/handwritten/rego/resources/properties/resource_type.rego index cb30556f..298632ac 100644 --- a/src/rego-engine/handwritten/rego/resources/properties/resource_type.rego +++ b/src/rego-engine/handwritten/rego/resources/properties/resource_type.rego @@ -8,8 +8,9 @@ import rego.v1 # any other namespace (private registry types, `Custom::` resources, modules, # hook-shaped names) may be registered per account/region, so they are skipped # entirely rather than guessed at. -violation contains make_diag("F3006", "FATAL", name, - sprintf("Unknown resource type '%s'", [rtype])) if { +violation contains make_diag_full("F3006", "FATAL", name, "Type", + sprintf("Unknown resource type '%s'", [rtype]), + "", "") if { some name, res in input.resources rtype := res.resourceType is_string(rtype) diff --git a/src/rego-engine/handwritten/rego/resources/sqs/fifo_name.rego b/src/rego-engine/handwritten/rego/resources/sqs/fifo_name.rego deleted file mode 100644 index 58d8abf5..00000000 --- a/src/rego-engine/handwritten/rego/resources/sqs/fifo_name.rego +++ /dev/null @@ -1,15 +0,0 @@ -package resources - -import rego.v1 - -# E2504: FIFO queue name must end with .fifo -violation contains make_diag_at("E2504", "ERROR", name, - "Properties.QueueName", - sprintf("FIFO queue name '%s' must end with '.fifo'", [qname])) if { - some name in resources_of_type("AWS::SQS::Queue") - some fifo in resolve_all(name, "Properties.FifoQueue") - fifo == true - some qname in resolve_all(name, "Properties.QueueName") - is_string(qname) - not endswith(qname, ".fifo") -} diff --git a/src/rego-engine/handwritten/rego/structure/serverless_transform.rego b/src/rego-engine/handwritten/rego/structure/serverless_transform.rego index 67b052ed..0998f227 100644 --- a/src/rego-engine/handwritten/rego/structure/serverless_transform.rego +++ b/src/rego-engine/handwritten/rego/structure/serverless_transform.rego @@ -3,8 +3,9 @@ package structure import rego.v1 # E3038: Serverless resource types require AWS::Serverless-2016-10-31 transform -violation contains make_diag("E3038", "ERROR", name, - sprintf("Resource type '%s' requires the AWS::Serverless-2016-10-31 transform", [rtype])) if { +violation contains make_diag_full("E3038", "ERROR", name, "Type", + sprintf("Resource type '%s' requires the AWS::Serverless-2016-10-31 transform", [rtype]), + "", "") if { some name, res in input.resources rtype := res.resourceType startswith(rtype, "AWS::Serverless::") diff --git a/src/rego-engine/src/builtins.rs b/src/rego-engine/src/builtins.rs index c356de70..0e9aa86a 100644 --- a/src/rego-engine/src/builtins.rs +++ b/src/rego-engine/src/builtins.rs @@ -1624,22 +1624,24 @@ fn register_pipeline_artifacts(rego: &mut regorus::Engine, holder: SharedModel) Some(a) => a, None => continue, }; - for action in actions { + for (action_idx, action) in actions.iter().enumerate() { let action_name = action.get("Name").and_then(|v| v.as_str()).unwrap_or("unknown"); if let Some(outputs) = action.get("OutputArtifacts").and_then(|v| v.as_array()) { - for out in outputs { + for (out_idx, out) in outputs.iter().enumerate() { if let Some(name) = out.get("Name").and_then(|v| v.as_str()) && !seen_outputs.insert(name.to_string()) { - issues.push(serde_json::json!({"message": format!("Duplicate OutputArtifact name '{}' in stage '{}' action '{}'", name, stage_name, action_name)})); + let path = format!("Properties.Stages.{}.Actions.{}.OutputArtifacts.{}.Name", stage_idx, action_idx, out_idx); + issues.push(serde_json::json!({"message": format!("Duplicate OutputArtifact name '{}'", name), "path": path})); } } } if stage_idx > 0 && let Some(inputs) = action.get("InputArtifacts").and_then(|v| v.as_array()) { - for inp in inputs { + for (in_idx, inp) in inputs.iter().enumerate() { if let Some(name) = inp.get("Name").and_then(|v| v.as_str()) && !seen_outputs.contains(name) { - issues.push(serde_json::json!({"message": format!("InputArtifact '{}' in stage '{}' action '{}' does not reference a previously defined OutputArtifact", name, stage_name, action_name)})); + let path = format!("Properties.Stages.{}.Actions.{}.InputArtifacts.{}.Name", stage_idx, action_idx, in_idx); + issues.push(serde_json::json!({"message": format!("InputArtifact '{}' in stage '{}' action '{}' does not reference a previously defined OutputArtifact", name, stage_name, action_name), "path": path})); } } } @@ -1715,11 +1717,11 @@ fn pipeline_artifact_count_issues( let Some(stages) = stages_json.and_then(|v| v.as_array()) else { return issues; }; - for stage in stages { + for (si, stage) in stages.iter().enumerate() { let Some(actions) = stage.get("Actions").and_then(|a| a.as_array()) else { continue; }; - for action in actions { + for (ai, action) in actions.iter().enumerate() { let action_type_id = action.get("ActionTypeId"); let (Some(owner), Some(category), Some(provider)) = ( action_type_id.and_then(|a| a.get("Owner")).and_then(|c| c.as_str()), @@ -1730,6 +1732,7 @@ fn pipeline_artifact_count_issues( }; let aname = action.get("Name").and_then(|n| n.as_str()).unwrap_or("unknown"); let key = format!("{owner}/{category}/{provider}"); + let action_path = format!("Properties.Stages.{}.Actions.{}", si, ai); let Some(bounds) = counts.get(&key) else { continue }; let bound = |field: &str| bounds.get(field).and_then(|v| v.as_u64()).map(|v| v as usize); let (min_in, max_in) = (bound("min_input"), bound("max_input")); @@ -1739,13 +1742,15 @@ fn pipeline_artifact_count_issues( && n < lo { issues.push(serde_json::json!({"message": - format!("Action '{}' ({}) has {} input artifacts, expected at least {}", aname, key, n, lo)})); + format!("Action '{}' ({}) has {} input artifacts, expected at least {}", aname, key, n, lo), + "path": action_path})); } if let Some(hi) = max_in && n > hi { issues.push(serde_json::json!({"message": - format!("Action '{}' ({}) has {} input artifacts, expected at most {}", aname, key, n, hi)})); + format!("Action '{}' ({}) has {} input artifacts, expected at most {}", aname, key, n, hi), + "path": action_path})); } } for n in rego_artifact_count_scenarios(action.get("OutputArtifacts")) { @@ -1753,13 +1758,15 @@ fn pipeline_artifact_count_issues( && n < lo { issues.push(serde_json::json!({"message": - format!("Action '{}' ({}) has {} output artifacts, expected at least {}", aname, key, n, lo)})); + format!("Action '{}' ({}) has {} output artifacts, expected at least {}", aname, key, n, lo), + "path": action_path})); } if let Some(hi) = max_out && n > hi { issues.push(serde_json::json!({"message": - format!("Action '{}' ({}) has {} output artifacts, expected at most {}", aname, key, n, hi)})); + format!("Action '{}' ({}) has {} output artifacts, expected at most {}", aname, key, n, hi), + "path": action_path})); } } } diff --git a/src/rego-engine/tests/integration.rs b/src/rego-engine/tests/integration.rs index 0b8df3af..cf13430d 100644 --- a/src/rego-engine/tests/integration.rs +++ b/src/rego-engine/tests/integration.rs @@ -732,7 +732,8 @@ fn e2e_lambda_zipfile_valid() { #[test] fn e2e_dynamodb_billing_mode() { let report = validate_fixture("bad/dynamodb_provisioned_no_throughput.yaml"); - assert!(has_rule(&report, "F3003"), "Expected F3003 for PROVISIONED without throughput (required property)"); + assert!(has_rule(&report, "E3639"), "Expected the billing-mode diagnostic for PROVISIONED without throughput"); + assert!(!has_rule(&report, "F3003"), "The generic missing-property diagnostic should be suppressed"); } #[test] diff --git a/src/resources/expected/validation_reports.json b/src/resources/expected/validation_reports.json index 1ca0f5f6..14782223 100644 --- a/src/resources/expected/validation_reports.json +++ b/src/resources/expected/validation_reports.json @@ -113,7 +113,7 @@ "startLine": 15, "startColumn": 15, "endLine": 15, - "endColumn": 16, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -136,7 +136,7 @@ "startLine": 16, "startColumn": 15, "endLine": 16, - "endColumn": 16, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -705,12 +705,12 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, - "propertyPath": "Properties.BucketName.Fn::Join", + "propertyPath": "Properties.BucketName.Fn::Join.0", "category": "Intrinsic Function", "startLine": 22, - "startColumn": 7, + "startColumn": 26, "endLine": 22, - "endColumn": 15, + "endColumn": 28, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -1080,12 +1080,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SubnetRouteTableAssociation" }, - "propertyPath": "Properties.SubnetId.Fn::Join", + "propertyPath": "Properties.SubnetId.Fn::Join.0", "category": "Intrinsic Function", "startLine": 25, - "startColumn": 7, + "startColumn": 24, "endLine": 25, - "endColumn": 15, + "endColumn": 26, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -1336,7 +1336,7 @@ "startLine": 17, "startColumn": 36, "endLine": 17, - "endColumn": 37, + "endColumn": 45, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -1355,7 +1355,7 @@ "startLine": 27, "startColumn": 40, "endLine": 27, - "endColumn": 41, + "endColumn": 49, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -1949,11 +1949,12 @@ "entityType": "Resource", "resourceType": "AWS::Mystery::DoesNotExist" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 8, - "startColumn": 3, - "endLine": 8, - "endColumn": 10, + "startLine": 9, + "startColumn": 5, + "endLine": 9, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -2126,11 +2127,12 @@ "entityType": "Resource", "resourceType": "AWS::Serverless::NotARealType" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 11, - "startColumn": 3, - "endLine": 11, - "endColumn": 16, + "startLine": 12, + "startColumn": 5, + "endLine": 12, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -2149,11 +2151,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::NotARealType" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 16, - "startColumn": 3, - "endLine": 16, - "endColumn": 20, + "startLine": 17, + "startColumn": 5, + "endLine": 17, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -3026,7 +3029,7 @@ "startLine": 9, "startColumn": 11, "endLine": 9, - "endColumn": 12, + "endColumn": 21, "ruleDescription": "Availability zone properties should not be hardcoded", "phase": "LINT" }, @@ -3045,7 +3048,7 @@ "startLine": 10, "startColumn": 11, "endLine": 10, - "endColumn": 12, + "endColumn": 21, "ruleDescription": "Availability zone properties should not be hardcoded", "phase": "LINT" }, @@ -3159,7 +3162,7 @@ "startLine": 46, "startColumn": 11, "endLine": 46, - "endColumn": 12, + "endColumn": 21, "ruleDescription": "Availability zone properties should not be hardcoded", "phase": "LINT" }, @@ -3963,9 +3966,9 @@ "propertyPath": "Properties.BucketName", "category": "Best Practice", "startLine": 14, - "startColumn": 23, + "startColumn": 39, "endLine": 14, - "endColumn": 34, + "endColumn": 43, "ruleDescription": "String length estimation through Fn::Sub", "phase": "LINT", "context": { @@ -3988,9 +3991,9 @@ "propertyPath": "Properties.BucketName", "category": "Best Practice", "startLine": 14, - "startColumn": 23, + "startColumn": 39, "endLine": 14, - "endColumn": 34, + "endColumn": 43, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -4412,7 +4415,7 @@ "startLine": 8, "startColumn": 13, "endLine": 8, - "endColumn": 14, + "endColumn": 33, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -4546,11 +4549,12 @@ "entityType": "Resource", "resourceType": "AWS::CodePipeline::Pipeline" }, + "propertyPath": "Properties.Stages.1.Actions.0", "category": "Resource", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 11, + "startLine": 23, + "startColumn": 19, + "endLine": 23, + "endColumn": 20, "ruleDescription": "Validate the number of input and output artifacts in a CodePipeline", "phase": "LINT" }, @@ -4643,11 +4647,12 @@ "entityType": "Resource", "resourceType": "AWS::CodePipeline::Pipeline" }, + "propertyPath": "Properties.Stages.1.Actions.0.InputArtifacts.0.Name", "category": "Resource", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 11, + "startLine": 30, + "startColumn": 19, + "endLine": 30, + "endColumn": 23, "ruleDescription": "Validate input and output artifact names are used properly", "phase": "LINT" }, @@ -4971,7 +4976,7 @@ "startLine": 61, "startColumn": 15, "endLine": 61, - "endColumn": 16, + "endColumn": 21, "ruleDescription": "Fn::If condition must exist in Conditions section", "phase": "PARSE" }, @@ -4990,7 +4995,7 @@ "startLine": 65, "startColumn": 19, "endLine": 65, - "endColumn": 20, + "endColumn": 24, "ruleDescription": "Fn::If condition must exist in Conditions section", "phase": "PARSE" }, @@ -5004,6 +5009,7 @@ "entityType": "Resource", "resourceType": "AWS::CloudFront::Distribution" }, + "propertyPath": "Condition", "category": "Resource", "startLine": 84, "startColumn": 5, @@ -5099,7 +5105,7 @@ "startLine": 94, "startColumn": 19, "endLine": 94, - "endColumn": 20, + "endColumn": 28, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -5117,7 +5123,7 @@ "startLine": 48, "startColumn": 5, "endLine": 48, - "endColumn": 11, + "endColumn": 13, "ruleDescription": "Unknown intrinsic function name", "phase": "PARSE" }, @@ -5494,7 +5500,7 @@ "startLine": 4, "startColumn": 3, "endLine": 4, - "endColumn": 10, + "endColumn": 16, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -5512,7 +5518,7 @@ "startLine": 5, "startColumn": 3, "endLine": 5, - "endColumn": 10, + "endColumn": 18, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -5548,7 +5554,7 @@ "startLine": 19, "startColumn": 3, "endLine": 19, - "endColumn": 10, + "endColumn": 22, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -5566,7 +5572,7 @@ "startLine": 19, "startColumn": 3, "endLine": 19, - "endColumn": 10, + "endColumn": 22, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -5584,7 +5590,7 @@ "startLine": 20, "startColumn": 3, "endLine": 20, - "endColumn": 10, + "endColumn": 18, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -5602,7 +5608,7 @@ "startLine": 20, "startColumn": 3, "endLine": 20, - "endColumn": 10, + "endColumn": 18, "ruleDescription": "Fn::And must take between 2 and 10 boolean conditions", "phase": "PARSE" }, @@ -6354,7 +6360,7 @@ "startLine": 8, "startColumn": 3, "endLine": 8, - "endColumn": 13, + "endColumn": 12, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6372,7 +6378,7 @@ "startLine": 9, "startColumn": 3, "endLine": 9, - "endColumn": 13, + "endColumn": 19, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6390,7 +6396,7 @@ "startLine": 10, "startColumn": 3, "endLine": 10, - "endColumn": 13, + "endColumn": 18, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6408,7 +6414,7 @@ "startLine": 11, "startColumn": 3, "endLine": 11, - "endColumn": 13, + "endColumn": 7, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6426,7 +6432,7 @@ "startLine": 11, "startColumn": 3, "endLine": 11, - "endColumn": 13, + "endColumn": 7, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6444,7 +6450,7 @@ "startLine": 12, "startColumn": 3, "endLine": 12, - "endColumn": 13, + "endColumn": 16, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -6955,6 +6961,7 @@ "entityType": "Resource", "resourceType": "" }, + "propertyPath": "Type", "category": "Resource", "startLine": 10, "startColumn": 5, @@ -6973,6 +6980,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Bogus", "category": "Resource", "startLine": 15, "startColumn": 5, @@ -6991,6 +6999,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Condition", "category": "Resource", "startLine": 20, "startColumn": 5, @@ -7009,6 +7018,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "DependsOn", "category": "Resource", "startLine": 25, "startColumn": 5, @@ -7065,11 +7075,12 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Condition", "category": "Structure", - "startLine": 28, - "startColumn": 3, - "endLine": 28, - "endColumn": 16, + "startLine": 32, + "startColumn": 5, + "endLine": 32, + "endColumn": 14, "ruleDescription": "Condition referenced by resource is not defined", "phase": "PARSE" }, @@ -7609,7 +7620,7 @@ "startLine": 43, "startColumn": 19, "endLine": 43, - "endColumn": 20, + "endColumn": 27, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -7775,10 +7786,10 @@ }, "propertyPath": "Properties.BlockDeviceMappings", "category": "Best Practice", - "startLine": 36, - "startColumn": 7, - "endLine": 36, - "endColumn": 26, + "startLine": 37, + "startColumn": 9, + "endLine": 37, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -8586,6 +8597,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "BadProperty", "category": "Resource", "startLine": 19, "startColumn": 5, @@ -8604,6 +8616,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "BadProperty", "category": "Resource", "startLine": 32, "startColumn": 5, @@ -9002,6 +9015,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "BadProperty", "category": "Resource", "startLine": 19, "startColumn": 5, @@ -9020,6 +9034,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "BadProperty", "category": "Resource", "startLine": 27, "startColumn": 5, @@ -9444,6 +9459,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Version", "category": "Resource", "startLine": 5, "startColumn": 5, @@ -9462,6 +9478,7 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::AutoScalingGroup" }, + "propertyPath": "CreationPolicy", "category": "Resource", "startLine": 8, "startColumn": 5, @@ -9480,6 +9497,7 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::AutoScalingGroup" }, + "propertyPath": "UpdatePolicy", "category": "Resource", "startLine": 11, "startColumn": 5, @@ -9498,6 +9516,7 @@ "entityType": "Resource", "resourceType": "Custom::Thing" }, + "propertyPath": "CreationPolicy", "category": "Resource", "startLine": 16, "startColumn": 5, @@ -9516,6 +9535,7 @@ "entityType": "Resource", "resourceType": "Custom::Thing" }, + "propertyPath": "UpdatePolicy", "category": "Resource", "startLine": 17, "startColumn": 5, @@ -9534,6 +9554,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Connectors", "category": "Resource", "startLine": 20, "startColumn": 5, @@ -9552,6 +9573,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "IgnoreGlobals", "category": "Resource", "startLine": 21, "startColumn": 5, @@ -9849,12 +9871,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.Environment.Variables", + "propertyPath": "Properties.Environment.Variables.AWS_REGION", "category": "Resource", - "startLine": 49, - "startColumn": 9, - "endLine": 49, - "endColumn": 18, + "startLine": 50, + "startColumn": 11, + "endLine": 50, + "endColumn": 21, "ruleDescription": "Validate Lambda environment variable names aren't reserved", "phase": "LINT" }, @@ -10042,7 +10064,7 @@ "startLine": 45, "startColumn": 7, "endLine": 45, - "endColumn": 14, + "endColumn": 11, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -10061,7 +10083,7 @@ "startLine": 58, "startColumn": 7, "endLine": 58, - "endColumn": 14, + "endColumn": 11, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -10932,6 +10954,7 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, + "propertyPath": "Parameters", "category": "Resource", "startLine": 15, "startColumn": 5, @@ -11458,37 +11481,17 @@ "metadata": { "resourcesScanned": 1, "counts": { - "fatal": 1, + "fatal": 0, "errors": 1, "warnings": 0, "informational": 5, "debug": 0 }, - "suppressed": 0, + "suppressed": 1, "strict": false, "severityLevel": "DEBUG" }, "diagnostics": [ - { - "ruleId": "F3003", - "severity": "FATAL", - "message": "'ProvisionedThroughput' is a required property (from extension)", - "source": "SCHEMA", - "entity": { - "logicalId": "DDBTable", - "entityType": "Resource", - "resourceType": "AWS::DynamoDB::Table" - }, - "propertyPath": "Properties", - "suggestedFix": "Add 'ProvisionedThroughput'", - "category": "Schema", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, - "ruleDescription": "Required property missing", - "phase": "SCHEMA" - }, { "ruleId": "E3639", "severity": "ERROR", @@ -11702,10 +11705,10 @@ "propertyPath": "Properties.ContainerDefinitions[0].PortMappings[0].HostPort", "suggestedFix": "Set HostPort equal to ContainerPort or remove HostPort", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 13, + "startColumn": 15, + "endLine": 13, + "endColumn": 23, "ruleDescription": "Validate ECS task definition has correct values for HostPort", "phase": "LINT" }, @@ -12035,7 +12038,7 @@ "startLine": 22, "startColumn": 15, "endLine": 22, - "endColumn": 16, + "endColumn": 25, "ruleDescription": "Validate VPC subnet id format", "phase": "SCHEMA", "context": { @@ -12839,11 +12842,12 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Service" }, + "propertyPath": "Properties", "category": "Resource", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 16, + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 15, "ruleDescription": "Validate ECS service requires NetworkConfiguration", "phase": "LINT" }, @@ -13142,11 +13146,12 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Properties.Tags.0.Value.Fn::FindInMap.0", "category": "Intrinsic Function", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 9, + "startLine": 9, + "startColumn": 30, + "endLine": 9, + "endColumn": 44, "ruleDescription": "FindInMap map name must exist in Mappings", "phase": "SCHEMA" }, @@ -13202,7 +13207,7 @@ "entityType": "Resource", "resourceType": "AWS::DynamoDB::Table" }, - "propertyPath": "Properties.TableName", + "propertyPath": "Properties.TableName.Fn::Sub", "category": "Best Practice", "startLine": 9, "startColumn": 7, @@ -13423,7 +13428,7 @@ "startLine": 11, "startColumn": 5, "endLine": 11, - "endColumn": 25, + "endColumn": 27, "ruleDescription": "Logical IDs must be alphanumeric", "phase": "SCHEMA" }, @@ -13441,7 +13446,7 @@ "startLine": 11, "startColumn": 5, "endLine": 11, - "endColumn": 25, + "endColumn": 27, "ruleDescription": "Fn::ForEach requires the AWS::LanguageExtensions transform", "phase": "PARSE" }, @@ -13459,7 +13464,7 @@ "startLine": 33, "startColumn": 5, "endLine": 33, - "endColumn": 31, + "endColumn": 33, "ruleDescription": "Fn::ForEach requires the AWS::LanguageExtensions transform", "phase": "PARSE" }, @@ -13477,7 +13482,7 @@ "startLine": 36, "startColumn": 11, "endLine": 36, - "endColumn": 34, + "endColumn": 36, "ruleDescription": "Fn::ForEach requires the AWS::LanguageExtensions transform", "phase": "PARSE" } @@ -13942,7 +13947,7 @@ "startLine": 4, "startColumn": 3, "endLine": 4, - "endColumn": 13, + "endColumn": 16, "ruleDescription": "Fn::Equals must take exactly two scalar operands", "phase": "PARSE" }, @@ -13976,10 +13981,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 9, - "startColumn": 7, - "endLine": 9, - "endColumn": 16, + "startLine": 10, + "startColumn": 9, + "endLine": 10, + "endColumn": 24, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -13999,10 +14004,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 12, - "startColumn": 7, - "endLine": 12, - "endColumn": 12, + "startLine": 13, + "startColumn": 9, + "endLine": 13, + "endColumn": 24, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -14203,7 +14208,7 @@ "startLine": 32, "startColumn": 14, "endLine": 32, - "endColumn": 15, + "endColumn": 33, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -14220,10 +14225,10 @@ "propertyPath": "Properties.Role", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 37, - "startColumn": 7, - "endLine": 37, - "endColumn": 11, + "startLine": 38, + "startColumn": 9, + "endLine": 38, + "endColumn": 19, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -14279,10 +14284,10 @@ "propertyPath": "Outputs/lambdaArn/Value.Fn::GetAtt", "suggestedFix": "Add a Condition to the output that implies the target's condition", "category": "Best Practice", - "startLine": 62, - "startColumn": 3, - "endLine": 62, - "endColumn": 12, + "startLine": 63, + "startColumn": 5, + "endLine": 63, + "endColumn": 10, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -14583,7 +14588,7 @@ "startLine": 46, "startColumn": 13, "endLine": 46, - "endColumn": 14, + "endColumn": 70, "ruleDescription": "Substitution variable ${X} requires Fn::Sub", "phase": "LINT" }, @@ -14603,7 +14608,7 @@ "startLine": 67, "startColumn": 13, "endLine": 67, - "endColumn": 14, + "endColumn": 70, "ruleDescription": "Substitution variable ${X} requires Fn::Sub", "phase": "LINT" }, @@ -15056,14 +15061,18 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, + "propertyPath": "Properties.ImageId.Fn::FindInMap.0", "category": "Intrinsic Function", - "startLine": 6, - "startColumn": 3, - "endLine": 6, - "endColumn": 13, + "startLine": 9, + "startColumn": 29, + "endLine": 9, + "endColumn": 35, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "FindInMap map name must exist in Mappings", - "phase": "SCHEMA" + "phase": "SCHEMA", + "context": { + "resolutionSource": "dynamic (mapping 'amimap' not found)" + } }, { "ruleId": "F3004", @@ -15075,7 +15084,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Resources/myInstance", "category": "Reference", "startLine": 6, "startColumn": 3, @@ -15099,7 +15107,7 @@ "startLine": 9, "startColumn": 65, "endLine": 9, - "endColumn": 66, + "endColumn": 92, "ruleDescription": "Fn::FindInMap operands must be strings or one of Ref/Fn::FindInMap", "phase": "PARSE" }, @@ -15158,10 +15166,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 10, - "startColumn": 7, - "endLine": 10, - "endColumn": 15, + "startLine": 11, + "startColumn": 9, + "endLine": 11, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -15224,7 +15232,7 @@ "startLine": 6, "startColumn": 7, "endLine": 6, - "endColumn": 40, + "endColumn": 42, "ruleDescription": "Mappings are appropriately configured", "phase": "LINT" }, @@ -15300,7 +15308,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Subnet" }, - "propertyPath": "Resources/mySubnet1", "category": "Reference", "startLine": 10, "startColumn": 3, @@ -15416,12 +15423,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Subnet" }, - "propertyPath": "Properties.AvailabilityZone", + "propertyPath": "Properties.AvailabilityZone.Fn::Select.1.Fn::GetAZs.Fn::GetAtt.1", "suggestedFix": "Check the resource type documentation for valid GetAtt attributes", "category": "Intrinsic Function", - "startLine": 33, - "startColumn": 7, - "endLine": 33, + "startLine": 36, + "startColumn": 13, + "endLine": 36, "endColumn": 23, "ruleDescription": "GetAtt attribute must exist on target resource type", "phase": "LINT" @@ -15539,10 +15546,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 15, - "startColumn": 7, - "endLine": 15, - "endColumn": 23, + "startLine": 16, + "startColumn": 9, + "endLine": 16, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -15606,10 +15613,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 7, - "endLine": 24, - "endColumn": 23, + "startLine": 25, + "startColumn": 9, + "endLine": 25, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -15673,10 +15680,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 33, - "startColumn": 7, - "endLine": 33, - "endColumn": 23, + "startLine": 34, + "startColumn": 9, + "endLine": 34, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -15845,10 +15852,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 10, - "startColumn": 7, - "endLine": 10, - "endColumn": 15, + "startLine": 11, + "startColumn": 9, + "endLine": 11, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -15892,10 +15899,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 20, - "startColumn": 7, - "endLine": 20, - "endColumn": 15, + "startLine": 21, + "startColumn": 9, + "endLine": 21, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -16039,13 +16046,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData", + "propertyPath": "Properties.UserData.Fn::Sub.1.myPackage", "suggestedFix": "Check that the Ref target exists as a resource, parameter, or pseudo-parameter", "category": "Intrinsic Function", - "startLine": 65, - "startColumn": 7, - "endLine": 65, - "endColumn": 15, + "startLine": 69, + "startColumn": 11, + "endLine": 69, + "endColumn": 20, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA", @@ -16063,7 +16070,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "Resources/mySecurityGroupVpc1", "category": "Reference", "startLine": 8, "startColumn": 3, @@ -16082,7 +16088,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "Resources/mySecurityGroupVpc2", "category": "Reference", "startLine": 20, "startColumn": 3, @@ -16661,10 +16666,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 65, - "startColumn": 7, - "endLine": 65, - "endColumn": 15, + "startLine": 66, + "startColumn": 9, + "endLine": 66, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -17078,10 +17083,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 27, - "startColumn": 7, - "endLine": 27, - "endColumn": 23, + "startLine": 28, + "startColumn": 9, + "endLine": 28, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -17284,10 +17289,10 @@ "propertyPath": "Properties.Listeners.0.InstancePort", "suggestedFix": "Check that the Ref target exists as a resource, parameter, or pseudo-parameter", "category": "Intrinsic Function", - "startLine": 119, - "startColumn": 11, - "endLine": 119, - "endColumn": 23, + "startLine": 120, + "startColumn": 13, + "endLine": 120, + "endColumn": 16, "documentationUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html", "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA" @@ -17835,11 +17840,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance1" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 23, - "startColumn": 3, - "endLine": 23, - "endColumn": 17, + "startLine": 24, + "startColumn": 5, + "endLine": 24, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -17928,10 +17934,10 @@ }, "propertyPath": "Outputs/myErrorOutput/Value.Fn::GetAtt.1", "category": "Structure", - "startLine": 228, - "startColumn": 3, - "endLine": 228, - "endColumn": 16, + "startLine": 229, + "startColumn": 5, + "endLine": 229, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -18185,12 +18191,12 @@ "entityType": "Resource", "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer" }, - "propertyPath": "Properties.HealthCheck.Target.Fn::Join", + "propertyPath": "Properties.HealthCheck.Target.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 125, - "startColumn": 11, - "endLine": 125, - "endColumn": 19, + "startLine": 126, + "startColumn": 15, + "endLine": 126, + "endColumn": 17, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -18429,10 +18435,10 @@ }, "propertyPath": "Properties.AvailabilityZones", "category": "Best Practice", - "startLine": 113, - "startColumn": 7, - "endLine": 113, - "endColumn": 24, + "startLine": 114, + "startColumn": 9, + "endLine": 114, + "endColumn": 19, "documentationUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -18992,7 +18998,7 @@ "entityType": "Resource", "resourceType": "AWS::SSM::Parameter" }, - "propertyPath": "Properties.Value", + "propertyPath": "Properties.Value.Fn::GetAtt.1", "suggestedFix": "Check the resource type documentation for valid GetAtt attributes", "category": "Intrinsic Function", "startLine": 15, @@ -19072,7 +19078,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, - "propertyPath": "Properties.NotificationConfiguration.TopicConfigurations.0.Topic", + "propertyPath": "Properties.NotificationConfiguration.TopicConfigurations.0.Topic.Fn::Sub", "category": "Best Practice", "startLine": 9, "startColumn": 11, @@ -19119,7 +19125,7 @@ "startLine": 9, "startColumn": 11, "endLine": 9, - "endColumn": 18, + "endColumn": 16, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -19138,7 +19144,7 @@ "startLine": 21, "startColumn": 13, "endLine": 21, - "endColumn": 20, + "endColumn": 21, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -19995,7 +20001,7 @@ "startLine": 12, "startColumn": 20, "endLine": 12, - "endColumn": 21, + "endColumn": 42, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-rds", "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA" @@ -20483,12 +20489,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.SnapStart", + "propertyPath": "Properties.SnapStart.ApplyOn", "suggestedFix": "Add an AWS::Lambda::Version resource that references this function", "category": "Best Practice", - "startLine": 13, - "startColumn": 7, - "endLine": 13, + "startLine": 14, + "startColumn": 9, + "endLine": 14, "endColumn": 16, "ruleDescription": "Validate that SnapStart is properly configured", "phase": "LINT" @@ -20583,12 +20589,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.SnapStart", + "propertyPath": "Properties.SnapStart.ApplyOn", "suggestedFix": "Add an AWS::Lambda::Version resource that references this function", "category": "Best Practice", - "startLine": 12, - "startColumn": 7, - "endLine": 12, + "startLine": 13, + "startColumn": 9, + "endLine": 13, "endColumn": 16, "ruleDescription": "Validate that SnapStart is properly configured", "phase": "LINT" @@ -20908,11 +20914,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Runtime", "category": "Resource", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 11, + "startLine": 7, + "startColumn": 7, + "endLine": 7, + "endColumn": 14, "ruleDescription": "Lambda ZipFile requires nodejs or python runtime", "phase": "LINT" }, @@ -21127,7 +21134,7 @@ "startLine": 35, "startColumn": 46, "endLine": 35, - "endColumn": 47, + "endColumn": 58, "ruleDescription": "Invalid YAML/JSON syntax", "phase": "PARSE" }, @@ -21146,7 +21153,7 @@ "startLine": 36, "startColumn": 51, "endLine": 36, - "endColumn": 52, + "endColumn": 63, "ruleDescription": "Invalid YAML/JSON syntax", "phase": "PARSE" }, @@ -21275,10 +21282,10 @@ "resourceType": "AWS::S3::Bucket" }, "category": "Best Practice", - "startLine": 16, - "startColumn": 3, - "endLine": 16, - "endColumn": 29, + "startLine": 18, + "startColumn": 5, + "endLine": 18, + "endColumn": 19, "ruleDescription": "Check resources with UpdateReplacePolicy/DeletionPolicy have both", "phase": "LINT" }, @@ -21293,10 +21300,10 @@ "resourceType": "AWS::S3::Bucket" }, "category": "Best Practice", - "startLine": 20, - "startColumn": 3, - "endLine": 20, - "endColumn": 27, + "startLine": 22, + "startColumn": 5, + "endLine": 22, + "endColumn": 24, "ruleDescription": "Check resources with UpdateReplacePolicy/DeletionPolicy have both", "phase": "LINT" }, @@ -21311,10 +21318,10 @@ "resourceType": "AWS::S3::Bucket" }, "category": "Best Practice", - "startLine": 24, - "startColumn": 3, - "endLine": 24, - "endColumn": 22, + "startLine": 26, + "startColumn": 5, + "endLine": 26, + "endColumn": 19, "ruleDescription": "Check resources with UpdateReplacePolicy/DeletionPolicy have both", "phase": "LINT" }, @@ -46091,12 +46098,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18, - "startColumn": 11, - "endLine": 18, - "endColumn": 16, + "startLine": 20, + "startColumn": 15, + "endLine": 20, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46110,12 +46117,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18, - "startColumn": 11, - "endLine": 18, - "endColumn": 16, + "startLine": 55, + "startColumn": 15, + "endLine": 55, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46129,12 +46136,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18, - "startColumn": 11, - "endLine": 18, - "endColumn": 16, + "startLine": 61, + "startColumn": 15, + "endLine": 61, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46148,12 +46155,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 117, - "startColumn": 11, - "endLine": 117, - "endColumn": 16, + "startLine": 119, + "startColumn": 15, + "endLine": 119, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46167,12 +46174,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 117, - "startColumn": 11, - "endLine": 117, - "endColumn": 16, + "startLine": 154, + "startColumn": 15, + "endLine": 154, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46186,12 +46193,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 117, - "startColumn": 11, - "endLine": 117, - "endColumn": 16, + "startLine": 160, + "startColumn": 15, + "endLine": 160, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46205,12 +46212,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 216, - "startColumn": 11, - "endLine": 216, - "endColumn": 16, + "startLine": 218, + "startColumn": 15, + "endLine": 218, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46224,12 +46231,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 216, - "startColumn": 11, - "endLine": 216, - "endColumn": 16, + "startLine": 253, + "startColumn": 15, + "endLine": 253, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46243,12 +46250,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 216, - "startColumn": 11, - "endLine": 216, - "endColumn": 16, + "startLine": 259, + "startColumn": 15, + "endLine": 259, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46262,12 +46269,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 315, - "startColumn": 11, - "endLine": 315, - "endColumn": 16, + "startLine": 317, + "startColumn": 15, + "endLine": 317, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46281,12 +46288,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 315, - "startColumn": 11, - "endLine": 315, - "endColumn": 16, + "startLine": 352, + "startColumn": 15, + "endLine": 352, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46300,12 +46307,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 315, - "startColumn": 11, - "endLine": 315, - "endColumn": 16, + "startLine": 358, + "startColumn": 15, + "endLine": 358, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46319,12 +46326,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 414, - "startColumn": 11, - "endLine": 414, - "endColumn": 16, + "startLine": 416, + "startColumn": 15, + "endLine": 416, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46338,12 +46345,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 414, - "startColumn": 11, - "endLine": 414, - "endColumn": 16, + "startLine": 451, + "startColumn": 15, + "endLine": 451, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46357,12 +46364,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 414, - "startColumn": 11, - "endLine": 414, - "endColumn": 16, + "startLine": 457, + "startColumn": 15, + "endLine": 457, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46376,12 +46383,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 513, - "startColumn": 11, - "endLine": 513, - "endColumn": 16, + "startLine": 515, + "startColumn": 15, + "endLine": 515, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46395,12 +46402,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 513, - "startColumn": 11, - "endLine": 513, - "endColumn": 16, + "startLine": 550, + "startColumn": 15, + "endLine": 550, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46414,12 +46421,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 513, - "startColumn": 11, - "endLine": 513, - "endColumn": 16, + "startLine": 556, + "startColumn": 15, + "endLine": 556, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46433,12 +46440,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 612, - "startColumn": 11, - "endLine": 612, - "endColumn": 16, + "startLine": 614, + "startColumn": 15, + "endLine": 614, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46452,12 +46459,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 612, - "startColumn": 11, - "endLine": 612, - "endColumn": 16, + "startLine": 649, + "startColumn": 15, + "endLine": 649, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46471,12 +46478,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 612, - "startColumn": 11, - "endLine": 612, - "endColumn": 16, + "startLine": 655, + "startColumn": 15, + "endLine": 655, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46490,12 +46497,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 711, - "startColumn": 11, - "endLine": 711, - "endColumn": 16, + "startLine": 713, + "startColumn": 15, + "endLine": 713, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46509,12 +46516,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 711, - "startColumn": 11, - "endLine": 711, - "endColumn": 16, + "startLine": 748, + "startColumn": 15, + "endLine": 748, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46528,12 +46535,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 711, - "startColumn": 11, - "endLine": 711, - "endColumn": 16, + "startLine": 754, + "startColumn": 15, + "endLine": 754, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46547,12 +46554,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 810, - "startColumn": 11, - "endLine": 810, - "endColumn": 16, + "startLine": 812, + "startColumn": 15, + "endLine": 812, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46566,12 +46573,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 810, - "startColumn": 11, - "endLine": 810, - "endColumn": 16, + "startLine": 847, + "startColumn": 15, + "endLine": 847, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46585,12 +46592,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 810, - "startColumn": 11, - "endLine": 810, - "endColumn": 16, + "startLine": 853, + "startColumn": 15, + "endLine": 853, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46604,12 +46611,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 909, - "startColumn": 11, - "endLine": 909, - "endColumn": 16, + "startLine": 911, + "startColumn": 15, + "endLine": 911, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46623,12 +46630,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 909, - "startColumn": 11, - "endLine": 909, - "endColumn": 16, + "startLine": 946, + "startColumn": 15, + "endLine": 946, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46642,12 +46649,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 909, - "startColumn": 11, - "endLine": 909, - "endColumn": 16, + "startLine": 952, + "startColumn": 15, + "endLine": 952, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46661,12 +46668,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1008, - "startColumn": 11, - "endLine": 1008, - "endColumn": 16, + "startLine": 1010, + "startColumn": 15, + "endLine": 1010, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46680,12 +46687,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1008, - "startColumn": 11, - "endLine": 1008, - "endColumn": 16, + "startLine": 1045, + "startColumn": 15, + "endLine": 1045, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46699,12 +46706,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1008, - "startColumn": 11, - "endLine": 1008, - "endColumn": 16, + "startLine": 1051, + "startColumn": 15, + "endLine": 1051, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46718,12 +46725,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1107, - "startColumn": 11, - "endLine": 1107, - "endColumn": 16, + "startLine": 1109, + "startColumn": 15, + "endLine": 1109, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46737,12 +46744,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1107, - "startColumn": 11, - "endLine": 1107, - "endColumn": 16, + "startLine": 1144, + "startColumn": 15, + "endLine": 1144, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46756,12 +46763,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1107, - "startColumn": 11, - "endLine": 1107, - "endColumn": 16, + "startLine": 1150, + "startColumn": 15, + "endLine": 1150, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46775,12 +46782,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1206, - "startColumn": 11, - "endLine": 1206, - "endColumn": 16, + "startLine": 1208, + "startColumn": 15, + "endLine": 1208, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46794,12 +46801,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1206, - "startColumn": 11, - "endLine": 1206, - "endColumn": 16, + "startLine": 1243, + "startColumn": 15, + "endLine": 1243, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46813,12 +46820,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1206, - "startColumn": 11, - "endLine": 1206, - "endColumn": 16, + "startLine": 1249, + "startColumn": 15, + "endLine": 1249, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46832,12 +46839,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1305, - "startColumn": 11, - "endLine": 1305, - "endColumn": 16, + "startLine": 1307, + "startColumn": 15, + "endLine": 1307, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46851,12 +46858,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1305, - "startColumn": 11, - "endLine": 1305, - "endColumn": 16, + "startLine": 1342, + "startColumn": 15, + "endLine": 1342, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46870,12 +46877,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1305, - "startColumn": 11, - "endLine": 1305, - "endColumn": 16, + "startLine": 1348, + "startColumn": 15, + "endLine": 1348, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46889,12 +46896,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1404, - "startColumn": 11, - "endLine": 1404, - "endColumn": 16, + "startLine": 1406, + "startColumn": 15, + "endLine": 1406, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46908,12 +46915,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1404, - "startColumn": 11, - "endLine": 1404, - "endColumn": 16, + "startLine": 1441, + "startColumn": 15, + "endLine": 1441, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46927,12 +46934,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1404, - "startColumn": 11, - "endLine": 1404, - "endColumn": 16, + "startLine": 1447, + "startColumn": 15, + "endLine": 1447, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46946,12 +46953,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1503, - "startColumn": 11, - "endLine": 1503, - "endColumn": 16, + "startLine": 1505, + "startColumn": 15, + "endLine": 1505, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46965,12 +46972,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1503, - "startColumn": 11, - "endLine": 1503, - "endColumn": 16, + "startLine": 1540, + "startColumn": 15, + "endLine": 1540, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -46984,12 +46991,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1503, - "startColumn": 11, - "endLine": 1503, - "endColumn": 16, + "startLine": 1546, + "startColumn": 15, + "endLine": 1546, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47003,12 +47010,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1602, - "startColumn": 11, - "endLine": 1602, - "endColumn": 16, + "startLine": 1604, + "startColumn": 15, + "endLine": 1604, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47022,12 +47029,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1602, - "startColumn": 11, - "endLine": 1602, - "endColumn": 16, + "startLine": 1639, + "startColumn": 15, + "endLine": 1639, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47041,12 +47048,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1602, - "startColumn": 11, - "endLine": 1602, - "endColumn": 16, + "startLine": 1645, + "startColumn": 15, + "endLine": 1645, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47060,12 +47067,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1701, - "startColumn": 11, - "endLine": 1701, - "endColumn": 16, + "startLine": 1703, + "startColumn": 15, + "endLine": 1703, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47079,12 +47086,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1701, - "startColumn": 11, - "endLine": 1701, - "endColumn": 16, + "startLine": 1738, + "startColumn": 15, + "endLine": 1738, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47098,12 +47105,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1701, - "startColumn": 11, - "endLine": 1701, - "endColumn": 16, + "startLine": 1744, + "startColumn": 15, + "endLine": 1744, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47117,12 +47124,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1800, - "startColumn": 11, - "endLine": 1800, - "endColumn": 16, + "startLine": 1802, + "startColumn": 15, + "endLine": 1802, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47136,12 +47143,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1800, - "startColumn": 11, - "endLine": 1800, - "endColumn": 16, + "startLine": 1837, + "startColumn": 15, + "endLine": 1837, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47155,12 +47162,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1800, - "startColumn": 11, - "endLine": 1800, - "endColumn": 16, + "startLine": 1843, + "startColumn": 15, + "endLine": 1843, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47174,12 +47181,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1899, - "startColumn": 11, - "endLine": 1899, - "endColumn": 16, + "startLine": 1901, + "startColumn": 15, + "endLine": 1901, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47193,12 +47200,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1899, - "startColumn": 11, - "endLine": 1899, - "endColumn": 16, + "startLine": 1936, + "startColumn": 15, + "endLine": 1936, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47212,12 +47219,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1899, - "startColumn": 11, - "endLine": 1899, - "endColumn": 16, + "startLine": 1942, + "startColumn": 15, + "endLine": 1942, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47231,12 +47238,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 1998, - "startColumn": 11, - "endLine": 1998, - "endColumn": 16, + "startLine": 2000, + "startColumn": 15, + "endLine": 2000, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47250,12 +47257,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1998, - "startColumn": 11, - "endLine": 1998, - "endColumn": 16, + "startLine": 2035, + "startColumn": 15, + "endLine": 2035, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47269,12 +47276,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 1998, - "startColumn": 11, - "endLine": 1998, - "endColumn": 16, + "startLine": 2041, + "startColumn": 15, + "endLine": 2041, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47288,12 +47295,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2097, - "startColumn": 11, - "endLine": 2097, - "endColumn": 16, + "startLine": 2099, + "startColumn": 15, + "endLine": 2099, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47307,12 +47314,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2097, - "startColumn": 11, - "endLine": 2097, - "endColumn": 16, + "startLine": 2134, + "startColumn": 15, + "endLine": 2134, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47326,12 +47333,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2097, - "startColumn": 11, - "endLine": 2097, - "endColumn": 16, + "startLine": 2140, + "startColumn": 15, + "endLine": 2140, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47345,12 +47352,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2196, - "startColumn": 11, - "endLine": 2196, - "endColumn": 16, + "startLine": 2198, + "startColumn": 15, + "endLine": 2198, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47364,12 +47371,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2196, - "startColumn": 11, - "endLine": 2196, - "endColumn": 16, + "startLine": 2233, + "startColumn": 15, + "endLine": 2233, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47383,12 +47390,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2196, - "startColumn": 11, - "endLine": 2196, - "endColumn": 16, + "startLine": 2239, + "startColumn": 15, + "endLine": 2239, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47402,12 +47409,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2295, - "startColumn": 11, - "endLine": 2295, - "endColumn": 16, + "startLine": 2297, + "startColumn": 15, + "endLine": 2297, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47421,12 +47428,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2295, - "startColumn": 11, - "endLine": 2295, - "endColumn": 16, + "startLine": 2332, + "startColumn": 15, + "endLine": 2332, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47440,12 +47447,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2295, - "startColumn": 11, - "endLine": 2295, - "endColumn": 16, + "startLine": 2338, + "startColumn": 15, + "endLine": 2338, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47459,12 +47466,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2394, - "startColumn": 11, - "endLine": 2394, - "endColumn": 16, + "startLine": 2396, + "startColumn": 15, + "endLine": 2396, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47478,12 +47485,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2394, - "startColumn": 11, - "endLine": 2394, - "endColumn": 16, + "startLine": 2431, + "startColumn": 15, + "endLine": 2431, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47497,12 +47504,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2394, - "startColumn": 11, - "endLine": 2394, - "endColumn": 16, + "startLine": 2437, + "startColumn": 15, + "endLine": 2437, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47516,12 +47523,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2493, - "startColumn": 11, - "endLine": 2493, - "endColumn": 16, + "startLine": 2495, + "startColumn": 15, + "endLine": 2495, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47535,12 +47542,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2493, - "startColumn": 11, - "endLine": 2493, - "endColumn": 16, + "startLine": 2530, + "startColumn": 15, + "endLine": 2530, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47554,12 +47561,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2493, - "startColumn": 11, - "endLine": 2493, - "endColumn": 16, + "startLine": 2536, + "startColumn": 15, + "endLine": 2536, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47573,12 +47580,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2592, - "startColumn": 11, - "endLine": 2592, - "endColumn": 16, + "startLine": 2594, + "startColumn": 15, + "endLine": 2594, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47592,12 +47599,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2592, - "startColumn": 11, - "endLine": 2592, - "endColumn": 16, + "startLine": 2629, + "startColumn": 15, + "endLine": 2629, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47611,12 +47618,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2592, - "startColumn": 11, - "endLine": 2592, - "endColumn": 16, + "startLine": 2635, + "startColumn": 15, + "endLine": 2635, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47630,12 +47637,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2691, - "startColumn": 11, - "endLine": 2691, - "endColumn": 16, + "startLine": 2693, + "startColumn": 15, + "endLine": 2693, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47649,12 +47656,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2691, - "startColumn": 11, - "endLine": 2691, - "endColumn": 16, + "startLine": 2728, + "startColumn": 15, + "endLine": 2728, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47668,12 +47675,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2691, - "startColumn": 11, - "endLine": 2691, - "endColumn": 16, + "startLine": 2734, + "startColumn": 15, + "endLine": 2734, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47687,12 +47694,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2790, - "startColumn": 11, - "endLine": 2790, - "endColumn": 16, + "startLine": 2792, + "startColumn": 15, + "endLine": 2792, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47706,12 +47713,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2790, - "startColumn": 11, - "endLine": 2790, - "endColumn": 16, + "startLine": 2827, + "startColumn": 15, + "endLine": 2827, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47725,12 +47732,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2790, - "startColumn": 11, - "endLine": 2790, - "endColumn": 16, + "startLine": 2833, + "startColumn": 15, + "endLine": 2833, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47744,12 +47751,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2889, - "startColumn": 11, - "endLine": 2889, - "endColumn": 16, + "startLine": 2891, + "startColumn": 15, + "endLine": 2891, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47763,12 +47770,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2889, - "startColumn": 11, - "endLine": 2889, - "endColumn": 16, + "startLine": 2926, + "startColumn": 15, + "endLine": 2926, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47782,12 +47789,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2889, - "startColumn": 11, - "endLine": 2889, - "endColumn": 16, + "startLine": 2932, + "startColumn": 15, + "endLine": 2932, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47801,12 +47808,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 2988, - "startColumn": 11, - "endLine": 2988, - "endColumn": 16, + "startLine": 2990, + "startColumn": 15, + "endLine": 2990, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47820,12 +47827,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2988, - "startColumn": 11, - "endLine": 2988, - "endColumn": 16, + "startLine": 3025, + "startColumn": 15, + "endLine": 3025, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47839,12 +47846,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 2988, - "startColumn": 11, - "endLine": 2988, - "endColumn": 16, + "startLine": 3031, + "startColumn": 15, + "endLine": 3031, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47858,12 +47865,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3087, - "startColumn": 11, - "endLine": 3087, - "endColumn": 16, + "startLine": 3089, + "startColumn": 15, + "endLine": 3089, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47877,12 +47884,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3087, - "startColumn": 11, - "endLine": 3087, - "endColumn": 16, + "startLine": 3124, + "startColumn": 15, + "endLine": 3124, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47896,12 +47903,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3087, - "startColumn": 11, - "endLine": 3087, - "endColumn": 16, + "startLine": 3130, + "startColumn": 15, + "endLine": 3130, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47915,12 +47922,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3186, - "startColumn": 11, - "endLine": 3186, - "endColumn": 16, + "startLine": 3188, + "startColumn": 15, + "endLine": 3188, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47934,12 +47941,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3186, - "startColumn": 11, - "endLine": 3186, - "endColumn": 16, + "startLine": 3223, + "startColumn": 15, + "endLine": 3223, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47953,12 +47960,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3186, - "startColumn": 11, - "endLine": 3186, - "endColumn": 16, + "startLine": 3229, + "startColumn": 15, + "endLine": 3229, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47972,12 +47979,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3285, - "startColumn": 11, - "endLine": 3285, - "endColumn": 16, + "startLine": 3287, + "startColumn": 15, + "endLine": 3287, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -47991,12 +47998,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3285, - "startColumn": 11, - "endLine": 3285, - "endColumn": 16, + "startLine": 3322, + "startColumn": 15, + "endLine": 3322, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48010,12 +48017,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3285, - "startColumn": 11, - "endLine": 3285, - "endColumn": 16, + "startLine": 3328, + "startColumn": 15, + "endLine": 3328, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48029,12 +48036,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3384, - "startColumn": 11, - "endLine": 3384, - "endColumn": 16, + "startLine": 3386, + "startColumn": 15, + "endLine": 3386, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48048,12 +48055,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3384, - "startColumn": 11, - "endLine": 3384, - "endColumn": 16, + "startLine": 3421, + "startColumn": 15, + "endLine": 3421, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48067,12 +48074,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3384, - "startColumn": 11, - "endLine": 3384, - "endColumn": 16, + "startLine": 3427, + "startColumn": 15, + "endLine": 3427, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48086,12 +48093,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3483, - "startColumn": 11, - "endLine": 3483, - "endColumn": 16, + "startLine": 3485, + "startColumn": 15, + "endLine": 3485, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48105,12 +48112,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3483, - "startColumn": 11, - "endLine": 3483, - "endColumn": 16, + "startLine": 3520, + "startColumn": 15, + "endLine": 3520, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48124,12 +48131,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3483, - "startColumn": 11, - "endLine": 3483, - "endColumn": 16, + "startLine": 3526, + "startColumn": 15, + "endLine": 3526, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48143,12 +48150,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3582, - "startColumn": 11, - "endLine": 3582, - "endColumn": 16, + "startLine": 3584, + "startColumn": 15, + "endLine": 3584, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48162,12 +48169,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3582, - "startColumn": 11, - "endLine": 3582, - "endColumn": 16, + "startLine": 3619, + "startColumn": 15, + "endLine": 3619, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48181,12 +48188,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3582, - "startColumn": 11, - "endLine": 3582, - "endColumn": 16, + "startLine": 3625, + "startColumn": 15, + "endLine": 3625, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48200,12 +48207,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3681, - "startColumn": 11, - "endLine": 3681, - "endColumn": 16, + "startLine": 3683, + "startColumn": 15, + "endLine": 3683, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48219,12 +48226,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3681, - "startColumn": 11, - "endLine": 3681, - "endColumn": 16, + "startLine": 3718, + "startColumn": 15, + "endLine": 3718, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48238,12 +48245,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3681, - "startColumn": 11, - "endLine": 3681, - "endColumn": 16, + "startLine": 3724, + "startColumn": 15, + "endLine": 3724, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48257,12 +48264,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3780, - "startColumn": 11, - "endLine": 3780, - "endColumn": 16, + "startLine": 3782, + "startColumn": 15, + "endLine": 3782, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48276,12 +48283,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3780, - "startColumn": 11, - "endLine": 3780, - "endColumn": 16, + "startLine": 3817, + "startColumn": 15, + "endLine": 3817, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48295,12 +48302,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3780, - "startColumn": 11, - "endLine": 3780, - "endColumn": 16, + "startLine": 3823, + "startColumn": 15, + "endLine": 3823, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48314,12 +48321,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3879, - "startColumn": 11, - "endLine": 3879, - "endColumn": 16, + "startLine": 3881, + "startColumn": 15, + "endLine": 3881, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48333,12 +48340,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3879, - "startColumn": 11, - "endLine": 3879, - "endColumn": 16, + "startLine": 3916, + "startColumn": 15, + "endLine": 3916, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48352,12 +48359,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3879, - "startColumn": 11, - "endLine": 3879, - "endColumn": 16, + "startLine": 3922, + "startColumn": 15, + "endLine": 3922, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48371,12 +48378,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 3978, - "startColumn": 11, - "endLine": 3978, - "endColumn": 16, + "startLine": 3980, + "startColumn": 15, + "endLine": 3980, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48390,12 +48397,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3978, - "startColumn": 11, - "endLine": 3978, - "endColumn": 16, + "startLine": 4015, + "startColumn": 15, + "endLine": 4015, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48409,12 +48416,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 3978, - "startColumn": 11, - "endLine": 3978, - "endColumn": 16, + "startLine": 4021, + "startColumn": 15, + "endLine": 4021, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48428,12 +48435,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4077, - "startColumn": 11, - "endLine": 4077, - "endColumn": 16, + "startLine": 4079, + "startColumn": 15, + "endLine": 4079, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48447,12 +48454,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4077, - "startColumn": 11, - "endLine": 4077, - "endColumn": 16, + "startLine": 4114, + "startColumn": 15, + "endLine": 4114, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48466,12 +48473,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4077, - "startColumn": 11, - "endLine": 4077, - "endColumn": 16, + "startLine": 4120, + "startColumn": 15, + "endLine": 4120, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48485,12 +48492,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4176, - "startColumn": 11, - "endLine": 4176, - "endColumn": 16, + "startLine": 4178, + "startColumn": 15, + "endLine": 4178, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48504,12 +48511,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4176, - "startColumn": 11, - "endLine": 4176, - "endColumn": 16, + "startLine": 4213, + "startColumn": 15, + "endLine": 4213, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48523,12 +48530,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4176, - "startColumn": 11, - "endLine": 4176, - "endColumn": 16, + "startLine": 4219, + "startColumn": 15, + "endLine": 4219, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48542,12 +48549,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4275, - "startColumn": 11, - "endLine": 4275, - "endColumn": 16, + "startLine": 4277, + "startColumn": 15, + "endLine": 4277, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48561,12 +48568,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4275, - "startColumn": 11, - "endLine": 4275, - "endColumn": 16, + "startLine": 4312, + "startColumn": 15, + "endLine": 4312, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48580,12 +48587,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4275, - "startColumn": 11, - "endLine": 4275, - "endColumn": 16, + "startLine": 4318, + "startColumn": 15, + "endLine": 4318, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48599,12 +48606,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4374, - "startColumn": 11, - "endLine": 4374, - "endColumn": 16, + "startLine": 4376, + "startColumn": 15, + "endLine": 4376, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48618,12 +48625,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4374, - "startColumn": 11, - "endLine": 4374, - "endColumn": 16, + "startLine": 4411, + "startColumn": 15, + "endLine": 4411, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48637,12 +48644,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4374, - "startColumn": 11, - "endLine": 4374, - "endColumn": 16, + "startLine": 4417, + "startColumn": 15, + "endLine": 4417, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48656,12 +48663,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4473, - "startColumn": 11, - "endLine": 4473, - "endColumn": 16, + "startLine": 4475, + "startColumn": 15, + "endLine": 4475, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48675,12 +48682,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4473, - "startColumn": 11, - "endLine": 4473, - "endColumn": 16, + "startLine": 4510, + "startColumn": 15, + "endLine": 4510, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48694,12 +48701,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4473, - "startColumn": 11, - "endLine": 4473, - "endColumn": 16, + "startLine": 4516, + "startColumn": 15, + "endLine": 4516, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48713,12 +48720,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4572, - "startColumn": 11, - "endLine": 4572, - "endColumn": 16, + "startLine": 4574, + "startColumn": 15, + "endLine": 4574, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48732,12 +48739,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4572, - "startColumn": 11, - "endLine": 4572, - "endColumn": 16, + "startLine": 4609, + "startColumn": 15, + "endLine": 4609, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48751,12 +48758,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4572, - "startColumn": 11, - "endLine": 4572, - "endColumn": 16, + "startLine": 4615, + "startColumn": 15, + "endLine": 4615, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48770,12 +48777,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4671, - "startColumn": 11, - "endLine": 4671, - "endColumn": 16, + "startLine": 4673, + "startColumn": 15, + "endLine": 4673, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48789,12 +48796,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4671, - "startColumn": 11, - "endLine": 4671, - "endColumn": 16, + "startLine": 4708, + "startColumn": 15, + "endLine": 4708, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48808,12 +48815,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4671, - "startColumn": 11, - "endLine": 4671, - "endColumn": 16, + "startLine": 4714, + "startColumn": 15, + "endLine": 4714, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48827,12 +48834,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4770, - "startColumn": 11, - "endLine": 4770, - "endColumn": 16, + "startLine": 4772, + "startColumn": 15, + "endLine": 4772, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48846,12 +48853,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4770, - "startColumn": 11, - "endLine": 4770, - "endColumn": 16, + "startLine": 4807, + "startColumn": 15, + "endLine": 4807, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48865,12 +48872,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4770, - "startColumn": 11, - "endLine": 4770, - "endColumn": 16, + "startLine": 4813, + "startColumn": 15, + "endLine": 4813, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48884,12 +48891,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4869, - "startColumn": 11, - "endLine": 4869, - "endColumn": 16, + "startLine": 4871, + "startColumn": 15, + "endLine": 4871, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48903,12 +48910,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4869, - "startColumn": 11, - "endLine": 4869, - "endColumn": 16, + "startLine": 4906, + "startColumn": 15, + "endLine": 4906, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48922,12 +48929,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4869, - "startColumn": 11, - "endLine": 4869, - "endColumn": 16, + "startLine": 4912, + "startColumn": 15, + "endLine": 4912, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48941,12 +48948,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 4968, - "startColumn": 11, - "endLine": 4968, - "endColumn": 16, + "startLine": 4970, + "startColumn": 15, + "endLine": 4970, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48960,12 +48967,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4968, - "startColumn": 11, - "endLine": 4968, - "endColumn": 16, + "startLine": 5005, + "startColumn": 15, + "endLine": 5005, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -48979,13 +48986,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 4968, - "startColumn": 11, - "endLine": 4968, - "endColumn": 16, - "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", + "startLine": 5011, + "startColumn": 15, + "endLine": 5011, + "endColumn": 21, + "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, { @@ -48998,12 +49005,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5067, - "startColumn": 11, - "endLine": 5067, - "endColumn": 16, + "startLine": 5069, + "startColumn": 15, + "endLine": 5069, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49017,12 +49024,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5067, - "startColumn": 11, - "endLine": 5067, - "endColumn": 16, + "startLine": 5104, + "startColumn": 15, + "endLine": 5104, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49036,12 +49043,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5067, - "startColumn": 11, - "endLine": 5067, - "endColumn": 16, + "startLine": 5110, + "startColumn": 15, + "endLine": 5110, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49055,12 +49062,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5166, - "startColumn": 11, - "endLine": 5166, - "endColumn": 16, + "startLine": 5168, + "startColumn": 15, + "endLine": 5168, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49074,12 +49081,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5166, - "startColumn": 11, - "endLine": 5166, - "endColumn": 16, + "startLine": 5203, + "startColumn": 15, + "endLine": 5203, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49093,12 +49100,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5166, - "startColumn": 11, - "endLine": 5166, - "endColumn": 16, + "startLine": 5209, + "startColumn": 15, + "endLine": 5209, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49112,12 +49119,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5265, - "startColumn": 11, - "endLine": 5265, - "endColumn": 16, + "startLine": 5267, + "startColumn": 15, + "endLine": 5267, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49131,12 +49138,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5265, - "startColumn": 11, - "endLine": 5265, - "endColumn": 16, + "startLine": 5302, + "startColumn": 15, + "endLine": 5302, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49150,12 +49157,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5265, - "startColumn": 11, - "endLine": 5265, - "endColumn": 16, + "startLine": 5308, + "startColumn": 15, + "endLine": 5308, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49169,12 +49176,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5364, - "startColumn": 11, - "endLine": 5364, - "endColumn": 16, + "startLine": 5366, + "startColumn": 15, + "endLine": 5366, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49188,12 +49195,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5364, - "startColumn": 11, - "endLine": 5364, - "endColumn": 16, + "startLine": 5401, + "startColumn": 15, + "endLine": 5401, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49207,12 +49214,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5364, - "startColumn": 11, - "endLine": 5364, - "endColumn": 16, + "startLine": 5407, + "startColumn": 15, + "endLine": 5407, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49226,12 +49233,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5463, - "startColumn": 11, - "endLine": 5463, - "endColumn": 16, + "startLine": 5465, + "startColumn": 15, + "endLine": 5465, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49245,12 +49252,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5463, - "startColumn": 11, - "endLine": 5463, - "endColumn": 16, + "startLine": 5500, + "startColumn": 15, + "endLine": 5500, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49264,12 +49271,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5463, - "startColumn": 11, - "endLine": 5463, - "endColumn": 16, + "startLine": 5506, + "startColumn": 15, + "endLine": 5506, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49283,12 +49290,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5562, - "startColumn": 11, - "endLine": 5562, - "endColumn": 16, + "startLine": 5564, + "startColumn": 15, + "endLine": 5564, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49302,12 +49309,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5562, - "startColumn": 11, - "endLine": 5562, - "endColumn": 16, + "startLine": 5599, + "startColumn": 15, + "endLine": 5599, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49321,12 +49328,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5562, - "startColumn": 11, - "endLine": 5562, - "endColumn": 16, + "startLine": 5605, + "startColumn": 15, + "endLine": 5605, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49340,12 +49347,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5661, - "startColumn": 11, - "endLine": 5661, - "endColumn": 16, + "startLine": 5663, + "startColumn": 15, + "endLine": 5663, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49359,12 +49366,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5661, - "startColumn": 11, - "endLine": 5661, - "endColumn": 16, + "startLine": 5698, + "startColumn": 15, + "endLine": 5698, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49378,12 +49385,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5661, - "startColumn": 11, - "endLine": 5661, - "endColumn": 16, + "startLine": 5704, + "startColumn": 15, + "endLine": 5704, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49397,12 +49404,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5760, - "startColumn": 11, - "endLine": 5760, - "endColumn": 16, + "startLine": 5762, + "startColumn": 15, + "endLine": 5762, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49416,12 +49423,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5760, - "startColumn": 11, - "endLine": 5760, - "endColumn": 16, + "startLine": 5797, + "startColumn": 15, + "endLine": 5797, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49435,12 +49442,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5760, - "startColumn": 11, - "endLine": 5760, - "endColumn": 16, + "startLine": 5803, + "startColumn": 15, + "endLine": 5803, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49454,12 +49461,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5859, - "startColumn": 11, - "endLine": 5859, - "endColumn": 16, + "startLine": 5861, + "startColumn": 15, + "endLine": 5861, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49473,12 +49480,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5859, - "startColumn": 11, - "endLine": 5859, - "endColumn": 16, + "startLine": 5896, + "startColumn": 15, + "endLine": 5896, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49492,12 +49499,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5859, - "startColumn": 11, - "endLine": 5859, - "endColumn": 16, + "startLine": 5902, + "startColumn": 15, + "endLine": 5902, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49511,12 +49518,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 5958, - "startColumn": 11, - "endLine": 5958, - "endColumn": 16, + "startLine": 5960, + "startColumn": 15, + "endLine": 5960, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49530,12 +49537,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5958, - "startColumn": 11, - "endLine": 5958, - "endColumn": 16, + "startLine": 5995, + "startColumn": 15, + "endLine": 5995, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49549,12 +49556,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 5958, - "startColumn": 11, - "endLine": 5958, - "endColumn": 16, + "startLine": 6001, + "startColumn": 15, + "endLine": 6001, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49568,12 +49575,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6057, - "startColumn": 11, - "endLine": 6057, - "endColumn": 16, + "startLine": 6059, + "startColumn": 15, + "endLine": 6059, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49587,12 +49594,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6057, - "startColumn": 11, - "endLine": 6057, - "endColumn": 16, + "startLine": 6094, + "startColumn": 15, + "endLine": 6094, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49606,12 +49613,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6057, - "startColumn": 11, - "endLine": 6057, - "endColumn": 16, + "startLine": 6100, + "startColumn": 15, + "endLine": 6100, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49625,12 +49632,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6156, - "startColumn": 11, - "endLine": 6156, - "endColumn": 16, + "startLine": 6158, + "startColumn": 15, + "endLine": 6158, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49644,12 +49651,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6156, - "startColumn": 11, - "endLine": 6156, - "endColumn": 16, + "startLine": 6193, + "startColumn": 15, + "endLine": 6193, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49663,12 +49670,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6156, - "startColumn": 11, - "endLine": 6156, - "endColumn": 16, + "startLine": 6199, + "startColumn": 15, + "endLine": 6199, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49682,12 +49689,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6255, - "startColumn": 11, - "endLine": 6255, - "endColumn": 16, + "startLine": 6257, + "startColumn": 15, + "endLine": 6257, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49701,12 +49708,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6255, - "startColumn": 11, - "endLine": 6255, - "endColumn": 16, + "startLine": 6292, + "startColumn": 15, + "endLine": 6292, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49720,12 +49727,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6255, - "startColumn": 11, - "endLine": 6255, - "endColumn": 16, + "startLine": 6298, + "startColumn": 15, + "endLine": 6298, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49739,12 +49746,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6354, - "startColumn": 11, - "endLine": 6354, - "endColumn": 16, + "startLine": 6356, + "startColumn": 15, + "endLine": 6356, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49758,12 +49765,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6354, - "startColumn": 11, - "endLine": 6354, - "endColumn": 16, + "startLine": 6391, + "startColumn": 15, + "endLine": 6391, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49777,12 +49784,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6354, - "startColumn": 11, - "endLine": 6354, - "endColumn": 16, + "startLine": 6397, + "startColumn": 15, + "endLine": 6397, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49796,12 +49803,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6453, - "startColumn": 11, - "endLine": 6453, - "endColumn": 16, + "startLine": 6455, + "startColumn": 15, + "endLine": 6455, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49815,12 +49822,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6453, - "startColumn": 11, - "endLine": 6453, - "endColumn": 16, + "startLine": 6490, + "startColumn": 15, + "endLine": 6490, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49834,12 +49841,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6453, - "startColumn": 11, - "endLine": 6453, - "endColumn": 16, + "startLine": 6496, + "startColumn": 15, + "endLine": 6496, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49853,12 +49860,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6552, - "startColumn": 11, - "endLine": 6552, - "endColumn": 16, + "startLine": 6554, + "startColumn": 15, + "endLine": 6554, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49872,12 +49879,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6552, - "startColumn": 11, - "endLine": 6552, - "endColumn": 16, + "startLine": 6589, + "startColumn": 15, + "endLine": 6589, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49891,12 +49898,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6552, - "startColumn": 11, - "endLine": 6552, - "endColumn": 16, + "startLine": 6595, + "startColumn": 15, + "endLine": 6595, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49910,12 +49917,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6651, - "startColumn": 11, - "endLine": 6651, - "endColumn": 16, + "startLine": 6653, + "startColumn": 15, + "endLine": 6653, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49929,12 +49936,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6651, - "startColumn": 11, - "endLine": 6651, - "endColumn": 16, + "startLine": 6688, + "startColumn": 15, + "endLine": 6688, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49948,12 +49955,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6651, - "startColumn": 11, - "endLine": 6651, - "endColumn": 16, + "startLine": 6694, + "startColumn": 15, + "endLine": 6694, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49967,12 +49974,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6750, - "startColumn": 11, - "endLine": 6750, - "endColumn": 16, + "startLine": 6752, + "startColumn": 15, + "endLine": 6752, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -49986,12 +49993,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6750, - "startColumn": 11, - "endLine": 6750, - "endColumn": 16, + "startLine": 6787, + "startColumn": 15, + "endLine": 6787, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50005,12 +50012,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6750, - "startColumn": 11, - "endLine": 6750, - "endColumn": 16, + "startLine": 6793, + "startColumn": 15, + "endLine": 6793, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50024,12 +50031,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6849, - "startColumn": 11, - "endLine": 6849, - "endColumn": 16, + "startLine": 6851, + "startColumn": 15, + "endLine": 6851, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50043,12 +50050,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6849, - "startColumn": 11, - "endLine": 6849, - "endColumn": 16, + "startLine": 6886, + "startColumn": 15, + "endLine": 6886, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50062,12 +50069,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6849, - "startColumn": 11, - "endLine": 6849, - "endColumn": 16, + "startLine": 6892, + "startColumn": 15, + "endLine": 6892, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50081,12 +50088,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 6948, - "startColumn": 11, - "endLine": 6948, - "endColumn": 16, + "startLine": 6950, + "startColumn": 15, + "endLine": 6950, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50100,12 +50107,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6948, - "startColumn": 11, - "endLine": 6948, - "endColumn": 16, + "startLine": 6985, + "startColumn": 15, + "endLine": 6985, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50119,12 +50126,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 6948, - "startColumn": 11, - "endLine": 6948, - "endColumn": 16, + "startLine": 6991, + "startColumn": 15, + "endLine": 6991, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50138,12 +50145,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7047, - "startColumn": 11, - "endLine": 7047, - "endColumn": 16, + "startLine": 7049, + "startColumn": 15, + "endLine": 7049, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50157,12 +50164,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7047, - "startColumn": 11, - "endLine": 7047, - "endColumn": 16, + "startLine": 7084, + "startColumn": 15, + "endLine": 7084, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50176,12 +50183,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7047, - "startColumn": 11, - "endLine": 7047, - "endColumn": 16, + "startLine": 7090, + "startColumn": 15, + "endLine": 7090, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50195,12 +50202,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7146, - "startColumn": 11, - "endLine": 7146, - "endColumn": 16, + "startLine": 7148, + "startColumn": 15, + "endLine": 7148, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50214,12 +50221,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7146, - "startColumn": 11, - "endLine": 7146, - "endColumn": 16, + "startLine": 7183, + "startColumn": 15, + "endLine": 7183, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50233,12 +50240,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7146, - "startColumn": 11, - "endLine": 7146, - "endColumn": 16, + "startLine": 7189, + "startColumn": 15, + "endLine": 7189, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50252,12 +50259,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7245, - "startColumn": 11, - "endLine": 7245, - "endColumn": 16, + "startLine": 7247, + "startColumn": 15, + "endLine": 7247, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50271,12 +50278,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7245, - "startColumn": 11, - "endLine": 7245, - "endColumn": 16, + "startLine": 7282, + "startColumn": 15, + "endLine": 7282, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50290,12 +50297,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7245, - "startColumn": 11, - "endLine": 7245, - "endColumn": 16, + "startLine": 7288, + "startColumn": 15, + "endLine": 7288, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50309,12 +50316,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7344, - "startColumn": 11, - "endLine": 7344, - "endColumn": 16, + "startLine": 7346, + "startColumn": 15, + "endLine": 7346, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50328,12 +50335,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7344, - "startColumn": 11, - "endLine": 7344, - "endColumn": 16, + "startLine": 7381, + "startColumn": 15, + "endLine": 7381, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50347,12 +50354,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7344, - "startColumn": 11, - "endLine": 7344, - "endColumn": 16, + "startLine": 7387, + "startColumn": 15, + "endLine": 7387, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50366,12 +50373,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7443, - "startColumn": 11, - "endLine": 7443, - "endColumn": 16, + "startLine": 7445, + "startColumn": 15, + "endLine": 7445, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50385,12 +50392,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7443, - "startColumn": 11, - "endLine": 7443, - "endColumn": 16, + "startLine": 7480, + "startColumn": 15, + "endLine": 7480, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50404,12 +50411,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7443, - "startColumn": 11, - "endLine": 7443, - "endColumn": 16, + "startLine": 7486, + "startColumn": 15, + "endLine": 7486, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50423,12 +50430,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7542, - "startColumn": 11, - "endLine": 7542, - "endColumn": 16, + "startLine": 7544, + "startColumn": 15, + "endLine": 7544, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50442,12 +50449,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7542, - "startColumn": 11, - "endLine": 7542, - "endColumn": 16, + "startLine": 7579, + "startColumn": 15, + "endLine": 7579, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50461,12 +50468,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7542, - "startColumn": 11, - "endLine": 7542, - "endColumn": 16, + "startLine": 7585, + "startColumn": 15, + "endLine": 7585, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50480,12 +50487,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7641, - "startColumn": 11, - "endLine": 7641, - "endColumn": 16, + "startLine": 7643, + "startColumn": 15, + "endLine": 7643, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50499,12 +50506,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7641, - "startColumn": 11, - "endLine": 7641, - "endColumn": 16, + "startLine": 7678, + "startColumn": 15, + "endLine": 7678, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50518,12 +50525,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7641, - "startColumn": 11, - "endLine": 7641, - "endColumn": 16, + "startLine": 7684, + "startColumn": 15, + "endLine": 7684, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50537,12 +50544,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7740, - "startColumn": 11, - "endLine": 7740, - "endColumn": 16, + "startLine": 7742, + "startColumn": 15, + "endLine": 7742, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50556,12 +50563,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7740, - "startColumn": 11, - "endLine": 7740, - "endColumn": 16, + "startLine": 7777, + "startColumn": 15, + "endLine": 7777, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50575,12 +50582,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7740, - "startColumn": 11, - "endLine": 7740, - "endColumn": 16, + "startLine": 7783, + "startColumn": 15, + "endLine": 7783, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50594,12 +50601,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7839, - "startColumn": 11, - "endLine": 7839, - "endColumn": 16, + "startLine": 7841, + "startColumn": 15, + "endLine": 7841, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50613,12 +50620,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7839, - "startColumn": 11, - "endLine": 7839, - "endColumn": 16, + "startLine": 7876, + "startColumn": 15, + "endLine": 7876, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50632,12 +50639,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7839, - "startColumn": 11, - "endLine": 7839, - "endColumn": 16, + "startLine": 7882, + "startColumn": 15, + "endLine": 7882, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50651,12 +50658,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 7938, - "startColumn": 11, - "endLine": 7938, - "endColumn": 16, + "startLine": 7940, + "startColumn": 15, + "endLine": 7940, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50670,12 +50677,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7938, - "startColumn": 11, - "endLine": 7938, - "endColumn": 16, + "startLine": 7975, + "startColumn": 15, + "endLine": 7975, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50689,12 +50696,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 7938, - "startColumn": 11, - "endLine": 7938, - "endColumn": 16, + "startLine": 7981, + "startColumn": 15, + "endLine": 7981, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50708,12 +50715,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8037, - "startColumn": 11, - "endLine": 8037, - "endColumn": 16, + "startLine": 8039, + "startColumn": 15, + "endLine": 8039, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50727,12 +50734,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8037, - "startColumn": 11, - "endLine": 8037, - "endColumn": 16, + "startLine": 8074, + "startColumn": 15, + "endLine": 8074, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50746,12 +50753,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8037, - "startColumn": 11, - "endLine": 8037, - "endColumn": 16, + "startLine": 8080, + "startColumn": 15, + "endLine": 8080, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50765,12 +50772,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8136, - "startColumn": 11, - "endLine": 8136, - "endColumn": 16, + "startLine": 8138, + "startColumn": 15, + "endLine": 8138, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50784,12 +50791,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8136, - "startColumn": 11, - "endLine": 8136, - "endColumn": 16, + "startLine": 8173, + "startColumn": 15, + "endLine": 8173, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50803,12 +50810,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8136, - "startColumn": 11, - "endLine": 8136, - "endColumn": 16, + "startLine": 8179, + "startColumn": 15, + "endLine": 8179, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50822,12 +50829,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8235, - "startColumn": 11, - "endLine": 8235, - "endColumn": 16, + "startLine": 8237, + "startColumn": 15, + "endLine": 8237, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50841,12 +50848,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8235, - "startColumn": 11, - "endLine": 8235, - "endColumn": 16, + "startLine": 8272, + "startColumn": 15, + "endLine": 8272, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50860,12 +50867,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8235, - "startColumn": 11, - "endLine": 8235, - "endColumn": 16, + "startLine": 8278, + "startColumn": 15, + "endLine": 8278, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50879,12 +50886,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8334, - "startColumn": 11, - "endLine": 8334, - "endColumn": 16, + "startLine": 8336, + "startColumn": 15, + "endLine": 8336, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50898,12 +50905,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8334, - "startColumn": 11, - "endLine": 8334, - "endColumn": 16, + "startLine": 8371, + "startColumn": 15, + "endLine": 8371, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50917,12 +50924,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8334, - "startColumn": 11, - "endLine": 8334, - "endColumn": 16, + "startLine": 8377, + "startColumn": 15, + "endLine": 8377, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50936,12 +50943,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8433, - "startColumn": 11, - "endLine": 8433, - "endColumn": 16, + "startLine": 8435, + "startColumn": 15, + "endLine": 8435, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50955,12 +50962,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8433, - "startColumn": 11, - "endLine": 8433, - "endColumn": 16, + "startLine": 8470, + "startColumn": 15, + "endLine": 8470, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50974,12 +50981,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8433, - "startColumn": 11, - "endLine": 8433, - "endColumn": 16, + "startLine": 8476, + "startColumn": 15, + "endLine": 8476, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -50993,12 +51000,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8532, - "startColumn": 11, - "endLine": 8532, - "endColumn": 16, + "startLine": 8534, + "startColumn": 15, + "endLine": 8534, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51012,12 +51019,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8532, - "startColumn": 11, - "endLine": 8532, - "endColumn": 16, + "startLine": 8569, + "startColumn": 15, + "endLine": 8569, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51031,12 +51038,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8532, - "startColumn": 11, - "endLine": 8532, - "endColumn": 16, + "startLine": 8575, + "startColumn": 15, + "endLine": 8575, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51050,12 +51057,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8631, - "startColumn": 11, - "endLine": 8631, - "endColumn": 16, + "startLine": 8633, + "startColumn": 15, + "endLine": 8633, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51069,12 +51076,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8631, - "startColumn": 11, - "endLine": 8631, - "endColumn": 16, + "startLine": 8668, + "startColumn": 15, + "endLine": 8668, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51088,12 +51095,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8631, - "startColumn": 11, - "endLine": 8631, - "endColumn": 16, + "startLine": 8674, + "startColumn": 15, + "endLine": 8674, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51107,12 +51114,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8730, - "startColumn": 11, - "endLine": 8730, - "endColumn": 16, + "startLine": 8732, + "startColumn": 15, + "endLine": 8732, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51126,12 +51133,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8730, - "startColumn": 11, - "endLine": 8730, - "endColumn": 16, + "startLine": 8767, + "startColumn": 15, + "endLine": 8767, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51145,12 +51152,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8730, - "startColumn": 11, - "endLine": 8730, - "endColumn": 16, + "startLine": 8773, + "startColumn": 15, + "endLine": 8773, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51164,12 +51171,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8829, - "startColumn": 11, - "endLine": 8829, - "endColumn": 16, + "startLine": 8831, + "startColumn": 15, + "endLine": 8831, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51183,12 +51190,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8829, - "startColumn": 11, - "endLine": 8829, - "endColumn": 16, + "startLine": 8866, + "startColumn": 15, + "endLine": 8866, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51202,12 +51209,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8829, - "startColumn": 11, - "endLine": 8829, - "endColumn": 16, + "startLine": 8872, + "startColumn": 15, + "endLine": 8872, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51221,12 +51228,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 8928, - "startColumn": 11, - "endLine": 8928, - "endColumn": 16, + "startLine": 8930, + "startColumn": 15, + "endLine": 8930, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51240,12 +51247,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8928, - "startColumn": 11, - "endLine": 8928, - "endColumn": 16, + "startLine": 8965, + "startColumn": 15, + "endLine": 8965, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51259,12 +51266,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 8928, - "startColumn": 11, - "endLine": 8928, - "endColumn": 16, + "startLine": 8971, + "startColumn": 15, + "endLine": 8971, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51278,12 +51285,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9027, - "startColumn": 11, - "endLine": 9027, - "endColumn": 16, + "startLine": 9029, + "startColumn": 15, + "endLine": 9029, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51297,12 +51304,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9027, - "startColumn": 11, - "endLine": 9027, - "endColumn": 16, + "startLine": 9064, + "startColumn": 15, + "endLine": 9064, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51316,12 +51323,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9027, - "startColumn": 11, - "endLine": 9027, - "endColumn": 16, + "startLine": 9070, + "startColumn": 15, + "endLine": 9070, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51335,12 +51342,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9126, - "startColumn": 11, - "endLine": 9126, - "endColumn": 16, + "startLine": 9128, + "startColumn": 15, + "endLine": 9128, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51354,12 +51361,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9126, - "startColumn": 11, - "endLine": 9126, - "endColumn": 16, + "startLine": 9163, + "startColumn": 15, + "endLine": 9163, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51373,12 +51380,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9126, - "startColumn": 11, - "endLine": 9126, - "endColumn": 16, + "startLine": 9169, + "startColumn": 15, + "endLine": 9169, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51392,12 +51399,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9225, - "startColumn": 11, - "endLine": 9225, - "endColumn": 16, + "startLine": 9227, + "startColumn": 15, + "endLine": 9227, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51411,12 +51418,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9225, - "startColumn": 11, - "endLine": 9225, - "endColumn": 16, + "startLine": 9262, + "startColumn": 15, + "endLine": 9262, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51430,12 +51437,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9225, - "startColumn": 11, - "endLine": 9225, - "endColumn": 16, + "startLine": 9268, + "startColumn": 15, + "endLine": 9268, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51449,12 +51456,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9324, - "startColumn": 11, - "endLine": 9324, - "endColumn": 16, + "startLine": 9326, + "startColumn": 15, + "endLine": 9326, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51468,12 +51475,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9324, - "startColumn": 11, - "endLine": 9324, - "endColumn": 16, + "startLine": 9361, + "startColumn": 15, + "endLine": 9361, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51487,12 +51494,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9324, - "startColumn": 11, - "endLine": 9324, - "endColumn": 16, + "startLine": 9367, + "startColumn": 15, + "endLine": 9367, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51506,12 +51513,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9423, - "startColumn": 11, - "endLine": 9423, - "endColumn": 16, + "startLine": 9425, + "startColumn": 15, + "endLine": 9425, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51525,12 +51532,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9423, - "startColumn": 11, - "endLine": 9423, - "endColumn": 16, + "startLine": 9460, + "startColumn": 15, + "endLine": 9460, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51544,12 +51551,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9423, - "startColumn": 11, - "endLine": 9423, - "endColumn": 16, + "startLine": 9466, + "startColumn": 15, + "endLine": 9466, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51563,12 +51570,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9522, - "startColumn": 11, - "endLine": 9522, - "endColumn": 16, + "startLine": 9524, + "startColumn": 15, + "endLine": 9524, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51582,12 +51589,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9522, - "startColumn": 11, - "endLine": 9522, - "endColumn": 16, + "startLine": 9559, + "startColumn": 15, + "endLine": 9559, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51601,12 +51608,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9522, - "startColumn": 11, - "endLine": 9522, - "endColumn": 16, + "startLine": 9565, + "startColumn": 15, + "endLine": 9565, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51620,12 +51627,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9621, - "startColumn": 11, - "endLine": 9621, - "endColumn": 16, + "startLine": 9623, + "startColumn": 15, + "endLine": 9623, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51639,12 +51646,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9621, - "startColumn": 11, - "endLine": 9621, - "endColumn": 16, + "startLine": 9658, + "startColumn": 15, + "endLine": 9658, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51658,12 +51665,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9621, - "startColumn": 11, - "endLine": 9621, - "endColumn": 16, + "startLine": 9664, + "startColumn": 15, + "endLine": 9664, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51677,12 +51684,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9720, - "startColumn": 11, - "endLine": 9720, - "endColumn": 16, + "startLine": 9722, + "startColumn": 15, + "endLine": 9722, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51696,12 +51703,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9720, - "startColumn": 11, - "endLine": 9720, - "endColumn": 16, + "startLine": 9757, + "startColumn": 15, + "endLine": 9757, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51715,12 +51722,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9720, - "startColumn": 11, - "endLine": 9720, - "endColumn": 16, + "startLine": 9763, + "startColumn": 15, + "endLine": 9763, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51734,12 +51741,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9819, - "startColumn": 11, - "endLine": 9819, - "endColumn": 16, + "startLine": 9821, + "startColumn": 15, + "endLine": 9821, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51753,12 +51760,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9819, - "startColumn": 11, - "endLine": 9819, - "endColumn": 16, + "startLine": 9856, + "startColumn": 15, + "endLine": 9856, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51772,12 +51779,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9819, - "startColumn": 11, - "endLine": 9819, - "endColumn": 16, + "startLine": 9862, + "startColumn": 15, + "endLine": 9862, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51791,12 +51798,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 9918, - "startColumn": 11, - "endLine": 9918, - "endColumn": 16, + "startLine": 9920, + "startColumn": 15, + "endLine": 9920, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51810,12 +51817,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9918, - "startColumn": 11, - "endLine": 9918, - "endColumn": 16, + "startLine": 9955, + "startColumn": 15, + "endLine": 9955, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51829,12 +51836,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 9918, - "startColumn": 11, - "endLine": 9918, - "endColumn": 16, + "startLine": 9961, + "startColumn": 15, + "endLine": 9961, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51848,12 +51855,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10017, - "startColumn": 11, - "endLine": 10017, - "endColumn": 16, + "startLine": 10019, + "startColumn": 15, + "endLine": 10019, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51867,12 +51874,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10017, - "startColumn": 11, - "endLine": 10017, - "endColumn": 16, + "startLine": 10054, + "startColumn": 15, + "endLine": 10054, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51886,12 +51893,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10017, - "startColumn": 11, - "endLine": 10017, - "endColumn": 16, + "startLine": 10060, + "startColumn": 15, + "endLine": 10060, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51905,12 +51912,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10116, - "startColumn": 11, - "endLine": 10116, - "endColumn": 16, + "startLine": 10118, + "startColumn": 15, + "endLine": 10118, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51924,12 +51931,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10116, - "startColumn": 11, - "endLine": 10116, - "endColumn": 16, + "startLine": 10153, + "startColumn": 15, + "endLine": 10153, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51943,12 +51950,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10116, - "startColumn": 11, - "endLine": 10116, - "endColumn": 16, + "startLine": 10159, + "startColumn": 15, + "endLine": 10159, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51962,12 +51969,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10215, - "startColumn": 11, - "endLine": 10215, - "endColumn": 16, + "startLine": 10217, + "startColumn": 15, + "endLine": 10217, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -51981,12 +51988,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10215, - "startColumn": 11, - "endLine": 10215, - "endColumn": 16, + "startLine": 10252, + "startColumn": 15, + "endLine": 10252, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52000,12 +52007,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10215, - "startColumn": 11, - "endLine": 10215, - "endColumn": 16, + "startLine": 10258, + "startColumn": 15, + "endLine": 10258, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52019,12 +52026,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10314, - "startColumn": 11, - "endLine": 10314, - "endColumn": 16, + "startLine": 10316, + "startColumn": 15, + "endLine": 10316, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52038,12 +52045,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10314, - "startColumn": 11, - "endLine": 10314, - "endColumn": 16, + "startLine": 10351, + "startColumn": 15, + "endLine": 10351, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52057,12 +52064,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10314, - "startColumn": 11, - "endLine": 10314, - "endColumn": 16, + "startLine": 10357, + "startColumn": 15, + "endLine": 10357, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52076,12 +52083,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10413, - "startColumn": 11, - "endLine": 10413, - "endColumn": 16, + "startLine": 10415, + "startColumn": 15, + "endLine": 10415, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52095,12 +52102,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10413, - "startColumn": 11, - "endLine": 10413, - "endColumn": 16, + "startLine": 10450, + "startColumn": 15, + "endLine": 10450, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52114,12 +52121,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10413, - "startColumn": 11, - "endLine": 10413, - "endColumn": 16, + "startLine": 10456, + "startColumn": 15, + "endLine": 10456, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52133,12 +52140,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10512, - "startColumn": 11, - "endLine": 10512, - "endColumn": 16, + "startLine": 10514, + "startColumn": 15, + "endLine": 10514, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52152,12 +52159,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10512, - "startColumn": 11, - "endLine": 10512, - "endColumn": 16, + "startLine": 10549, + "startColumn": 15, + "endLine": 10549, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52171,12 +52178,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10512, - "startColumn": 11, - "endLine": 10512, - "endColumn": 16, + "startLine": 10555, + "startColumn": 15, + "endLine": 10555, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52190,12 +52197,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10611, - "startColumn": 11, - "endLine": 10611, - "endColumn": 16, + "startLine": 10613, + "startColumn": 15, + "endLine": 10613, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52209,12 +52216,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10611, - "startColumn": 11, - "endLine": 10611, - "endColumn": 16, + "startLine": 10648, + "startColumn": 15, + "endLine": 10648, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52228,12 +52235,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10611, - "startColumn": 11, - "endLine": 10611, - "endColumn": 16, + "startLine": 10654, + "startColumn": 15, + "endLine": 10654, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52247,12 +52254,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10710, - "startColumn": 11, - "endLine": 10710, - "endColumn": 16, + "startLine": 10712, + "startColumn": 15, + "endLine": 10712, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52266,12 +52273,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10710, - "startColumn": 11, - "endLine": 10710, - "endColumn": 16, + "startLine": 10747, + "startColumn": 15, + "endLine": 10747, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52285,12 +52292,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10710, - "startColumn": 11, - "endLine": 10710, - "endColumn": 16, + "startLine": 10753, + "startColumn": 15, + "endLine": 10753, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52304,12 +52311,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10809, - "startColumn": 11, - "endLine": 10809, - "endColumn": 16, + "startLine": 10811, + "startColumn": 15, + "endLine": 10811, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52323,12 +52330,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10809, - "startColumn": 11, - "endLine": 10809, - "endColumn": 16, + "startLine": 10846, + "startColumn": 15, + "endLine": 10846, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52342,12 +52349,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10809, - "startColumn": 11, - "endLine": 10809, - "endColumn": 16, + "startLine": 10852, + "startColumn": 15, + "endLine": 10852, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52361,12 +52368,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 10908, - "startColumn": 11, - "endLine": 10908, - "endColumn": 16, + "startLine": 10910, + "startColumn": 15, + "endLine": 10910, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52380,12 +52387,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10908, - "startColumn": 11, - "endLine": 10908, - "endColumn": 16, + "startLine": 10945, + "startColumn": 15, + "endLine": 10945, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52399,12 +52406,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 10908, - "startColumn": 11, - "endLine": 10908, - "endColumn": 16, + "startLine": 10951, + "startColumn": 15, + "endLine": 10951, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52418,12 +52425,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11007, - "startColumn": 11, - "endLine": 11007, - "endColumn": 16, + "startLine": 11009, + "startColumn": 15, + "endLine": 11009, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52437,12 +52444,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11007, - "startColumn": 11, - "endLine": 11007, - "endColumn": 16, + "startLine": 11044, + "startColumn": 15, + "endLine": 11044, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52456,12 +52463,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11007, - "startColumn": 11, - "endLine": 11007, - "endColumn": 16, + "startLine": 11050, + "startColumn": 15, + "endLine": 11050, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52475,12 +52482,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11106, - "startColumn": 11, - "endLine": 11106, - "endColumn": 16, + "startLine": 11108, + "startColumn": 15, + "endLine": 11108, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52494,12 +52501,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11106, - "startColumn": 11, - "endLine": 11106, - "endColumn": 16, + "startLine": 11143, + "startColumn": 15, + "endLine": 11143, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52513,12 +52520,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11106, - "startColumn": 11, - "endLine": 11106, - "endColumn": 16, + "startLine": 11149, + "startColumn": 15, + "endLine": 11149, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52532,12 +52539,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11205, - "startColumn": 11, - "endLine": 11205, - "endColumn": 16, + "startLine": 11207, + "startColumn": 15, + "endLine": 11207, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52551,12 +52558,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11205, - "startColumn": 11, - "endLine": 11205, - "endColumn": 16, + "startLine": 11242, + "startColumn": 15, + "endLine": 11242, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52570,12 +52577,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11205, - "startColumn": 11, - "endLine": 11205, - "endColumn": 16, + "startLine": 11248, + "startColumn": 15, + "endLine": 11248, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52589,12 +52596,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11304, - "startColumn": 11, - "endLine": 11304, - "endColumn": 16, + "startLine": 11306, + "startColumn": 15, + "endLine": 11306, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52608,12 +52615,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11304, - "startColumn": 11, - "endLine": 11304, - "endColumn": 16, + "startLine": 11341, + "startColumn": 15, + "endLine": 11341, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52627,12 +52634,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11304, - "startColumn": 11, - "endLine": 11304, - "endColumn": 16, + "startLine": 11347, + "startColumn": 15, + "endLine": 11347, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52646,12 +52653,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11403, - "startColumn": 11, - "endLine": 11403, - "endColumn": 16, + "startLine": 11405, + "startColumn": 15, + "endLine": 11405, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52665,12 +52672,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11403, - "startColumn": 11, - "endLine": 11403, - "endColumn": 16, + "startLine": 11440, + "startColumn": 15, + "endLine": 11440, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52684,12 +52691,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11403, - "startColumn": 11, - "endLine": 11403, - "endColumn": 16, + "startLine": 11446, + "startColumn": 15, + "endLine": 11446, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52703,12 +52710,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11502, - "startColumn": 11, - "endLine": 11502, - "endColumn": 16, + "startLine": 11504, + "startColumn": 15, + "endLine": 11504, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52722,12 +52729,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11502, - "startColumn": 11, - "endLine": 11502, - "endColumn": 16, + "startLine": 11539, + "startColumn": 15, + "endLine": 11539, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52741,12 +52748,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11502, - "startColumn": 11, - "endLine": 11502, - "endColumn": 16, + "startLine": 11545, + "startColumn": 15, + "endLine": 11545, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52760,12 +52767,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11601, - "startColumn": 11, - "endLine": 11601, - "endColumn": 16, + "startLine": 11603, + "startColumn": 15, + "endLine": 11603, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52779,12 +52786,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11601, - "startColumn": 11, - "endLine": 11601, - "endColumn": 16, + "startLine": 11638, + "startColumn": 15, + "endLine": 11638, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52798,12 +52805,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11601, - "startColumn": 11, - "endLine": 11601, - "endColumn": 16, + "startLine": 11644, + "startColumn": 15, + "endLine": 11644, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52817,12 +52824,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11700, - "startColumn": 11, - "endLine": 11700, - "endColumn": 16, + "startLine": 11702, + "startColumn": 15, + "endLine": 11702, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52836,12 +52843,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11700, - "startColumn": 11, - "endLine": 11700, - "endColumn": 16, + "startLine": 11737, + "startColumn": 15, + "endLine": 11737, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52855,12 +52862,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11700, - "startColumn": 11, - "endLine": 11700, - "endColumn": 16, + "startLine": 11743, + "startColumn": 15, + "endLine": 11743, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52874,12 +52881,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11799, - "startColumn": 11, - "endLine": 11799, - "endColumn": 16, + "startLine": 11801, + "startColumn": 15, + "endLine": 11801, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52893,12 +52900,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11799, - "startColumn": 11, - "endLine": 11799, - "endColumn": 16, + "startLine": 11836, + "startColumn": 15, + "endLine": 11836, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52912,12 +52919,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11799, - "startColumn": 11, - "endLine": 11799, - "endColumn": 16, + "startLine": 11842, + "startColumn": 15, + "endLine": 11842, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52931,12 +52938,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11898, - "startColumn": 11, - "endLine": 11898, - "endColumn": 16, + "startLine": 11900, + "startColumn": 15, + "endLine": 11900, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52950,12 +52957,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11898, - "startColumn": 11, - "endLine": 11898, - "endColumn": 16, + "startLine": 11935, + "startColumn": 15, + "endLine": 11935, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52969,12 +52976,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11898, - "startColumn": 11, - "endLine": 11898, - "endColumn": 16, + "startLine": 11941, + "startColumn": 15, + "endLine": 11941, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -52988,12 +52995,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 11997, - "startColumn": 11, - "endLine": 11997, - "endColumn": 16, + "startLine": 11999, + "startColumn": 15, + "endLine": 11999, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53007,12 +53014,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11997, - "startColumn": 11, - "endLine": 11997, - "endColumn": 16, + "startLine": 12034, + "startColumn": 15, + "endLine": 12034, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53026,12 +53033,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 11997, - "startColumn": 11, - "endLine": 11997, - "endColumn": 16, + "startLine": 12040, + "startColumn": 15, + "endLine": 12040, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53045,12 +53052,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12096, - "startColumn": 11, - "endLine": 12096, - "endColumn": 16, + "startLine": 12098, + "startColumn": 15, + "endLine": 12098, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53064,12 +53071,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12096, - "startColumn": 11, - "endLine": 12096, - "endColumn": 16, + "startLine": 12133, + "startColumn": 15, + "endLine": 12133, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53083,12 +53090,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12096, - "startColumn": 11, - "endLine": 12096, - "endColumn": 16, + "startLine": 12139, + "startColumn": 15, + "endLine": 12139, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53102,12 +53109,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12195, - "startColumn": 11, - "endLine": 12195, - "endColumn": 16, + "startLine": 12197, + "startColumn": 15, + "endLine": 12197, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53121,12 +53128,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12195, - "startColumn": 11, - "endLine": 12195, - "endColumn": 16, + "startLine": 12232, + "startColumn": 15, + "endLine": 12232, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53140,12 +53147,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12195, - "startColumn": 11, - "endLine": 12195, - "endColumn": 16, + "startLine": 12238, + "startColumn": 15, + "endLine": 12238, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53159,12 +53166,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12294, - "startColumn": 11, - "endLine": 12294, - "endColumn": 16, + "startLine": 12296, + "startColumn": 15, + "endLine": 12296, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53178,12 +53185,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12294, - "startColumn": 11, - "endLine": 12294, - "endColumn": 16, + "startLine": 12331, + "startColumn": 15, + "endLine": 12331, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53197,12 +53204,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12294, - "startColumn": 11, - "endLine": 12294, - "endColumn": 16, + "startLine": 12337, + "startColumn": 15, + "endLine": 12337, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53216,12 +53223,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12393, - "startColumn": 11, - "endLine": 12393, - "endColumn": 16, + "startLine": 12395, + "startColumn": 15, + "endLine": 12395, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53235,12 +53242,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12393, - "startColumn": 11, - "endLine": 12393, - "endColumn": 16, + "startLine": 12430, + "startColumn": 15, + "endLine": 12430, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53254,12 +53261,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12393, - "startColumn": 11, - "endLine": 12393, - "endColumn": 16, + "startLine": 12436, + "startColumn": 15, + "endLine": 12436, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53273,12 +53280,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12492, - "startColumn": 11, - "endLine": 12492, - "endColumn": 16, + "startLine": 12494, + "startColumn": 15, + "endLine": 12494, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53292,12 +53299,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12492, - "startColumn": 11, - "endLine": 12492, - "endColumn": 16, + "startLine": 12529, + "startColumn": 15, + "endLine": 12529, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53311,12 +53318,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12492, - "startColumn": 11, - "endLine": 12492, - "endColumn": 16, + "startLine": 12535, + "startColumn": 15, + "endLine": 12535, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53330,12 +53337,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12591, - "startColumn": 11, - "endLine": 12591, - "endColumn": 16, + "startLine": 12593, + "startColumn": 15, + "endLine": 12593, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53349,12 +53356,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12591, - "startColumn": 11, - "endLine": 12591, - "endColumn": 16, + "startLine": 12628, + "startColumn": 15, + "endLine": 12628, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53368,12 +53375,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12591, - "startColumn": 11, - "endLine": 12591, - "endColumn": 16, + "startLine": 12634, + "startColumn": 15, + "endLine": 12634, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53387,12 +53394,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12690, - "startColumn": 11, - "endLine": 12690, - "endColumn": 16, + "startLine": 12692, + "startColumn": 15, + "endLine": 12692, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53406,12 +53413,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12690, - "startColumn": 11, - "endLine": 12690, - "endColumn": 16, + "startLine": 12727, + "startColumn": 15, + "endLine": 12727, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53425,12 +53432,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12690, - "startColumn": 11, - "endLine": 12690, - "endColumn": 16, + "startLine": 12733, + "startColumn": 15, + "endLine": 12733, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53444,12 +53451,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12789, - "startColumn": 11, - "endLine": 12789, - "endColumn": 16, + "startLine": 12791, + "startColumn": 15, + "endLine": 12791, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53463,12 +53470,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12789, - "startColumn": 11, - "endLine": 12789, - "endColumn": 16, + "startLine": 12826, + "startColumn": 15, + "endLine": 12826, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53482,12 +53489,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12789, - "startColumn": 11, - "endLine": 12789, - "endColumn": 16, + "startLine": 12832, + "startColumn": 15, + "endLine": 12832, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53501,12 +53508,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12888, - "startColumn": 11, - "endLine": 12888, - "endColumn": 16, + "startLine": 12890, + "startColumn": 15, + "endLine": 12890, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53520,12 +53527,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12888, - "startColumn": 11, - "endLine": 12888, - "endColumn": 16, + "startLine": 12925, + "startColumn": 15, + "endLine": 12925, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53539,12 +53546,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12888, - "startColumn": 11, - "endLine": 12888, - "endColumn": 16, + "startLine": 12931, + "startColumn": 15, + "endLine": 12931, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53558,12 +53565,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 12987, - "startColumn": 11, - "endLine": 12987, - "endColumn": 16, + "startLine": 12989, + "startColumn": 15, + "endLine": 12989, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53577,12 +53584,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12987, - "startColumn": 11, - "endLine": 12987, - "endColumn": 16, + "startLine": 13024, + "startColumn": 15, + "endLine": 13024, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53596,12 +53603,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 12987, - "startColumn": 11, - "endLine": 12987, - "endColumn": 16, + "startLine": 13030, + "startColumn": 15, + "endLine": 13030, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53615,12 +53622,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13086, - "startColumn": 11, - "endLine": 13086, - "endColumn": 16, + "startLine": 13088, + "startColumn": 15, + "endLine": 13088, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53634,12 +53641,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13086, - "startColumn": 11, - "endLine": 13086, - "endColumn": 16, + "startLine": 13123, + "startColumn": 15, + "endLine": 13123, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53653,12 +53660,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13086, - "startColumn": 11, - "endLine": 13086, - "endColumn": 16, + "startLine": 13129, + "startColumn": 15, + "endLine": 13129, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53672,12 +53679,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13185, - "startColumn": 11, - "endLine": 13185, - "endColumn": 16, + "startLine": 13187, + "startColumn": 15, + "endLine": 13187, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53691,12 +53698,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13185, - "startColumn": 11, - "endLine": 13185, - "endColumn": 16, + "startLine": 13222, + "startColumn": 15, + "endLine": 13222, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53710,12 +53717,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13185, - "startColumn": 11, - "endLine": 13185, - "endColumn": 16, + "startLine": 13228, + "startColumn": 15, + "endLine": 13228, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53729,12 +53736,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13284, - "startColumn": 11, - "endLine": 13284, - "endColumn": 16, + "startLine": 13286, + "startColumn": 15, + "endLine": 13286, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53748,12 +53755,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13284, - "startColumn": 11, - "endLine": 13284, - "endColumn": 16, + "startLine": 13321, + "startColumn": 15, + "endLine": 13321, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53767,12 +53774,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13284, - "startColumn": 11, - "endLine": 13284, - "endColumn": 16, + "startLine": 13327, + "startColumn": 15, + "endLine": 13327, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53786,12 +53793,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13383, - "startColumn": 11, - "endLine": 13383, - "endColumn": 16, + "startLine": 13385, + "startColumn": 15, + "endLine": 13385, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53805,12 +53812,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13383, - "startColumn": 11, - "endLine": 13383, - "endColumn": 16, + "startLine": 13420, + "startColumn": 15, + "endLine": 13420, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53824,12 +53831,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13383, - "startColumn": 11, - "endLine": 13383, - "endColumn": 16, + "startLine": 13426, + "startColumn": 15, + "endLine": 13426, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53843,12 +53850,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13482, - "startColumn": 11, - "endLine": 13482, - "endColumn": 16, + "startLine": 13484, + "startColumn": 15, + "endLine": 13484, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53862,12 +53869,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13482, - "startColumn": 11, - "endLine": 13482, - "endColumn": 16, + "startLine": 13519, + "startColumn": 15, + "endLine": 13519, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53881,12 +53888,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13482, - "startColumn": 11, - "endLine": 13482, - "endColumn": 16, + "startLine": 13525, + "startColumn": 15, + "endLine": 13525, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53900,12 +53907,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13581, - "startColumn": 11, - "endLine": 13581, - "endColumn": 16, + "startLine": 13583, + "startColumn": 15, + "endLine": 13583, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53919,12 +53926,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13581, - "startColumn": 11, - "endLine": 13581, - "endColumn": 16, + "startLine": 13618, + "startColumn": 15, + "endLine": 13618, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53938,12 +53945,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13581, - "startColumn": 11, - "endLine": 13581, - "endColumn": 16, + "startLine": 13624, + "startColumn": 15, + "endLine": 13624, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53957,12 +53964,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13680, - "startColumn": 11, - "endLine": 13680, - "endColumn": 16, + "startLine": 13682, + "startColumn": 15, + "endLine": 13682, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53976,12 +53983,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13680, - "startColumn": 11, - "endLine": 13680, - "endColumn": 16, + "startLine": 13717, + "startColumn": 15, + "endLine": 13717, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -53995,12 +54002,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13680, - "startColumn": 11, - "endLine": 13680, - "endColumn": 16, + "startLine": 13723, + "startColumn": 15, + "endLine": 13723, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54014,12 +54021,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13779, - "startColumn": 11, - "endLine": 13779, - "endColumn": 16, + "startLine": 13781, + "startColumn": 15, + "endLine": 13781, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54033,12 +54040,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13779, - "startColumn": 11, - "endLine": 13779, - "endColumn": 16, + "startLine": 13816, + "startColumn": 15, + "endLine": 13816, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54052,12 +54059,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13779, - "startColumn": 11, - "endLine": 13779, - "endColumn": 16, + "startLine": 13822, + "startColumn": 15, + "endLine": 13822, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54071,12 +54078,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13878, - "startColumn": 11, - "endLine": 13878, - "endColumn": 16, + "startLine": 13880, + "startColumn": 15, + "endLine": 13880, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54090,12 +54097,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13878, - "startColumn": 11, - "endLine": 13878, - "endColumn": 16, + "startLine": 13915, + "startColumn": 15, + "endLine": 13915, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54109,12 +54116,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13878, - "startColumn": 11, - "endLine": 13878, - "endColumn": 16, + "startLine": 13921, + "startColumn": 15, + "endLine": 13921, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54128,12 +54135,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 13977, - "startColumn": 11, - "endLine": 13977, - "endColumn": 16, + "startLine": 13979, + "startColumn": 15, + "endLine": 13979, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54147,12 +54154,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13977, - "startColumn": 11, - "endLine": 13977, - "endColumn": 16, + "startLine": 14014, + "startColumn": 15, + "endLine": 14014, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54166,12 +54173,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 13977, - "startColumn": 11, - "endLine": 13977, - "endColumn": 16, + "startLine": 14020, + "startColumn": 15, + "endLine": 14020, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54185,12 +54192,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14076, - "startColumn": 11, - "endLine": 14076, - "endColumn": 16, + "startLine": 14078, + "startColumn": 15, + "endLine": 14078, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54204,12 +54211,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14076, - "startColumn": 11, - "endLine": 14076, - "endColumn": 16, + "startLine": 14113, + "startColumn": 15, + "endLine": 14113, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54223,12 +54230,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14076, - "startColumn": 11, - "endLine": 14076, - "endColumn": 16, + "startLine": 14119, + "startColumn": 15, + "endLine": 14119, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54242,12 +54249,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14175, - "startColumn": 11, - "endLine": 14175, - "endColumn": 16, + "startLine": 14177, + "startColumn": 15, + "endLine": 14177, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54261,12 +54268,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14175, - "startColumn": 11, - "endLine": 14175, - "endColumn": 16, + "startLine": 14212, + "startColumn": 15, + "endLine": 14212, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54280,12 +54287,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14175, - "startColumn": 11, - "endLine": 14175, - "endColumn": 16, + "startLine": 14218, + "startColumn": 15, + "endLine": 14218, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54299,12 +54306,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14274, - "startColumn": 11, - "endLine": 14274, - "endColumn": 16, + "startLine": 14276, + "startColumn": 15, + "endLine": 14276, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54318,12 +54325,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14274, - "startColumn": 11, - "endLine": 14274, - "endColumn": 16, + "startLine": 14311, + "startColumn": 15, + "endLine": 14311, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54337,12 +54344,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14274, - "startColumn": 11, - "endLine": 14274, - "endColumn": 16, + "startLine": 14317, + "startColumn": 15, + "endLine": 14317, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54356,12 +54363,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14373, - "startColumn": 11, - "endLine": 14373, - "endColumn": 16, + "startLine": 14375, + "startColumn": 15, + "endLine": 14375, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54375,12 +54382,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14373, - "startColumn": 11, - "endLine": 14373, - "endColumn": 16, + "startLine": 14410, + "startColumn": 15, + "endLine": 14410, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54394,12 +54401,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14373, - "startColumn": 11, - "endLine": 14373, - "endColumn": 16, + "startLine": 14416, + "startColumn": 15, + "endLine": 14416, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54413,12 +54420,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14472, - "startColumn": 11, - "endLine": 14472, - "endColumn": 16, + "startLine": 14474, + "startColumn": 15, + "endLine": 14474, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54432,12 +54439,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14472, - "startColumn": 11, - "endLine": 14472, - "endColumn": 16, + "startLine": 14509, + "startColumn": 15, + "endLine": 14509, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54451,12 +54458,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14472, - "startColumn": 11, - "endLine": 14472, - "endColumn": 16, + "startLine": 14515, + "startColumn": 15, + "endLine": 14515, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54470,12 +54477,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14571, - "startColumn": 11, - "endLine": 14571, - "endColumn": 16, + "startLine": 14573, + "startColumn": 15, + "endLine": 14573, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54489,12 +54496,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14571, - "startColumn": 11, - "endLine": 14571, - "endColumn": 16, + "startLine": 14608, + "startColumn": 15, + "endLine": 14608, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54508,12 +54515,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14571, - "startColumn": 11, - "endLine": 14571, - "endColumn": 16, + "startLine": 14614, + "startColumn": 15, + "endLine": 14614, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54527,12 +54534,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14670, - "startColumn": 11, - "endLine": 14670, - "endColumn": 16, + "startLine": 14672, + "startColumn": 15, + "endLine": 14672, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54546,12 +54553,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14670, - "startColumn": 11, - "endLine": 14670, - "endColumn": 16, + "startLine": 14707, + "startColumn": 15, + "endLine": 14707, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54565,12 +54572,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14670, - "startColumn": 11, - "endLine": 14670, - "endColumn": 16, + "startLine": 14713, + "startColumn": 15, + "endLine": 14713, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54584,12 +54591,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14769, - "startColumn": 11, - "endLine": 14769, - "endColumn": 16, + "startLine": 14771, + "startColumn": 15, + "endLine": 14771, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54603,12 +54610,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14769, - "startColumn": 11, - "endLine": 14769, - "endColumn": 16, + "startLine": 14806, + "startColumn": 15, + "endLine": 14806, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54622,12 +54629,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14769, - "startColumn": 11, - "endLine": 14769, - "endColumn": 16, + "startLine": 14812, + "startColumn": 15, + "endLine": 14812, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54641,12 +54648,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14868, - "startColumn": 11, - "endLine": 14868, - "endColumn": 16, + "startLine": 14870, + "startColumn": 15, + "endLine": 14870, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54660,12 +54667,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14868, - "startColumn": 11, - "endLine": 14868, - "endColumn": 16, + "startLine": 14905, + "startColumn": 15, + "endLine": 14905, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54679,12 +54686,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14868, - "startColumn": 11, - "endLine": 14868, - "endColumn": 16, + "startLine": 14911, + "startColumn": 15, + "endLine": 14911, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54698,12 +54705,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 14967, - "startColumn": 11, - "endLine": 14967, - "endColumn": 16, + "startLine": 14969, + "startColumn": 15, + "endLine": 14969, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54717,12 +54724,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14967, - "startColumn": 11, - "endLine": 14967, - "endColumn": 16, + "startLine": 15004, + "startColumn": 15, + "endLine": 15004, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54736,12 +54743,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 14967, - "startColumn": 11, - "endLine": 14967, - "endColumn": 16, + "startLine": 15010, + "startColumn": 15, + "endLine": 15010, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54755,12 +54762,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15066, - "startColumn": 11, - "endLine": 15066, - "endColumn": 16, + "startLine": 15068, + "startColumn": 15, + "endLine": 15068, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54774,12 +54781,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15066, - "startColumn": 11, - "endLine": 15066, - "endColumn": 16, + "startLine": 15103, + "startColumn": 15, + "endLine": 15103, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54793,12 +54800,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15066, - "startColumn": 11, - "endLine": 15066, - "endColumn": 16, + "startLine": 15109, + "startColumn": 15, + "endLine": 15109, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54812,12 +54819,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15165, - "startColumn": 11, - "endLine": 15165, - "endColumn": 16, + "startLine": 15167, + "startColumn": 15, + "endLine": 15167, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54831,12 +54838,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15165, - "startColumn": 11, - "endLine": 15165, - "endColumn": 16, + "startLine": 15202, + "startColumn": 15, + "endLine": 15202, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54850,12 +54857,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15165, - "startColumn": 11, - "endLine": 15165, - "endColumn": 16, + "startLine": 15208, + "startColumn": 15, + "endLine": 15208, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54869,12 +54876,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15264, - "startColumn": 11, - "endLine": 15264, - "endColumn": 16, + "startLine": 15266, + "startColumn": 15, + "endLine": 15266, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54888,12 +54895,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15264, - "startColumn": 11, - "endLine": 15264, - "endColumn": 16, + "startLine": 15301, + "startColumn": 15, + "endLine": 15301, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54907,12 +54914,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15264, - "startColumn": 11, - "endLine": 15264, - "endColumn": 16, + "startLine": 15307, + "startColumn": 15, + "endLine": 15307, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54926,12 +54933,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15363, - "startColumn": 11, - "endLine": 15363, - "endColumn": 16, + "startLine": 15365, + "startColumn": 15, + "endLine": 15365, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54945,12 +54952,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15363, - "startColumn": 11, - "endLine": 15363, - "endColumn": 16, + "startLine": 15400, + "startColumn": 15, + "endLine": 15400, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54964,12 +54971,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15363, - "startColumn": 11, - "endLine": 15363, - "endColumn": 16, + "startLine": 15406, + "startColumn": 15, + "endLine": 15406, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -54983,12 +54990,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15462, - "startColumn": 11, - "endLine": 15462, - "endColumn": 16, + "startLine": 15464, + "startColumn": 15, + "endLine": 15464, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55002,12 +55009,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15462, - "startColumn": 11, - "endLine": 15462, - "endColumn": 16, + "startLine": 15499, + "startColumn": 15, + "endLine": 15499, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55021,12 +55028,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15462, - "startColumn": 11, - "endLine": 15462, - "endColumn": 16, + "startLine": 15505, + "startColumn": 15, + "endLine": 15505, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55040,12 +55047,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15561, - "startColumn": 11, - "endLine": 15561, - "endColumn": 16, + "startLine": 15563, + "startColumn": 15, + "endLine": 15563, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55059,12 +55066,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15561, - "startColumn": 11, - "endLine": 15561, - "endColumn": 16, + "startLine": 15598, + "startColumn": 15, + "endLine": 15598, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55078,12 +55085,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15561, - "startColumn": 11, - "endLine": 15561, - "endColumn": 16, + "startLine": 15604, + "startColumn": 15, + "endLine": 15604, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55097,12 +55104,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15660, - "startColumn": 11, - "endLine": 15660, - "endColumn": 16, + "startLine": 15662, + "startColumn": 15, + "endLine": 15662, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55116,12 +55123,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15660, - "startColumn": 11, - "endLine": 15660, - "endColumn": 16, + "startLine": 15697, + "startColumn": 15, + "endLine": 15697, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55135,12 +55142,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15660, - "startColumn": 11, - "endLine": 15660, - "endColumn": 16, + "startLine": 15703, + "startColumn": 15, + "endLine": 15703, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55154,12 +55161,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15759, - "startColumn": 11, - "endLine": 15759, - "endColumn": 16, + "startLine": 15761, + "startColumn": 15, + "endLine": 15761, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55173,12 +55180,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15759, - "startColumn": 11, - "endLine": 15759, - "endColumn": 16, + "startLine": 15796, + "startColumn": 15, + "endLine": 15796, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55192,12 +55199,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15759, - "startColumn": 11, - "endLine": 15759, - "endColumn": 16, + "startLine": 15802, + "startColumn": 15, + "endLine": 15802, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55211,12 +55218,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15858, - "startColumn": 11, - "endLine": 15858, - "endColumn": 16, + "startLine": 15860, + "startColumn": 15, + "endLine": 15860, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55230,12 +55237,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15858, - "startColumn": 11, - "endLine": 15858, - "endColumn": 16, + "startLine": 15895, + "startColumn": 15, + "endLine": 15895, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55249,12 +55256,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15858, - "startColumn": 11, - "endLine": 15858, - "endColumn": 16, + "startLine": 15901, + "startColumn": 15, + "endLine": 15901, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55268,12 +55275,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 15957, - "startColumn": 11, - "endLine": 15957, - "endColumn": 16, + "startLine": 15959, + "startColumn": 15, + "endLine": 15959, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55287,12 +55294,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15957, - "startColumn": 11, - "endLine": 15957, - "endColumn": 16, + "startLine": 15994, + "startColumn": 15, + "endLine": 15994, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55306,12 +55313,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 15957, - "startColumn": 11, - "endLine": 15957, - "endColumn": 16, + "startLine": 16000, + "startColumn": 15, + "endLine": 16000, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55325,12 +55332,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16056, - "startColumn": 11, - "endLine": 16056, - "endColumn": 16, + "startLine": 16058, + "startColumn": 15, + "endLine": 16058, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55344,12 +55351,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16056, - "startColumn": 11, - "endLine": 16056, - "endColumn": 16, + "startLine": 16093, + "startColumn": 15, + "endLine": 16093, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55363,12 +55370,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16056, - "startColumn": 11, - "endLine": 16056, - "endColumn": 16, + "startLine": 16099, + "startColumn": 15, + "endLine": 16099, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55382,12 +55389,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16155, - "startColumn": 11, - "endLine": 16155, - "endColumn": 16, + "startLine": 16157, + "startColumn": 15, + "endLine": 16157, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55401,12 +55408,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16155, - "startColumn": 11, - "endLine": 16155, - "endColumn": 16, + "startLine": 16192, + "startColumn": 15, + "endLine": 16192, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55420,12 +55427,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16155, - "startColumn": 11, - "endLine": 16155, - "endColumn": 16, + "startLine": 16198, + "startColumn": 15, + "endLine": 16198, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55439,12 +55446,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16254, - "startColumn": 11, - "endLine": 16254, - "endColumn": 16, + "startLine": 16256, + "startColumn": 15, + "endLine": 16256, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55458,12 +55465,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16254, - "startColumn": 11, - "endLine": 16254, - "endColumn": 16, + "startLine": 16291, + "startColumn": 15, + "endLine": 16291, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55477,12 +55484,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16254, - "startColumn": 11, - "endLine": 16254, - "endColumn": 16, + "startLine": 16297, + "startColumn": 15, + "endLine": 16297, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55496,12 +55503,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16353, - "startColumn": 11, - "endLine": 16353, - "endColumn": 16, + "startLine": 16355, + "startColumn": 15, + "endLine": 16355, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55515,12 +55522,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16353, - "startColumn": 11, - "endLine": 16353, - "endColumn": 16, + "startLine": 16390, + "startColumn": 15, + "endLine": 16390, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55534,12 +55541,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16353, - "startColumn": 11, - "endLine": 16353, - "endColumn": 16, + "startLine": 16396, + "startColumn": 15, + "endLine": 16396, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55553,12 +55560,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16452, - "startColumn": 11, - "endLine": 16452, - "endColumn": 16, + "startLine": 16454, + "startColumn": 15, + "endLine": 16454, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55572,12 +55579,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16452, - "startColumn": 11, - "endLine": 16452, - "endColumn": 16, + "startLine": 16489, + "startColumn": 15, + "endLine": 16489, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55591,12 +55598,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16452, - "startColumn": 11, - "endLine": 16452, - "endColumn": 16, + "startLine": 16495, + "startColumn": 15, + "endLine": 16495, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55610,12 +55617,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16551, - "startColumn": 11, - "endLine": 16551, - "endColumn": 16, + "startLine": 16553, + "startColumn": 15, + "endLine": 16553, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55629,12 +55636,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16551, - "startColumn": 11, - "endLine": 16551, - "endColumn": 16, + "startLine": 16588, + "startColumn": 15, + "endLine": 16588, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55648,12 +55655,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16551, - "startColumn": 11, - "endLine": 16551, - "endColumn": 16, + "startLine": 16594, + "startColumn": 15, + "endLine": 16594, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55667,12 +55674,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16650, - "startColumn": 11, - "endLine": 16650, - "endColumn": 16, + "startLine": 16652, + "startColumn": 15, + "endLine": 16652, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55686,12 +55693,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16650, - "startColumn": 11, - "endLine": 16650, - "endColumn": 16, + "startLine": 16687, + "startColumn": 15, + "endLine": 16687, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55705,12 +55712,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16650, - "startColumn": 11, - "endLine": 16650, - "endColumn": 16, + "startLine": 16693, + "startColumn": 15, + "endLine": 16693, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55724,12 +55731,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16749, - "startColumn": 11, - "endLine": 16749, - "endColumn": 16, + "startLine": 16751, + "startColumn": 15, + "endLine": 16751, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55743,12 +55750,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16749, - "startColumn": 11, - "endLine": 16749, - "endColumn": 16, + "startLine": 16786, + "startColumn": 15, + "endLine": 16786, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55762,12 +55769,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16749, - "startColumn": 11, - "endLine": 16749, - "endColumn": 16, + "startLine": 16792, + "startColumn": 15, + "endLine": 16792, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55781,12 +55788,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16848, - "startColumn": 11, - "endLine": 16848, - "endColumn": 16, + "startLine": 16850, + "startColumn": 15, + "endLine": 16850, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55800,12 +55807,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16848, - "startColumn": 11, - "endLine": 16848, - "endColumn": 16, + "startLine": 16885, + "startColumn": 15, + "endLine": 16885, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55819,12 +55826,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16848, - "startColumn": 11, - "endLine": 16848, - "endColumn": 16, + "startLine": 16891, + "startColumn": 15, + "endLine": 16891, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55838,12 +55845,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 16947, - "startColumn": 11, - "endLine": 16947, - "endColumn": 16, + "startLine": 16949, + "startColumn": 15, + "endLine": 16949, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55857,12 +55864,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16947, - "startColumn": 11, - "endLine": 16947, - "endColumn": 16, + "startLine": 16984, + "startColumn": 15, + "endLine": 16984, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55876,12 +55883,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 16947, - "startColumn": 11, - "endLine": 16947, - "endColumn": 16, + "startLine": 16990, + "startColumn": 15, + "endLine": 16990, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55895,12 +55902,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17046, - "startColumn": 11, - "endLine": 17046, - "endColumn": 16, + "startLine": 17048, + "startColumn": 15, + "endLine": 17048, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55914,12 +55921,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17046, - "startColumn": 11, - "endLine": 17046, - "endColumn": 16, + "startLine": 17083, + "startColumn": 15, + "endLine": 17083, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55933,12 +55940,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17046, - "startColumn": 11, - "endLine": 17046, - "endColumn": 16, + "startLine": 17089, + "startColumn": 15, + "endLine": 17089, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55952,12 +55959,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17145, - "startColumn": 11, - "endLine": 17145, - "endColumn": 16, + "startLine": 17147, + "startColumn": 15, + "endLine": 17147, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55971,12 +55978,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17145, - "startColumn": 11, - "endLine": 17145, - "endColumn": 16, + "startLine": 17182, + "startColumn": 15, + "endLine": 17182, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -55990,12 +55997,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17145, - "startColumn": 11, - "endLine": 17145, - "endColumn": 16, + "startLine": 17188, + "startColumn": 15, + "endLine": 17188, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56009,12 +56016,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17244, - "startColumn": 11, - "endLine": 17244, - "endColumn": 16, + "startLine": 17246, + "startColumn": 15, + "endLine": 17246, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56028,12 +56035,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17244, - "startColumn": 11, - "endLine": 17244, - "endColumn": 16, + "startLine": 17281, + "startColumn": 15, + "endLine": 17281, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56047,12 +56054,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17244, - "startColumn": 11, - "endLine": 17244, - "endColumn": 16, + "startLine": 17287, + "startColumn": 15, + "endLine": 17287, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56066,12 +56073,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17343, - "startColumn": 11, - "endLine": 17343, - "endColumn": 16, + "startLine": 17345, + "startColumn": 15, + "endLine": 17345, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56085,12 +56092,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17343, - "startColumn": 11, - "endLine": 17343, - "endColumn": 16, + "startLine": 17380, + "startColumn": 15, + "endLine": 17380, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56104,12 +56111,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17343, - "startColumn": 11, - "endLine": 17343, - "endColumn": 16, + "startLine": 17386, + "startColumn": 15, + "endLine": 17386, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56123,12 +56130,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17442, - "startColumn": 11, - "endLine": 17442, - "endColumn": 16, + "startLine": 17444, + "startColumn": 15, + "endLine": 17444, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56142,12 +56149,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17442, - "startColumn": 11, - "endLine": 17442, - "endColumn": 16, + "startLine": 17479, + "startColumn": 15, + "endLine": 17479, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56161,12 +56168,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17442, - "startColumn": 11, - "endLine": 17442, - "endColumn": 16, + "startLine": 17485, + "startColumn": 15, + "endLine": 17485, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56180,12 +56187,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17541, - "startColumn": 11, - "endLine": 17541, - "endColumn": 16, + "startLine": 17543, + "startColumn": 15, + "endLine": 17543, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56199,12 +56206,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17541, - "startColumn": 11, - "endLine": 17541, - "endColumn": 16, + "startLine": 17578, + "startColumn": 15, + "endLine": 17578, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56218,12 +56225,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17541, - "startColumn": 11, - "endLine": 17541, - "endColumn": 16, + "startLine": 17584, + "startColumn": 15, + "endLine": 17584, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56237,12 +56244,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17640, - "startColumn": 11, - "endLine": 17640, - "endColumn": 16, + "startLine": 17642, + "startColumn": 15, + "endLine": 17642, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56256,12 +56263,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17640, - "startColumn": 11, - "endLine": 17640, - "endColumn": 16, + "startLine": 17677, + "startColumn": 15, + "endLine": 17677, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56275,12 +56282,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17640, - "startColumn": 11, - "endLine": 17640, - "endColumn": 16, + "startLine": 17683, + "startColumn": 15, + "endLine": 17683, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56294,12 +56301,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17739, - "startColumn": 11, - "endLine": 17739, - "endColumn": 16, + "startLine": 17741, + "startColumn": 15, + "endLine": 17741, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56313,12 +56320,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17739, - "startColumn": 11, - "endLine": 17739, - "endColumn": 16, + "startLine": 17776, + "startColumn": 15, + "endLine": 17776, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56332,12 +56339,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17739, - "startColumn": 11, - "endLine": 17739, - "endColumn": 16, + "startLine": 17782, + "startColumn": 15, + "endLine": 17782, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56351,12 +56358,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17838, - "startColumn": 11, - "endLine": 17838, - "endColumn": 16, + "startLine": 17840, + "startColumn": 15, + "endLine": 17840, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56370,12 +56377,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17838, - "startColumn": 11, - "endLine": 17838, - "endColumn": 16, + "startLine": 17875, + "startColumn": 15, + "endLine": 17875, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56389,12 +56396,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17838, - "startColumn": 11, - "endLine": 17838, - "endColumn": 16, + "startLine": 17881, + "startColumn": 15, + "endLine": 17881, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56408,12 +56415,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 17937, - "startColumn": 11, - "endLine": 17937, - "endColumn": 16, + "startLine": 17939, + "startColumn": 15, + "endLine": 17939, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56427,12 +56434,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17937, - "startColumn": 11, - "endLine": 17937, - "endColumn": 16, + "startLine": 17974, + "startColumn": 15, + "endLine": 17974, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56446,12 +56453,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 17937, - "startColumn": 11, - "endLine": 17937, - "endColumn": 16, + "startLine": 17980, + "startColumn": 15, + "endLine": 17980, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56465,12 +56472,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18036, - "startColumn": 11, - "endLine": 18036, - "endColumn": 16, + "startLine": 18038, + "startColumn": 15, + "endLine": 18038, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56484,12 +56491,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18036, - "startColumn": 11, - "endLine": 18036, - "endColumn": 16, + "startLine": 18073, + "startColumn": 15, + "endLine": 18073, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56503,12 +56510,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18036, - "startColumn": 11, - "endLine": 18036, - "endColumn": 16, + "startLine": 18079, + "startColumn": 15, + "endLine": 18079, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56522,12 +56529,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18135, - "startColumn": 11, - "endLine": 18135, - "endColumn": 16, + "startLine": 18137, + "startColumn": 15, + "endLine": 18137, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56541,12 +56548,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18135, - "startColumn": 11, - "endLine": 18135, - "endColumn": 16, + "startLine": 18172, + "startColumn": 15, + "endLine": 18172, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56560,12 +56567,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18135, - "startColumn": 11, - "endLine": 18135, - "endColumn": 16, + "startLine": 18178, + "startColumn": 15, + "endLine": 18178, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56579,12 +56586,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18234, - "startColumn": 11, - "endLine": 18234, - "endColumn": 16, + "startLine": 18236, + "startColumn": 15, + "endLine": 18236, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56598,12 +56605,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18234, - "startColumn": 11, - "endLine": 18234, - "endColumn": 16, + "startLine": 18271, + "startColumn": 15, + "endLine": 18271, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56617,12 +56624,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18234, - "startColumn": 11, - "endLine": 18234, - "endColumn": 16, + "startLine": 18277, + "startColumn": 15, + "endLine": 18277, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56636,12 +56643,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18333, - "startColumn": 11, - "endLine": 18333, - "endColumn": 16, + "startLine": 18335, + "startColumn": 15, + "endLine": 18335, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56655,12 +56662,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18333, - "startColumn": 11, - "endLine": 18333, - "endColumn": 16, + "startLine": 18370, + "startColumn": 15, + "endLine": 18370, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56674,12 +56681,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18333, - "startColumn": 11, - "endLine": 18333, - "endColumn": 16, + "startLine": 18376, + "startColumn": 15, + "endLine": 18376, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56693,12 +56700,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18432, - "startColumn": 11, - "endLine": 18432, - "endColumn": 16, + "startLine": 18434, + "startColumn": 15, + "endLine": 18434, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56712,12 +56719,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18432, - "startColumn": 11, - "endLine": 18432, - "endColumn": 16, + "startLine": 18469, + "startColumn": 15, + "endLine": 18469, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56731,12 +56738,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18432, - "startColumn": 11, - "endLine": 18432, - "endColumn": 16, + "startLine": 18475, + "startColumn": 15, + "endLine": 18475, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56750,12 +56757,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18531, - "startColumn": 11, - "endLine": 18531, - "endColumn": 16, + "startLine": 18533, + "startColumn": 15, + "endLine": 18533, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56769,12 +56776,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18531, - "startColumn": 11, - "endLine": 18531, - "endColumn": 16, + "startLine": 18568, + "startColumn": 15, + "endLine": 18568, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56788,12 +56795,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18531, - "startColumn": 11, - "endLine": 18531, - "endColumn": 16, + "startLine": 18574, + "startColumn": 15, + "endLine": 18574, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56807,12 +56814,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18630, - "startColumn": 11, - "endLine": 18630, - "endColumn": 16, + "startLine": 18632, + "startColumn": 15, + "endLine": 18632, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56826,12 +56833,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18630, - "startColumn": 11, - "endLine": 18630, - "endColumn": 16, + "startLine": 18667, + "startColumn": 15, + "endLine": 18667, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56845,12 +56852,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18630, - "startColumn": 11, - "endLine": 18630, - "endColumn": 16, + "startLine": 18673, + "startColumn": 15, + "endLine": 18673, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56864,12 +56871,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18729, - "startColumn": 11, - "endLine": 18729, - "endColumn": 16, + "startLine": 18731, + "startColumn": 15, + "endLine": 18731, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56883,12 +56890,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18729, - "startColumn": 11, - "endLine": 18729, - "endColumn": 16, + "startLine": 18766, + "startColumn": 15, + "endLine": 18766, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56902,12 +56909,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18729, - "startColumn": 11, - "endLine": 18729, - "endColumn": 16, + "startLine": 18772, + "startColumn": 15, + "endLine": 18772, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56921,12 +56928,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18828, - "startColumn": 11, - "endLine": 18828, - "endColumn": 16, + "startLine": 18830, + "startColumn": 15, + "endLine": 18830, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56940,12 +56947,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18828, - "startColumn": 11, - "endLine": 18828, - "endColumn": 16, + "startLine": 18865, + "startColumn": 15, + "endLine": 18865, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56959,12 +56966,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18828, - "startColumn": 11, - "endLine": 18828, - "endColumn": 16, + "startLine": 18871, + "startColumn": 15, + "endLine": 18871, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56978,12 +56985,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 18927, - "startColumn": 11, - "endLine": 18927, - "endColumn": 16, + "startLine": 18929, + "startColumn": 15, + "endLine": 18929, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -56997,12 +57004,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18927, - "startColumn": 11, - "endLine": 18927, - "endColumn": 16, + "startLine": 18964, + "startColumn": 15, + "endLine": 18964, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57016,12 +57023,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 18927, - "startColumn": 11, - "endLine": 18927, - "endColumn": 16, + "startLine": 18970, + "startColumn": 15, + "endLine": 18970, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57035,12 +57042,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19026, - "startColumn": 11, - "endLine": 19026, - "endColumn": 16, + "startLine": 19028, + "startColumn": 15, + "endLine": 19028, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57054,12 +57061,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19026, - "startColumn": 11, - "endLine": 19026, - "endColumn": 16, + "startLine": 19063, + "startColumn": 15, + "endLine": 19063, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57073,12 +57080,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19026, - "startColumn": 11, - "endLine": 19026, - "endColumn": 16, + "startLine": 19069, + "startColumn": 15, + "endLine": 19069, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57092,12 +57099,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19125, - "startColumn": 11, - "endLine": 19125, - "endColumn": 16, + "startLine": 19127, + "startColumn": 15, + "endLine": 19127, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57111,12 +57118,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19125, - "startColumn": 11, - "endLine": 19125, - "endColumn": 16, + "startLine": 19162, + "startColumn": 15, + "endLine": 19162, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57130,12 +57137,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19125, - "startColumn": 11, - "endLine": 19125, - "endColumn": 16, + "startLine": 19168, + "startColumn": 15, + "endLine": 19168, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57149,12 +57156,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19224, - "startColumn": 11, - "endLine": 19224, - "endColumn": 16, + "startLine": 19226, + "startColumn": 15, + "endLine": 19226, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57168,12 +57175,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19224, - "startColumn": 11, - "endLine": 19224, - "endColumn": 16, + "startLine": 19261, + "startColumn": 15, + "endLine": 19261, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57187,12 +57194,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19224, - "startColumn": 11, - "endLine": 19224, - "endColumn": 16, + "startLine": 19267, + "startColumn": 15, + "endLine": 19267, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57206,12 +57213,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19323, - "startColumn": 11, - "endLine": 19323, - "endColumn": 16, + "startLine": 19325, + "startColumn": 15, + "endLine": 19325, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57225,12 +57232,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19323, - "startColumn": 11, - "endLine": 19323, - "endColumn": 16, + "startLine": 19360, + "startColumn": 15, + "endLine": 19360, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57244,12 +57251,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19323, - "startColumn": 11, - "endLine": 19323, - "endColumn": 16, + "startLine": 19366, + "startColumn": 15, + "endLine": 19366, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57263,12 +57270,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19422, - "startColumn": 11, - "endLine": 19422, - "endColumn": 16, + "startLine": 19424, + "startColumn": 15, + "endLine": 19424, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57282,12 +57289,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19422, - "startColumn": 11, - "endLine": 19422, - "endColumn": 16, + "startLine": 19459, + "startColumn": 15, + "endLine": 19459, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57301,12 +57308,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19422, - "startColumn": 11, - "endLine": 19422, - "endColumn": 16, + "startLine": 19465, + "startColumn": 15, + "endLine": 19465, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57320,12 +57327,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19521, - "startColumn": 11, - "endLine": 19521, - "endColumn": 16, + "startLine": 19523, + "startColumn": 15, + "endLine": 19523, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57339,12 +57346,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19521, - "startColumn": 11, - "endLine": 19521, - "endColumn": 16, + "startLine": 19558, + "startColumn": 15, + "endLine": 19558, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57358,12 +57365,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19521, - "startColumn": 11, - "endLine": 19521, - "endColumn": 16, + "startLine": 19564, + "startColumn": 15, + "endLine": 19564, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57377,12 +57384,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19620, - "startColumn": 11, - "endLine": 19620, - "endColumn": 16, + "startLine": 19622, + "startColumn": 15, + "endLine": 19622, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57396,12 +57403,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19620, - "startColumn": 11, - "endLine": 19620, - "endColumn": 16, + "startLine": 19657, + "startColumn": 15, + "endLine": 19657, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57415,12 +57422,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19620, - "startColumn": 11, - "endLine": 19620, - "endColumn": 16, + "startLine": 19663, + "startColumn": 15, + "endLine": 19663, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57434,12 +57441,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19719, - "startColumn": 11, - "endLine": 19719, - "endColumn": 16, + "startLine": 19721, + "startColumn": 15, + "endLine": 19721, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57453,12 +57460,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19719, - "startColumn": 11, - "endLine": 19719, - "endColumn": 16, + "startLine": 19756, + "startColumn": 15, + "endLine": 19756, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57472,12 +57479,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19719, - "startColumn": 11, - "endLine": 19719, - "endColumn": 16, + "startLine": 19762, + "startColumn": 15, + "endLine": 19762, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57491,12 +57498,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19818, - "startColumn": 11, - "endLine": 19818, - "endColumn": 16, + "startLine": 19820, + "startColumn": 15, + "endLine": 19820, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57510,12 +57517,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19818, - "startColumn": 11, - "endLine": 19818, - "endColumn": 16, + "startLine": 19855, + "startColumn": 15, + "endLine": 19855, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57529,12 +57536,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19818, - "startColumn": 11, - "endLine": 19818, - "endColumn": 16, + "startLine": 19861, + "startColumn": 15, + "endLine": 19861, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57548,12 +57555,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 19917, - "startColumn": 11, - "endLine": 19917, - "endColumn": 16, + "startLine": 19919, + "startColumn": 15, + "endLine": 19919, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57567,12 +57574,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19917, - "startColumn": 11, - "endLine": 19917, - "endColumn": 16, + "startLine": 19954, + "startColumn": 15, + "endLine": 19954, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57586,12 +57593,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 19917, - "startColumn": 11, - "endLine": 19917, - "endColumn": 16, + "startLine": 19960, + "startColumn": 15, + "endLine": 19960, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57605,12 +57612,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20016, - "startColumn": 11, - "endLine": 20016, - "endColumn": 16, + "startLine": 20018, + "startColumn": 15, + "endLine": 20018, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57624,12 +57631,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20016, - "startColumn": 11, - "endLine": 20016, - "endColumn": 16, + "startLine": 20053, + "startColumn": 15, + "endLine": 20053, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57643,12 +57650,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20016, - "startColumn": 11, - "endLine": 20016, - "endColumn": 16, + "startLine": 20059, + "startColumn": 15, + "endLine": 20059, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57662,12 +57669,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20115, - "startColumn": 11, - "endLine": 20115, - "endColumn": 16, + "startLine": 20117, + "startColumn": 15, + "endLine": 20117, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57681,12 +57688,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20115, - "startColumn": 11, - "endLine": 20115, - "endColumn": 16, + "startLine": 20152, + "startColumn": 15, + "endLine": 20152, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57700,12 +57707,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20115, - "startColumn": 11, - "endLine": 20115, - "endColumn": 16, + "startLine": 20158, + "startColumn": 15, + "endLine": 20158, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57719,12 +57726,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20214, - "startColumn": 11, - "endLine": 20214, - "endColumn": 16, + "startLine": 20216, + "startColumn": 15, + "endLine": 20216, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57738,12 +57745,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20214, - "startColumn": 11, - "endLine": 20214, - "endColumn": 16, + "startLine": 20251, + "startColumn": 15, + "endLine": 20251, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57757,12 +57764,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20214, - "startColumn": 11, - "endLine": 20214, - "endColumn": 16, + "startLine": 20257, + "startColumn": 15, + "endLine": 20257, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57776,12 +57783,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20313, - "startColumn": 11, - "endLine": 20313, - "endColumn": 16, + "startLine": 20315, + "startColumn": 15, + "endLine": 20315, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57795,12 +57802,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20313, - "startColumn": 11, - "endLine": 20313, - "endColumn": 16, + "startLine": 20350, + "startColumn": 15, + "endLine": 20350, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57814,12 +57821,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20313, - "startColumn": 11, - "endLine": 20313, - "endColumn": 16, + "startLine": 20356, + "startColumn": 15, + "endLine": 20356, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57833,12 +57840,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20412, - "startColumn": 11, - "endLine": 20412, - "endColumn": 16, + "startLine": 20414, + "startColumn": 15, + "endLine": 20414, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57852,12 +57859,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20412, - "startColumn": 11, - "endLine": 20412, - "endColumn": 16, + "startLine": 20449, + "startColumn": 15, + "endLine": 20449, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57871,12 +57878,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20412, - "startColumn": 11, - "endLine": 20412, - "endColumn": 16, + "startLine": 20455, + "startColumn": 15, + "endLine": 20455, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57890,12 +57897,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20511, - "startColumn": 11, - "endLine": 20511, - "endColumn": 16, + "startLine": 20513, + "startColumn": 15, + "endLine": 20513, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57909,12 +57916,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20511, - "startColumn": 11, - "endLine": 20511, - "endColumn": 16, + "startLine": 20548, + "startColumn": 15, + "endLine": 20548, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57928,12 +57935,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20511, - "startColumn": 11, - "endLine": 20511, - "endColumn": 16, + "startLine": 20554, + "startColumn": 15, + "endLine": 20554, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57947,12 +57954,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20610, - "startColumn": 11, - "endLine": 20610, - "endColumn": 16, + "startLine": 20612, + "startColumn": 15, + "endLine": 20612, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57966,12 +57973,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20610, - "startColumn": 11, - "endLine": 20610, - "endColumn": 16, + "startLine": 20647, + "startColumn": 15, + "endLine": 20647, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -57985,12 +57992,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20610, - "startColumn": 11, - "endLine": 20610, - "endColumn": 16, + "startLine": 20653, + "startColumn": 15, + "endLine": 20653, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58004,12 +58011,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20709, - "startColumn": 11, - "endLine": 20709, - "endColumn": 16, + "startLine": 20711, + "startColumn": 15, + "endLine": 20711, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58023,12 +58030,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20709, - "startColumn": 11, - "endLine": 20709, - "endColumn": 16, + "startLine": 20746, + "startColumn": 15, + "endLine": 20746, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58042,12 +58049,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20709, - "startColumn": 11, - "endLine": 20709, - "endColumn": 16, + "startLine": 20752, + "startColumn": 15, + "endLine": 20752, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58061,12 +58068,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20808, - "startColumn": 11, - "endLine": 20808, - "endColumn": 16, + "startLine": 20810, + "startColumn": 15, + "endLine": 20810, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58080,12 +58087,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20808, - "startColumn": 11, - "endLine": 20808, - "endColumn": 16, + "startLine": 20845, + "startColumn": 15, + "endLine": 20845, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58099,12 +58106,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20808, - "startColumn": 11, - "endLine": 20808, - "endColumn": 16, + "startLine": 20851, + "startColumn": 15, + "endLine": 20851, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58118,12 +58125,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 20907, - "startColumn": 11, - "endLine": 20907, - "endColumn": 16, + "startLine": 20909, + "startColumn": 15, + "endLine": 20909, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58137,12 +58144,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20907, - "startColumn": 11, - "endLine": 20907, - "endColumn": 16, + "startLine": 20944, + "startColumn": 15, + "endLine": 20944, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58156,12 +58163,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 20907, - "startColumn": 11, - "endLine": 20907, - "endColumn": 16, + "startLine": 20950, + "startColumn": 15, + "endLine": 20950, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58175,12 +58182,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21006, - "startColumn": 11, - "endLine": 21006, - "endColumn": 16, + "startLine": 21008, + "startColumn": 15, + "endLine": 21008, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58194,12 +58201,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21006, - "startColumn": 11, - "endLine": 21006, - "endColumn": 16, + "startLine": 21043, + "startColumn": 15, + "endLine": 21043, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58213,12 +58220,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21006, - "startColumn": 11, - "endLine": 21006, - "endColumn": 16, + "startLine": 21049, + "startColumn": 15, + "endLine": 21049, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58232,12 +58239,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21105, - "startColumn": 11, - "endLine": 21105, - "endColumn": 16, + "startLine": 21107, + "startColumn": 15, + "endLine": 21107, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58251,12 +58258,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21105, - "startColumn": 11, - "endLine": 21105, - "endColumn": 16, + "startLine": 21142, + "startColumn": 15, + "endLine": 21142, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58270,12 +58277,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21105, - "startColumn": 11, - "endLine": 21105, - "endColumn": 16, + "startLine": 21148, + "startColumn": 15, + "endLine": 21148, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58289,12 +58296,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21204, - "startColumn": 11, - "endLine": 21204, - "endColumn": 16, + "startLine": 21206, + "startColumn": 15, + "endLine": 21206, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58308,12 +58315,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21204, - "startColumn": 11, - "endLine": 21204, - "endColumn": 16, + "startLine": 21241, + "startColumn": 15, + "endLine": 21241, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58327,12 +58334,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21204, - "startColumn": 11, - "endLine": 21204, - "endColumn": 16, + "startLine": 21247, + "startColumn": 15, + "endLine": 21247, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58346,12 +58353,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21303, - "startColumn": 11, - "endLine": 21303, - "endColumn": 16, + "startLine": 21305, + "startColumn": 15, + "endLine": 21305, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58365,12 +58372,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21303, - "startColumn": 11, - "endLine": 21303, - "endColumn": 16, + "startLine": 21340, + "startColumn": 15, + "endLine": 21340, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58384,12 +58391,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21303, - "startColumn": 11, - "endLine": 21303, - "endColumn": 16, + "startLine": 21346, + "startColumn": 15, + "endLine": 21346, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58403,12 +58410,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21402, - "startColumn": 11, - "endLine": 21402, - "endColumn": 16, + "startLine": 21404, + "startColumn": 15, + "endLine": 21404, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58422,12 +58429,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21402, - "startColumn": 11, - "endLine": 21402, - "endColumn": 16, + "startLine": 21439, + "startColumn": 15, + "endLine": 21439, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58441,12 +58448,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21402, - "startColumn": 11, - "endLine": 21402, - "endColumn": 16, + "startLine": 21445, + "startColumn": 15, + "endLine": 21445, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58460,12 +58467,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21501, - "startColumn": 11, - "endLine": 21501, - "endColumn": 16, + "startLine": 21503, + "startColumn": 15, + "endLine": 21503, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58479,12 +58486,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21501, - "startColumn": 11, - "endLine": 21501, - "endColumn": 16, + "startLine": 21538, + "startColumn": 15, + "endLine": 21538, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58498,12 +58505,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21501, - "startColumn": 11, - "endLine": 21501, - "endColumn": 16, + "startLine": 21544, + "startColumn": 15, + "endLine": 21544, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58517,12 +58524,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21600, - "startColumn": 11, - "endLine": 21600, - "endColumn": 16, + "startLine": 21602, + "startColumn": 15, + "endLine": 21602, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58536,12 +58543,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21600, - "startColumn": 11, - "endLine": 21600, - "endColumn": 16, + "startLine": 21637, + "startColumn": 15, + "endLine": 21637, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58555,12 +58562,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21600, - "startColumn": 11, - "endLine": 21600, - "endColumn": 16, + "startLine": 21643, + "startColumn": 15, + "endLine": 21643, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58574,12 +58581,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21699, - "startColumn": 11, - "endLine": 21699, - "endColumn": 16, + "startLine": 21701, + "startColumn": 15, + "endLine": 21701, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58593,12 +58600,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21699, - "startColumn": 11, - "endLine": 21699, - "endColumn": 16, + "startLine": 21736, + "startColumn": 15, + "endLine": 21736, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58612,12 +58619,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21699, - "startColumn": 11, - "endLine": 21699, - "endColumn": 16, + "startLine": 21742, + "startColumn": 15, + "endLine": 21742, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58631,12 +58638,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21798, - "startColumn": 11, - "endLine": 21798, - "endColumn": 16, + "startLine": 21800, + "startColumn": 15, + "endLine": 21800, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58650,12 +58657,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21798, - "startColumn": 11, - "endLine": 21798, - "endColumn": 16, + "startLine": 21835, + "startColumn": 15, + "endLine": 21835, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58669,12 +58676,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21798, - "startColumn": 11, - "endLine": 21798, - "endColumn": 16, + "startLine": 21841, + "startColumn": 15, + "endLine": 21841, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58688,12 +58695,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21897, - "startColumn": 11, - "endLine": 21897, - "endColumn": 16, + "startLine": 21899, + "startColumn": 15, + "endLine": 21899, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58707,12 +58714,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21897, - "startColumn": 11, - "endLine": 21897, - "endColumn": 16, + "startLine": 21934, + "startColumn": 15, + "endLine": 21934, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58726,12 +58733,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21897, - "startColumn": 11, - "endLine": 21897, - "endColumn": 16, + "startLine": 21940, + "startColumn": 15, + "endLine": 21940, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58745,12 +58752,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 21996, - "startColumn": 11, - "endLine": 21996, - "endColumn": 16, + "startLine": 21998, + "startColumn": 15, + "endLine": 21998, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58764,12 +58771,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21996, - "startColumn": 11, - "endLine": 21996, - "endColumn": 16, + "startLine": 22033, + "startColumn": 15, + "endLine": 22033, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58783,12 +58790,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 21996, - "startColumn": 11, - "endLine": 21996, - "endColumn": 16, + "startLine": 22039, + "startColumn": 15, + "endLine": 22039, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58802,12 +58809,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22095, - "startColumn": 11, - "endLine": 22095, - "endColumn": 16, + "startLine": 22097, + "startColumn": 15, + "endLine": 22097, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58821,12 +58828,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22095, - "startColumn": 11, - "endLine": 22095, - "endColumn": 16, + "startLine": 22132, + "startColumn": 15, + "endLine": 22132, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58840,12 +58847,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22095, - "startColumn": 11, - "endLine": 22095, - "endColumn": 16, + "startLine": 22138, + "startColumn": 15, + "endLine": 22138, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58859,12 +58866,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22194, - "startColumn": 11, - "endLine": 22194, - "endColumn": 16, + "startLine": 22196, + "startColumn": 15, + "endLine": 22196, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58878,12 +58885,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22194, - "startColumn": 11, - "endLine": 22194, - "endColumn": 16, + "startLine": 22231, + "startColumn": 15, + "endLine": 22231, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58897,12 +58904,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22194, - "startColumn": 11, - "endLine": 22194, - "endColumn": 16, + "startLine": 22237, + "startColumn": 15, + "endLine": 22237, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58916,12 +58923,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22293, - "startColumn": 11, - "endLine": 22293, - "endColumn": 16, + "startLine": 22295, + "startColumn": 15, + "endLine": 22295, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58935,12 +58942,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22293, - "startColumn": 11, - "endLine": 22293, - "endColumn": 16, + "startLine": 22330, + "startColumn": 15, + "endLine": 22330, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58954,12 +58961,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22293, - "startColumn": 11, - "endLine": 22293, - "endColumn": 16, + "startLine": 22336, + "startColumn": 15, + "endLine": 22336, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58973,12 +58980,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22392, - "startColumn": 11, - "endLine": 22392, - "endColumn": 16, + "startLine": 22394, + "startColumn": 15, + "endLine": 22394, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -58992,12 +58999,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22392, - "startColumn": 11, - "endLine": 22392, - "endColumn": 16, + "startLine": 22429, + "startColumn": 15, + "endLine": 22429, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59011,12 +59018,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22392, - "startColumn": 11, - "endLine": 22392, - "endColumn": 16, + "startLine": 22435, + "startColumn": 15, + "endLine": 22435, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59030,12 +59037,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22491, - "startColumn": 11, - "endLine": 22491, - "endColumn": 16, + "startLine": 22493, + "startColumn": 15, + "endLine": 22493, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59049,12 +59056,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22491, - "startColumn": 11, - "endLine": 22491, - "endColumn": 16, + "startLine": 22528, + "startColumn": 15, + "endLine": 22528, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59068,12 +59075,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22491, - "startColumn": 11, - "endLine": 22491, - "endColumn": 16, + "startLine": 22534, + "startColumn": 15, + "endLine": 22534, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59087,12 +59094,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22590, - "startColumn": 11, - "endLine": 22590, - "endColumn": 16, + "startLine": 22592, + "startColumn": 15, + "endLine": 22592, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59106,12 +59113,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22590, - "startColumn": 11, - "endLine": 22590, - "endColumn": 16, + "startLine": 22627, + "startColumn": 15, + "endLine": 22627, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59125,12 +59132,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22590, - "startColumn": 11, - "endLine": 22590, - "endColumn": 16, + "startLine": 22633, + "startColumn": 15, + "endLine": 22633, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59144,12 +59151,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22689, - "startColumn": 11, - "endLine": 22689, - "endColumn": 16, + "startLine": 22691, + "startColumn": 15, + "endLine": 22691, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59163,12 +59170,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22689, - "startColumn": 11, - "endLine": 22689, - "endColumn": 16, + "startLine": 22726, + "startColumn": 15, + "endLine": 22726, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59182,12 +59189,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22689, - "startColumn": 11, - "endLine": 22689, - "endColumn": 16, + "startLine": 22732, + "startColumn": 15, + "endLine": 22732, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59201,12 +59208,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22788, - "startColumn": 11, - "endLine": 22788, - "endColumn": 16, + "startLine": 22790, + "startColumn": 15, + "endLine": 22790, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59220,12 +59227,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22788, - "startColumn": 11, - "endLine": 22788, - "endColumn": 16, + "startLine": 22825, + "startColumn": 15, + "endLine": 22825, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59239,12 +59246,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22788, - "startColumn": 11, - "endLine": 22788, - "endColumn": 16, + "startLine": 22831, + "startColumn": 15, + "endLine": 22831, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59258,12 +59265,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22887, - "startColumn": 11, - "endLine": 22887, - "endColumn": 16, + "startLine": 22889, + "startColumn": 15, + "endLine": 22889, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59277,12 +59284,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22887, - "startColumn": 11, - "endLine": 22887, - "endColumn": 16, + "startLine": 22924, + "startColumn": 15, + "endLine": 22924, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59296,12 +59303,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22887, - "startColumn": 11, - "endLine": 22887, - "endColumn": 16, + "startLine": 22930, + "startColumn": 15, + "endLine": 22930, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59315,12 +59322,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 22986, - "startColumn": 11, - "endLine": 22986, - "endColumn": 16, + "startLine": 22988, + "startColumn": 15, + "endLine": 22988, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59334,12 +59341,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22986, - "startColumn": 11, - "endLine": 22986, - "endColumn": 16, + "startLine": 23023, + "startColumn": 15, + "endLine": 23023, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59353,12 +59360,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 22986, - "startColumn": 11, - "endLine": 22986, - "endColumn": 16, + "startLine": 23029, + "startColumn": 15, + "endLine": 23029, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59372,12 +59379,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23085, - "startColumn": 11, - "endLine": 23085, - "endColumn": 16, + "startLine": 23087, + "startColumn": 15, + "endLine": 23087, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59391,12 +59398,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23085, - "startColumn": 11, - "endLine": 23085, - "endColumn": 16, + "startLine": 23122, + "startColumn": 15, + "endLine": 23122, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59410,12 +59417,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23085, - "startColumn": 11, - "endLine": 23085, - "endColumn": 16, + "startLine": 23128, + "startColumn": 15, + "endLine": 23128, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59429,12 +59436,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23184, - "startColumn": 11, - "endLine": 23184, - "endColumn": 16, + "startLine": 23186, + "startColumn": 15, + "endLine": 23186, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59448,12 +59455,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23184, - "startColumn": 11, - "endLine": 23184, - "endColumn": 16, + "startLine": 23221, + "startColumn": 15, + "endLine": 23221, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59467,12 +59474,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23184, - "startColumn": 11, - "endLine": 23184, - "endColumn": 16, + "startLine": 23227, + "startColumn": 15, + "endLine": 23227, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59486,12 +59493,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23283, - "startColumn": 11, - "endLine": 23283, - "endColumn": 16, + "startLine": 23285, + "startColumn": 15, + "endLine": 23285, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59505,12 +59512,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23283, - "startColumn": 11, - "endLine": 23283, - "endColumn": 16, + "startLine": 23320, + "startColumn": 15, + "endLine": 23320, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59524,12 +59531,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23283, - "startColumn": 11, - "endLine": 23283, - "endColumn": 16, + "startLine": 23326, + "startColumn": 15, + "endLine": 23326, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59543,12 +59550,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23382, - "startColumn": 11, - "endLine": 23382, - "endColumn": 16, + "startLine": 23384, + "startColumn": 15, + "endLine": 23384, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59562,12 +59569,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23382, - "startColumn": 11, - "endLine": 23382, - "endColumn": 16, + "startLine": 23419, + "startColumn": 15, + "endLine": 23419, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59581,12 +59588,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23382, - "startColumn": 11, - "endLine": 23382, - "endColumn": 16, + "startLine": 23425, + "startColumn": 15, + "endLine": 23425, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59600,12 +59607,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23481, - "startColumn": 11, - "endLine": 23481, - "endColumn": 16, + "startLine": 23483, + "startColumn": 15, + "endLine": 23483, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59619,12 +59626,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23481, - "startColumn": 11, - "endLine": 23481, - "endColumn": 16, + "startLine": 23518, + "startColumn": 15, + "endLine": 23518, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59638,12 +59645,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23481, - "startColumn": 11, - "endLine": 23481, - "endColumn": 16, + "startLine": 23524, + "startColumn": 15, + "endLine": 23524, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59657,12 +59664,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23580, - "startColumn": 11, - "endLine": 23580, - "endColumn": 16, + "startLine": 23582, + "startColumn": 15, + "endLine": 23582, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59676,12 +59683,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23580, - "startColumn": 11, - "endLine": 23580, - "endColumn": 16, + "startLine": 23617, + "startColumn": 15, + "endLine": 23617, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59695,12 +59702,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23580, - "startColumn": 11, - "endLine": 23580, - "endColumn": 16, + "startLine": 23623, + "startColumn": 15, + "endLine": 23623, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59714,12 +59721,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23679, - "startColumn": 11, - "endLine": 23679, - "endColumn": 16, + "startLine": 23681, + "startColumn": 15, + "endLine": 23681, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59733,12 +59740,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23679, - "startColumn": 11, - "endLine": 23679, - "endColumn": 16, + "startLine": 23716, + "startColumn": 15, + "endLine": 23716, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59752,12 +59759,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23679, - "startColumn": 11, - "endLine": 23679, - "endColumn": 16, + "startLine": 23722, + "startColumn": 15, + "endLine": 23722, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59771,12 +59778,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23778, - "startColumn": 11, - "endLine": 23778, - "endColumn": 16, + "startLine": 23780, + "startColumn": 15, + "endLine": 23780, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59790,12 +59797,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23778, - "startColumn": 11, - "endLine": 23778, - "endColumn": 16, + "startLine": 23815, + "startColumn": 15, + "endLine": 23815, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59809,12 +59816,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23778, - "startColumn": 11, - "endLine": 23778, - "endColumn": 16, + "startLine": 23821, + "startColumn": 15, + "endLine": 23821, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59828,12 +59835,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23877, - "startColumn": 11, - "endLine": 23877, - "endColumn": 16, + "startLine": 23879, + "startColumn": 15, + "endLine": 23879, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59847,12 +59854,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23877, - "startColumn": 11, - "endLine": 23877, - "endColumn": 16, + "startLine": 23914, + "startColumn": 15, + "endLine": 23914, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59866,12 +59873,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23877, - "startColumn": 11, - "endLine": 23877, - "endColumn": 16, + "startLine": 23920, + "startColumn": 15, + "endLine": 23920, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59885,12 +59892,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 23976, - "startColumn": 11, - "endLine": 23976, - "endColumn": 16, + "startLine": 23978, + "startColumn": 15, + "endLine": 23978, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59904,12 +59911,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23976, - "startColumn": 11, - "endLine": 23976, - "endColumn": 16, + "startLine": 24013, + "startColumn": 15, + "endLine": 24013, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59923,12 +59930,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 23976, - "startColumn": 11, - "endLine": 23976, - "endColumn": 16, + "startLine": 24019, + "startColumn": 15, + "endLine": 24019, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59942,12 +59949,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24075, - "startColumn": 11, - "endLine": 24075, - "endColumn": 16, + "startLine": 24077, + "startColumn": 15, + "endLine": 24077, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59961,12 +59968,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24075, - "startColumn": 11, - "endLine": 24075, - "endColumn": 16, + "startLine": 24112, + "startColumn": 15, + "endLine": 24112, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59980,12 +59987,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24075, - "startColumn": 11, - "endLine": 24075, - "endColumn": 16, + "startLine": 24118, + "startColumn": 15, + "endLine": 24118, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -59999,12 +60006,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24174, - "startColumn": 11, - "endLine": 24174, - "endColumn": 16, + "startLine": 24176, + "startColumn": 15, + "endLine": 24176, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60018,12 +60025,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24174, - "startColumn": 11, - "endLine": 24174, - "endColumn": 16, + "startLine": 24211, + "startColumn": 15, + "endLine": 24211, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60037,12 +60044,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24174, - "startColumn": 11, - "endLine": 24174, - "endColumn": 16, + "startLine": 24217, + "startColumn": 15, + "endLine": 24217, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60056,12 +60063,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24273, - "startColumn": 11, - "endLine": 24273, - "endColumn": 16, + "startLine": 24275, + "startColumn": 15, + "endLine": 24275, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60075,12 +60082,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24273, - "startColumn": 11, - "endLine": 24273, - "endColumn": 16, + "startLine": 24310, + "startColumn": 15, + "endLine": 24310, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60094,12 +60101,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24273, - "startColumn": 11, - "endLine": 24273, - "endColumn": 16, + "startLine": 24316, + "startColumn": 15, + "endLine": 24316, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60113,12 +60120,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24372, - "startColumn": 11, - "endLine": 24372, - "endColumn": 16, + "startLine": 24374, + "startColumn": 15, + "endLine": 24374, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60132,12 +60139,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24372, - "startColumn": 11, - "endLine": 24372, - "endColumn": 16, + "startLine": 24409, + "startColumn": 15, + "endLine": 24409, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60151,12 +60158,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24372, - "startColumn": 11, - "endLine": 24372, - "endColumn": 16, + "startLine": 24415, + "startColumn": 15, + "endLine": 24415, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60170,12 +60177,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24471, - "startColumn": 11, - "endLine": 24471, - "endColumn": 16, + "startLine": 24473, + "startColumn": 15, + "endLine": 24473, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60189,12 +60196,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24471, - "startColumn": 11, - "endLine": 24471, - "endColumn": 16, + "startLine": 24508, + "startColumn": 15, + "endLine": 24508, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60208,12 +60215,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24471, - "startColumn": 11, - "endLine": 24471, - "endColumn": 16, + "startLine": 24514, + "startColumn": 15, + "endLine": 24514, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60227,12 +60234,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24570, - "startColumn": 11, - "endLine": 24570, - "endColumn": 16, + "startLine": 24572, + "startColumn": 15, + "endLine": 24572, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60246,12 +60253,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24570, - "startColumn": 11, - "endLine": 24570, - "endColumn": 16, + "startLine": 24607, + "startColumn": 15, + "endLine": 24607, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60265,12 +60272,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24570, - "startColumn": 11, - "endLine": 24570, - "endColumn": 16, + "startLine": 24613, + "startColumn": 15, + "endLine": 24613, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60284,12 +60291,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24669, - "startColumn": 11, - "endLine": 24669, - "endColumn": 16, + "startLine": 24671, + "startColumn": 15, + "endLine": 24671, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60303,12 +60310,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24669, - "startColumn": 11, - "endLine": 24669, - "endColumn": 16, + "startLine": 24706, + "startColumn": 15, + "endLine": 24706, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60322,12 +60329,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24669, - "startColumn": 11, - "endLine": 24669, - "endColumn": 16, + "startLine": 24712, + "startColumn": 15, + "endLine": 24712, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60341,12 +60348,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24768, - "startColumn": 11, - "endLine": 24768, - "endColumn": 16, + "startLine": 24770, + "startColumn": 15, + "endLine": 24770, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60360,12 +60367,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24768, - "startColumn": 11, - "endLine": 24768, - "endColumn": 16, + "startLine": 24805, + "startColumn": 15, + "endLine": 24805, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60379,12 +60386,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24768, - "startColumn": 11, - "endLine": 24768, - "endColumn": 16, + "startLine": 24811, + "startColumn": 15, + "endLine": 24811, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60398,12 +60405,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24867, - "startColumn": 11, - "endLine": 24867, - "endColumn": 16, + "startLine": 24869, + "startColumn": 15, + "endLine": 24869, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60417,12 +60424,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24867, - "startColumn": 11, - "endLine": 24867, - "endColumn": 16, + "startLine": 24904, + "startColumn": 15, + "endLine": 24904, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60436,12 +60443,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24867, - "startColumn": 11, - "endLine": 24867, - "endColumn": 16, + "startLine": 24910, + "startColumn": 15, + "endLine": 24910, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60455,12 +60462,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 24966, - "startColumn": 11, - "endLine": 24966, - "endColumn": 16, + "startLine": 24968, + "startColumn": 15, + "endLine": 24968, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60474,12 +60481,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24966, - "startColumn": 11, - "endLine": 24966, - "endColumn": 16, + "startLine": 25003, + "startColumn": 15, + "endLine": 25003, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60493,12 +60500,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 24966, - "startColumn": 11, - "endLine": 24966, - "endColumn": 16, + "startLine": 25009, + "startColumn": 15, + "endLine": 25009, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60512,12 +60519,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25065, - "startColumn": 11, - "endLine": 25065, - "endColumn": 16, + "startLine": 25067, + "startColumn": 15, + "endLine": 25067, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60531,12 +60538,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25065, - "startColumn": 11, - "endLine": 25065, - "endColumn": 16, + "startLine": 25102, + "startColumn": 15, + "endLine": 25102, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60550,12 +60557,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25065, - "startColumn": 11, - "endLine": 25065, - "endColumn": 16, + "startLine": 25108, + "startColumn": 15, + "endLine": 25108, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60569,12 +60576,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25164, - "startColumn": 11, - "endLine": 25164, - "endColumn": 16, + "startLine": 25166, + "startColumn": 15, + "endLine": 25166, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60588,12 +60595,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25164, - "startColumn": 11, - "endLine": 25164, - "endColumn": 16, + "startLine": 25201, + "startColumn": 15, + "endLine": 25201, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60607,12 +60614,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25164, - "startColumn": 11, - "endLine": 25164, - "endColumn": 16, + "startLine": 25207, + "startColumn": 15, + "endLine": 25207, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60626,12 +60633,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25263, - "startColumn": 11, - "endLine": 25263, - "endColumn": 16, + "startLine": 25265, + "startColumn": 15, + "endLine": 25265, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60645,12 +60652,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25263, - "startColumn": 11, - "endLine": 25263, - "endColumn": 16, + "startLine": 25300, + "startColumn": 15, + "endLine": 25300, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60664,12 +60671,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25263, - "startColumn": 11, - "endLine": 25263, - "endColumn": 16, + "startLine": 25306, + "startColumn": 15, + "endLine": 25306, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60683,12 +60690,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25362, - "startColumn": 11, - "endLine": 25362, - "endColumn": 16, + "startLine": 25364, + "startColumn": 15, + "endLine": 25364, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60702,12 +60709,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25362, - "startColumn": 11, - "endLine": 25362, - "endColumn": 16, + "startLine": 25399, + "startColumn": 15, + "endLine": 25399, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60721,12 +60728,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25362, - "startColumn": 11, - "endLine": 25362, - "endColumn": 16, + "startLine": 25405, + "startColumn": 15, + "endLine": 25405, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60740,12 +60747,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25461, - "startColumn": 11, - "endLine": 25461, - "endColumn": 16, + "startLine": 25463, + "startColumn": 15, + "endLine": 25463, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60759,12 +60766,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25461, - "startColumn": 11, - "endLine": 25461, - "endColumn": 16, + "startLine": 25498, + "startColumn": 15, + "endLine": 25498, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60778,12 +60785,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25461, - "startColumn": 11, - "endLine": 25461, - "endColumn": 16, + "startLine": 25504, + "startColumn": 15, + "endLine": 25504, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60797,12 +60804,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25560, - "startColumn": 11, - "endLine": 25560, - "endColumn": 16, + "startLine": 25562, + "startColumn": 15, + "endLine": 25562, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60816,12 +60823,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25560, - "startColumn": 11, - "endLine": 25560, - "endColumn": 16, + "startLine": 25597, + "startColumn": 15, + "endLine": 25597, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60835,12 +60842,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25560, - "startColumn": 11, - "endLine": 25560, - "endColumn": 16, + "startLine": 25603, + "startColumn": 15, + "endLine": 25603, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60854,12 +60861,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25659, - "startColumn": 11, - "endLine": 25659, - "endColumn": 16, + "startLine": 25661, + "startColumn": 15, + "endLine": 25661, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60873,12 +60880,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25659, - "startColumn": 11, - "endLine": 25659, - "endColumn": 16, + "startLine": 25696, + "startColumn": 15, + "endLine": 25696, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60892,12 +60899,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25659, - "startColumn": 11, - "endLine": 25659, - "endColumn": 16, + "startLine": 25702, + "startColumn": 15, + "endLine": 25702, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60911,12 +60918,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25758, - "startColumn": 11, - "endLine": 25758, - "endColumn": 16, + "startLine": 25760, + "startColumn": 15, + "endLine": 25760, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60930,12 +60937,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25758, - "startColumn": 11, - "endLine": 25758, - "endColumn": 16, + "startLine": 25795, + "startColumn": 15, + "endLine": 25795, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60949,12 +60956,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25758, - "startColumn": 11, - "endLine": 25758, - "endColumn": 16, + "startLine": 25801, + "startColumn": 15, + "endLine": 25801, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60968,12 +60975,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25857, - "startColumn": 11, - "endLine": 25857, - "endColumn": 16, + "startLine": 25859, + "startColumn": 15, + "endLine": 25859, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -60987,12 +60994,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25857, - "startColumn": 11, - "endLine": 25857, - "endColumn": 16, + "startLine": 25894, + "startColumn": 15, + "endLine": 25894, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61006,12 +61013,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25857, - "startColumn": 11, - "endLine": 25857, - "endColumn": 16, + "startLine": 25900, + "startColumn": 15, + "endLine": 25900, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61025,12 +61032,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 25956, - "startColumn": 11, - "endLine": 25956, - "endColumn": 16, + "startLine": 25958, + "startColumn": 15, + "endLine": 25958, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61044,12 +61051,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25956, - "startColumn": 11, - "endLine": 25956, - "endColumn": 16, + "startLine": 25993, + "startColumn": 15, + "endLine": 25993, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61063,12 +61070,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 25956, - "startColumn": 11, - "endLine": 25956, - "endColumn": 16, + "startLine": 25999, + "startColumn": 15, + "endLine": 25999, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61082,12 +61089,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26055, - "startColumn": 11, - "endLine": 26055, - "endColumn": 16, + "startLine": 26057, + "startColumn": 15, + "endLine": 26057, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61101,12 +61108,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26055, - "startColumn": 11, - "endLine": 26055, - "endColumn": 16, + "startLine": 26092, + "startColumn": 15, + "endLine": 26092, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61120,12 +61127,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26055, - "startColumn": 11, - "endLine": 26055, - "endColumn": 16, + "startLine": 26098, + "startColumn": 15, + "endLine": 26098, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61139,12 +61146,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26154, - "startColumn": 11, - "endLine": 26154, - "endColumn": 16, + "startLine": 26156, + "startColumn": 15, + "endLine": 26156, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61158,12 +61165,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26154, - "startColumn": 11, - "endLine": 26154, - "endColumn": 16, + "startLine": 26191, + "startColumn": 15, + "endLine": 26191, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61177,12 +61184,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26154, - "startColumn": 11, - "endLine": 26154, - "endColumn": 16, + "startLine": 26197, + "startColumn": 15, + "endLine": 26197, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61196,12 +61203,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26253, - "startColumn": 11, - "endLine": 26253, - "endColumn": 16, + "startLine": 26255, + "startColumn": 15, + "endLine": 26255, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61215,12 +61222,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26253, - "startColumn": 11, - "endLine": 26253, - "endColumn": 16, + "startLine": 26290, + "startColumn": 15, + "endLine": 26290, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61234,12 +61241,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26253, - "startColumn": 11, - "endLine": 26253, - "endColumn": 16, + "startLine": 26296, + "startColumn": 15, + "endLine": 26296, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61253,12 +61260,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26352, - "startColumn": 11, - "endLine": 26352, - "endColumn": 16, + "startLine": 26354, + "startColumn": 15, + "endLine": 26354, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61272,12 +61279,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26352, - "startColumn": 11, - "endLine": 26352, - "endColumn": 16, + "startLine": 26389, + "startColumn": 15, + "endLine": 26389, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61291,12 +61298,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26352, - "startColumn": 11, - "endLine": 26352, - "endColumn": 16, + "startLine": 26395, + "startColumn": 15, + "endLine": 26395, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61310,12 +61317,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26451, - "startColumn": 11, - "endLine": 26451, - "endColumn": 16, + "startLine": 26453, + "startColumn": 15, + "endLine": 26453, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61329,12 +61336,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26451, - "startColumn": 11, - "endLine": 26451, - "endColumn": 16, + "startLine": 26488, + "startColumn": 15, + "endLine": 26488, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61348,12 +61355,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26451, - "startColumn": 11, - "endLine": 26451, - "endColumn": 16, + "startLine": 26494, + "startColumn": 15, + "endLine": 26494, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61367,12 +61374,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26550, - "startColumn": 11, - "endLine": 26550, - "endColumn": 16, + "startLine": 26552, + "startColumn": 15, + "endLine": 26552, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61386,12 +61393,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26550, - "startColumn": 11, - "endLine": 26550, - "endColumn": 16, + "startLine": 26587, + "startColumn": 15, + "endLine": 26587, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61405,12 +61412,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26550, - "startColumn": 11, - "endLine": 26550, - "endColumn": 16, + "startLine": 26593, + "startColumn": 15, + "endLine": 26593, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61424,12 +61431,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26649, - "startColumn": 11, - "endLine": 26649, - "endColumn": 16, + "startLine": 26651, + "startColumn": 15, + "endLine": 26651, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61443,12 +61450,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26649, - "startColumn": 11, - "endLine": 26649, - "endColumn": 16, + "startLine": 26686, + "startColumn": 15, + "endLine": 26686, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61462,12 +61469,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26649, - "startColumn": 11, - "endLine": 26649, - "endColumn": 16, + "startLine": 26692, + "startColumn": 15, + "endLine": 26692, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61481,12 +61488,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26748, - "startColumn": 11, - "endLine": 26748, - "endColumn": 16, + "startLine": 26750, + "startColumn": 15, + "endLine": 26750, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61500,12 +61507,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26748, - "startColumn": 11, - "endLine": 26748, - "endColumn": 16, + "startLine": 26785, + "startColumn": 15, + "endLine": 26785, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61519,12 +61526,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26748, - "startColumn": 11, - "endLine": 26748, - "endColumn": 16, + "startLine": 26791, + "startColumn": 15, + "endLine": 26791, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61538,12 +61545,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26847, - "startColumn": 11, - "endLine": 26847, - "endColumn": 16, + "startLine": 26849, + "startColumn": 15, + "endLine": 26849, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61557,12 +61564,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26847, - "startColumn": 11, - "endLine": 26847, - "endColumn": 16, + "startLine": 26884, + "startColumn": 15, + "endLine": 26884, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61576,12 +61583,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26847, - "startColumn": 11, - "endLine": 26847, - "endColumn": 16, + "startLine": 26890, + "startColumn": 15, + "endLine": 26890, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61595,12 +61602,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 26946, - "startColumn": 11, - "endLine": 26946, - "endColumn": 16, + "startLine": 26948, + "startColumn": 15, + "endLine": 26948, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61614,12 +61621,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26946, - "startColumn": 11, - "endLine": 26946, - "endColumn": 16, + "startLine": 26983, + "startColumn": 15, + "endLine": 26983, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61633,12 +61640,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 26946, - "startColumn": 11, - "endLine": 26946, - "endColumn": 16, + "startLine": 26989, + "startColumn": 15, + "endLine": 26989, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61652,12 +61659,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27045, - "startColumn": 11, - "endLine": 27045, - "endColumn": 16, + "startLine": 27047, + "startColumn": 15, + "endLine": 27047, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61671,12 +61678,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27045, - "startColumn": 11, - "endLine": 27045, - "endColumn": 16, + "startLine": 27082, + "startColumn": 15, + "endLine": 27082, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61690,12 +61697,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27045, - "startColumn": 11, - "endLine": 27045, - "endColumn": 16, + "startLine": 27088, + "startColumn": 15, + "endLine": 27088, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61709,12 +61716,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27144, - "startColumn": 11, - "endLine": 27144, - "endColumn": 16, + "startLine": 27146, + "startColumn": 15, + "endLine": 27146, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61728,12 +61735,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27144, - "startColumn": 11, - "endLine": 27144, - "endColumn": 16, + "startLine": 27181, + "startColumn": 15, + "endLine": 27181, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61747,12 +61754,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27144, - "startColumn": 11, - "endLine": 27144, - "endColumn": 16, + "startLine": 27187, + "startColumn": 15, + "endLine": 27187, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61766,12 +61773,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27243, - "startColumn": 11, - "endLine": 27243, - "endColumn": 16, + "startLine": 27245, + "startColumn": 15, + "endLine": 27245, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61785,12 +61792,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27243, - "startColumn": 11, - "endLine": 27243, - "endColumn": 16, + "startLine": 27280, + "startColumn": 15, + "endLine": 27280, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61804,12 +61811,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27243, - "startColumn": 11, - "endLine": 27243, - "endColumn": 16, + "startLine": 27286, + "startColumn": 15, + "endLine": 27286, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61823,12 +61830,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27342, - "startColumn": 11, - "endLine": 27342, - "endColumn": 16, + "startLine": 27344, + "startColumn": 15, + "endLine": 27344, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61842,12 +61849,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27342, - "startColumn": 11, - "endLine": 27342, - "endColumn": 16, + "startLine": 27379, + "startColumn": 15, + "endLine": 27379, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61861,12 +61868,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27342, - "startColumn": 11, - "endLine": 27342, - "endColumn": 16, + "startLine": 27385, + "startColumn": 15, + "endLine": 27385, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61880,12 +61887,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27441, - "startColumn": 11, - "endLine": 27441, - "endColumn": 16, + "startLine": 27443, + "startColumn": 15, + "endLine": 27443, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61899,12 +61906,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27441, - "startColumn": 11, - "endLine": 27441, - "endColumn": 16, + "startLine": 27478, + "startColumn": 15, + "endLine": 27478, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61918,12 +61925,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27441, - "startColumn": 11, - "endLine": 27441, - "endColumn": 16, + "startLine": 27484, + "startColumn": 15, + "endLine": 27484, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61937,12 +61944,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27540, - "startColumn": 11, - "endLine": 27540, - "endColumn": 16, + "startLine": 27542, + "startColumn": 15, + "endLine": 27542, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61956,12 +61963,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27540, - "startColumn": 11, - "endLine": 27540, - "endColumn": 16, + "startLine": 27577, + "startColumn": 15, + "endLine": 27577, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61975,12 +61982,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27540, - "startColumn": 11, - "endLine": 27540, - "endColumn": 16, + "startLine": 27583, + "startColumn": 15, + "endLine": 27583, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -61994,12 +62001,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27639, - "startColumn": 11, - "endLine": 27639, - "endColumn": 16, + "startLine": 27641, + "startColumn": 15, + "endLine": 27641, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62013,12 +62020,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27639, - "startColumn": 11, - "endLine": 27639, - "endColumn": 16, + "startLine": 27676, + "startColumn": 15, + "endLine": 27676, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62032,12 +62039,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27639, - "startColumn": 11, - "endLine": 27639, - "endColumn": 16, + "startLine": 27682, + "startColumn": 15, + "endLine": 27682, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62051,12 +62058,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27738, - "startColumn": 11, - "endLine": 27738, - "endColumn": 16, + "startLine": 27740, + "startColumn": 15, + "endLine": 27740, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62070,12 +62077,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27738, - "startColumn": 11, - "endLine": 27738, - "endColumn": 16, + "startLine": 27775, + "startColumn": 15, + "endLine": 27775, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62089,12 +62096,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27738, - "startColumn": 11, - "endLine": 27738, - "endColumn": 16, + "startLine": 27781, + "startColumn": 15, + "endLine": 27781, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62108,12 +62115,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27837, - "startColumn": 11, - "endLine": 27837, - "endColumn": 16, + "startLine": 27839, + "startColumn": 15, + "endLine": 27839, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62127,12 +62134,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27837, - "startColumn": 11, - "endLine": 27837, - "endColumn": 16, + "startLine": 27874, + "startColumn": 15, + "endLine": 27874, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62146,12 +62153,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27837, - "startColumn": 11, - "endLine": 27837, - "endColumn": 16, + "startLine": 27880, + "startColumn": 15, + "endLine": 27880, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62165,12 +62172,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 27936, - "startColumn": 11, - "endLine": 27936, - "endColumn": 16, + "startLine": 27938, + "startColumn": 15, + "endLine": 27938, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62184,12 +62191,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27936, - "startColumn": 11, - "endLine": 27936, - "endColumn": 16, + "startLine": 27973, + "startColumn": 15, + "endLine": 27973, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62203,12 +62210,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 27936, - "startColumn": 11, - "endLine": 27936, - "endColumn": 16, + "startLine": 27979, + "startColumn": 15, + "endLine": 27979, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62222,12 +62229,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28035, - "startColumn": 11, - "endLine": 28035, - "endColumn": 16, + "startLine": 28037, + "startColumn": 15, + "endLine": 28037, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62241,12 +62248,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28035, - "startColumn": 11, - "endLine": 28035, - "endColumn": 16, + "startLine": 28072, + "startColumn": 15, + "endLine": 28072, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62260,12 +62267,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28035, - "startColumn": 11, - "endLine": 28035, - "endColumn": 16, + "startLine": 28078, + "startColumn": 15, + "endLine": 28078, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62279,12 +62286,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28134, - "startColumn": 11, - "endLine": 28134, - "endColumn": 16, + "startLine": 28136, + "startColumn": 15, + "endLine": 28136, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62298,12 +62305,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28134, - "startColumn": 11, - "endLine": 28134, - "endColumn": 16, + "startLine": 28171, + "startColumn": 15, + "endLine": 28171, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62317,12 +62324,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28134, - "startColumn": 11, - "endLine": 28134, - "endColumn": 16, + "startLine": 28177, + "startColumn": 15, + "endLine": 28177, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62336,12 +62343,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28233, - "startColumn": 11, - "endLine": 28233, - "endColumn": 16, + "startLine": 28235, + "startColumn": 15, + "endLine": 28235, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62355,12 +62362,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28233, - "startColumn": 11, - "endLine": 28233, - "endColumn": 16, + "startLine": 28270, + "startColumn": 15, + "endLine": 28270, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62374,12 +62381,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28233, - "startColumn": 11, - "endLine": 28233, - "endColumn": 16, + "startLine": 28276, + "startColumn": 15, + "endLine": 28276, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62393,12 +62400,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28332, - "startColumn": 11, - "endLine": 28332, - "endColumn": 16, + "startLine": 28334, + "startColumn": 15, + "endLine": 28334, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62412,12 +62419,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28332, - "startColumn": 11, - "endLine": 28332, - "endColumn": 16, + "startLine": 28369, + "startColumn": 15, + "endLine": 28369, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62431,12 +62438,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28332, - "startColumn": 11, - "endLine": 28332, - "endColumn": 16, + "startLine": 28375, + "startColumn": 15, + "endLine": 28375, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62450,12 +62457,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28431, - "startColumn": 11, - "endLine": 28431, - "endColumn": 16, + "startLine": 28433, + "startColumn": 15, + "endLine": 28433, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62469,12 +62476,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28431, - "startColumn": 11, - "endLine": 28431, - "endColumn": 16, + "startLine": 28468, + "startColumn": 15, + "endLine": 28468, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62488,12 +62495,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28431, - "startColumn": 11, - "endLine": 28431, - "endColumn": 16, + "startLine": 28474, + "startColumn": 15, + "endLine": 28474, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62507,12 +62514,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28530, - "startColumn": 11, - "endLine": 28530, - "endColumn": 16, + "startLine": 28532, + "startColumn": 15, + "endLine": 28532, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62526,12 +62533,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28530, - "startColumn": 11, - "endLine": 28530, - "endColumn": 16, + "startLine": 28567, + "startColumn": 15, + "endLine": 28567, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62545,12 +62552,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28530, - "startColumn": 11, - "endLine": 28530, - "endColumn": 16, + "startLine": 28573, + "startColumn": 15, + "endLine": 28573, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62564,12 +62571,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28629, - "startColumn": 11, - "endLine": 28629, - "endColumn": 16, + "startLine": 28631, + "startColumn": 15, + "endLine": 28631, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62583,12 +62590,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28629, - "startColumn": 11, - "endLine": 28629, - "endColumn": 16, + "startLine": 28666, + "startColumn": 15, + "endLine": 28666, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62602,12 +62609,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28629, - "startColumn": 11, - "endLine": 28629, - "endColumn": 16, + "startLine": 28672, + "startColumn": 15, + "endLine": 28672, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62621,12 +62628,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28728, - "startColumn": 11, - "endLine": 28728, - "endColumn": 16, + "startLine": 28730, + "startColumn": 15, + "endLine": 28730, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62640,12 +62647,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28728, - "startColumn": 11, - "endLine": 28728, - "endColumn": 16, + "startLine": 28765, + "startColumn": 15, + "endLine": 28765, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62659,12 +62666,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28728, - "startColumn": 11, - "endLine": 28728, - "endColumn": 16, + "startLine": 28771, + "startColumn": 15, + "endLine": 28771, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62678,12 +62685,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28827, - "startColumn": 11, - "endLine": 28827, - "endColumn": 16, + "startLine": 28829, + "startColumn": 15, + "endLine": 28829, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62697,12 +62704,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28827, - "startColumn": 11, - "endLine": 28827, - "endColumn": 16, + "startLine": 28864, + "startColumn": 15, + "endLine": 28864, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62716,12 +62723,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28827, - "startColumn": 11, - "endLine": 28827, - "endColumn": 16, + "startLine": 28870, + "startColumn": 15, + "endLine": 28870, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62735,12 +62742,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 28926, - "startColumn": 11, - "endLine": 28926, - "endColumn": 16, + "startLine": 28928, + "startColumn": 15, + "endLine": 28928, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62754,12 +62761,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28926, - "startColumn": 11, - "endLine": 28926, - "endColumn": 16, + "startLine": 28963, + "startColumn": 15, + "endLine": 28963, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62773,12 +62780,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 28926, - "startColumn": 11, - "endLine": 28926, - "endColumn": 16, + "startLine": 28969, + "startColumn": 15, + "endLine": 28969, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62792,12 +62799,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29025, - "startColumn": 11, - "endLine": 29025, - "endColumn": 16, + "startLine": 29027, + "startColumn": 15, + "endLine": 29027, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62811,12 +62818,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29025, - "startColumn": 11, - "endLine": 29025, - "endColumn": 16, + "startLine": 29062, + "startColumn": 15, + "endLine": 29062, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62830,12 +62837,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29025, - "startColumn": 11, - "endLine": 29025, - "endColumn": 16, + "startLine": 29068, + "startColumn": 15, + "endLine": 29068, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62849,12 +62856,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29124, - "startColumn": 11, - "endLine": 29124, - "endColumn": 16, + "startLine": 29126, + "startColumn": 15, + "endLine": 29126, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62868,12 +62875,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29124, - "startColumn": 11, - "endLine": 29124, - "endColumn": 16, + "startLine": 29161, + "startColumn": 15, + "endLine": 29161, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62887,12 +62894,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29124, - "startColumn": 11, - "endLine": 29124, - "endColumn": 16, + "startLine": 29167, + "startColumn": 15, + "endLine": 29167, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62906,12 +62913,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29223, - "startColumn": 11, - "endLine": 29223, - "endColumn": 16, + "startLine": 29225, + "startColumn": 15, + "endLine": 29225, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62925,12 +62932,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29223, - "startColumn": 11, - "endLine": 29223, - "endColumn": 16, + "startLine": 29260, + "startColumn": 15, + "endLine": 29260, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62944,12 +62951,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29223, - "startColumn": 11, - "endLine": 29223, - "endColumn": 16, + "startLine": 29266, + "startColumn": 15, + "endLine": 29266, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62963,12 +62970,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29322, - "startColumn": 11, - "endLine": 29322, - "endColumn": 16, + "startLine": 29324, + "startColumn": 15, + "endLine": 29324, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -62982,12 +62989,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29322, - "startColumn": 11, - "endLine": 29322, - "endColumn": 16, + "startLine": 29359, + "startColumn": 15, + "endLine": 29359, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63001,12 +63008,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29322, - "startColumn": 11, - "endLine": 29322, - "endColumn": 16, + "startLine": 29365, + "startColumn": 15, + "endLine": 29365, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63020,12 +63027,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29421, - "startColumn": 11, - "endLine": 29421, - "endColumn": 16, + "startLine": 29423, + "startColumn": 15, + "endLine": 29423, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63039,12 +63046,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29421, - "startColumn": 11, - "endLine": 29421, - "endColumn": 16, + "startLine": 29458, + "startColumn": 15, + "endLine": 29458, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63058,12 +63065,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29421, - "startColumn": 11, - "endLine": 29421, - "endColumn": 16, + "startLine": 29464, + "startColumn": 15, + "endLine": 29464, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63077,12 +63084,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content.Fn::Sub", "category": "Best Practice", - "startLine": 29520, - "startColumn": 11, - "endLine": 29520, - "endColumn": 16, + "startLine": 29522, + "startColumn": 15, + "endLine": 29522, + "endColumn": 22, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63096,12 +63103,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./etc/awslogs/awslogs.conf.content", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29520, - "startColumn": 11, - "endLine": 29520, - "endColumn": 16, + "startLine": 29557, + "startColumn": 15, + "endLine": 29557, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -63115,12 +63122,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./install_magento.sh.source", + "propertyPath": "Metadata.AWS::CloudFormation::Init.config.files./configure_magento.sh.source.Fn::Sub", "category": "Best Practice", - "startLine": 29520, - "startColumn": 11, - "endLine": 29520, - "endColumn": 16, + "startLine": 29563, + "startColumn": 15, + "endLine": 29563, + "endColumn": 21, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -84506,10 +84513,10 @@ }, "propertyPath": "Outputs/InvalidAttribute/Value.Fn::GetAtt.1", "category": "Structure", - "startLine": 6, - "startColumn": 3, - "endLine": 6, - "endColumn": 19, + "startLine": 7, + "startColumn": 5, + "endLine": 7, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -84524,10 +84531,10 @@ }, "propertyPath": "Outputs/UnresolvedSubVariable/Value.Fn::Sub", "category": "Structure", - "startLine": 8, - "startColumn": 3, - "endLine": 8, - "endColumn": 24, + "startLine": 9, + "startColumn": 5, + "endLine": 9, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -84597,9 +84604,9 @@ "propertyPath": "Outputs/MissingGetAtt/Value.Fn::GetAtt.0", "category": "Structure", "startLine": 6, - "startColumn": 3, + "startColumn": 19, "endLine": 6, - "endColumn": 16, + "endColumn": 24, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -84615,9 +84622,9 @@ "propertyPath": "Outputs/MissingSubRef/Value.Fn::Sub", "category": "Structure", "startLine": 7, - "startColumn": 3, + "startColumn": 19, "endLine": 7, - "endColumn": 16, + "endColumn": 24, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -84633,9 +84640,9 @@ "propertyPath": "Outputs/MissingSubGetAtt/Value.Fn::Sub", "category": "Structure", "startLine": 8, - "startColumn": 3, + "startColumn": 22, "endLine": 8, - "endColumn": 19, + "endColumn": 27, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -84651,9 +84658,9 @@ "propertyPath": "Outputs/InvalidExistingAttribute/Value.Fn::GetAtt.1", "category": "Structure", "startLine": 9, - "startColumn": 3, + "startColumn": 30, "endLine": 9, - "endColumn": 27, + "endColumn": 35, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -85323,10 +85330,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 17, - "startColumn": 7, - "endLine": 17, - "endColumn": 13, + "startLine": 18, + "startColumn": 9, + "endLine": 18, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -87180,13 +87187,13 @@ "entityType": "Resource", "resourceType": "AWS::CodePipeline::Pipeline" }, - "propertyPath": "Properties.Stages[0]", + "propertyPath": "Properties.Stages.0.Actions.0.ActionTypeId.Category", "suggestedFix": "Add an action with ActionTypeId.Category=Source to the first stage", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 13, + "startColumn": 17, + "endLine": 13, + "endColumn": 25, "ruleDescription": "Validate CodePipeline Source actions are only in the first stage", "phase": "LINT" }, @@ -88460,11 +88467,11 @@ "counts": { "fatal": 0, "errors": 0, - "warnings": 13, + "warnings": 11, "informational": 19, "debug": 0 }, - "suppressed": 0, + "suppressed": 2, "strict": false, "severityLevel": "DEBUG" }, @@ -88562,42 +88569,6 @@ "ruleDescription": "Check if Password Properties are correctly configured", "phase": "LINT" }, - { - "ruleId": "W2509", - "severity": "WARN", - "message": "Parameter 'MyPassword' appears to be a password but does not have NoEcho set to true", - "source": "ENGINE", - "entity": { - "logicalId": "MyPassword", - "entityType": "Parameter" - }, - "propertyPath": "Parameters/MyPassword", - "category": "Security", - "startLine": 6, - "startColumn": 3, - "endLine": 6, - "endColumn": 13, - "ruleDescription": "Password parameter should have NoEcho", - "phase": "LINT" - }, - { - "ruleId": "W2509", - "severity": "WARN", - "message": "Parameter 'MyNewPassword' appears to be a password but does not have NoEcho set to true", - "source": "ENGINE", - "entity": { - "logicalId": "MyNewPassword", - "entityType": "Parameter" - }, - "propertyPath": "Parameters/MyNewPassword", - "category": "Security", - "startLine": 10, - "startColumn": 3, - "endLine": 10, - "endColumn": 16, - "ruleDescription": "Password parameter should have NoEcho", - "phase": "LINT" - }, { "ruleId": "W3011", "severity": "WARN", @@ -89123,10 +89094,10 @@ "propertyPath": "Properties.SubnetId", "suggestedFix": "Associate each subnet with exactly one route table", "category": "Resource", - "startLine": 27, - "startColumn": 9, - "endLine": 27, - "endColumn": 17, + "startLine": 28, + "startColumn": 11, + "endLine": 28, + "endColumn": 14, "ruleDescription": "Resource SubnetRouteTableAssociation Properties", "phase": "LINT" }, @@ -89143,10 +89114,10 @@ "propertyPath": "Properties.SubnetId", "suggestedFix": "Associate each subnet with exactly one route table", "category": "Resource", - "startLine": 35, - "startColumn": 9, - "endLine": 35, - "endColumn": 17, + "startLine": 36, + "startColumn": 11, + "endLine": 36, + "endColumn": 14, "ruleDescription": "Resource SubnetRouteTableAssociation Properties", "phase": "LINT" }, @@ -89163,10 +89134,10 @@ "propertyPath": "Properties.SubnetId", "suggestedFix": "Associate each subnet with exactly one route table", "category": "Resource", - "startLine": 44, - "startColumn": 9, - "endLine": 44, - "endColumn": 17, + "startLine": 45, + "startColumn": 11, + "endLine": 45, + "endColumn": 14, "ruleDescription": "Resource SubnetRouteTableAssociation Properties", "phase": "LINT" }, @@ -89183,9 +89154,9 @@ "propertyPath": "Properties.SubnetId", "suggestedFix": "Associate each subnet with exactly one route table", "category": "Resource", - "startLine": 52, - "startColumn": 9, - "endLine": 52, + "startLine": 53, + "startColumn": 11, + "endLine": 53, "endColumn": 17, "ruleDescription": "Resource SubnetRouteTableAssociation Properties", "phase": "LINT" @@ -89220,11 +89191,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SubnetRouteTableAssociation" }, + "propertyPath": "Condition", "category": "Structure", - "startLine": 38, - "startColumn": 3, - "endLine": 38, - "endColumn": 46, + "startLine": 40, + "startColumn": 7, + "endLine": 40, + "endColumn": 16, "ruleDescription": "Condition referenced by resource is not defined", "phase": "PARSE" }, @@ -89238,11 +89210,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SubnetRouteTableAssociation" }, + "propertyPath": "Condition", "category": "Structure", - "startLine": 68, - "startColumn": 3, - "endLine": 68, - "endColumn": 46, + "startLine": 70, + "startColumn": 7, + "endLine": 70, + "endColumn": 16, "ruleDescription": "Condition referenced by resource is not defined", "phase": "PARSE" }, @@ -89258,10 +89231,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 25, - "startColumn": 9, - "endLine": 25, - "endColumn": 21, + "startLine": 26, + "startColumn": 11, + "endLine": 26, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89285,10 +89258,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 27, - "startColumn": 9, - "endLine": 27, - "endColumn": 17, + "startLine": 28, + "startColumn": 11, + "endLine": 28, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89312,10 +89285,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 33, - "startColumn": 9, - "endLine": 33, - "endColumn": 21, + "startLine": 34, + "startColumn": 11, + "endLine": 34, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89339,10 +89312,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 35, - "startColumn": 9, - "endLine": 35, - "endColumn": 17, + "startLine": 36, + "startColumn": 11, + "endLine": 36, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89366,10 +89339,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 42, - "startColumn": 9, - "endLine": 42, - "endColumn": 21, + "startLine": 43, + "startColumn": 11, + "endLine": 43, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89393,10 +89366,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 44, - "startColumn": 9, - "endLine": 44, - "endColumn": 17, + "startLine": 45, + "startColumn": 11, + "endLine": 45, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89420,10 +89393,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 50, - "startColumn": 9, - "endLine": 50, - "endColumn": 21, + "startLine": 51, + "startColumn": 11, + "endLine": 51, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89447,9 +89420,9 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 52, - "startColumn": 9, - "endLine": 52, + "startLine": 53, + "startColumn": 11, + "endLine": 53, "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -89496,10 +89469,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 63, - "startColumn": 9, - "endLine": 63, - "endColumn": 21, + "startLine": 64, + "startColumn": 11, + "endLine": 64, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -89550,10 +89523,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 72, - "startColumn": 9, - "endLine": 72, - "endColumn": 21, + "startLine": 73, + "startColumn": 11, + "endLine": 73, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -91588,13 +91561,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData", + "propertyPath": "Properties.UserData.Fn::Sub.1.myPackage", "suggestedFix": "Check that the Ref target exists as a resource, parameter, or pseudo-parameter", "category": "Intrinsic Function", - "startLine": 40, - "startColumn": 7, - "endLine": 40, - "endColumn": 15, + "startLine": 44, + "startColumn": 11, + "endLine": 44, + "endColumn": 20, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA", @@ -91946,10 +91919,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 40, - "startColumn": 7, - "endLine": 40, - "endColumn": 15, + "startLine": 41, + "startColumn": 9, + "endLine": 41, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -93282,37 +93255,17 @@ "metadata": { "resourcesScanned": 7, "counts": { - "fatal": 1, + "fatal": 0, "errors": 7, "warnings": 0, "informational": 31, "debug": 0 }, - "suppressed": 0, + "suppressed": 1, "strict": false, "severityLevel": "DEBUG" }, "diagnostics": [ - { - "ruleId": "F3003", - "severity": "FATAL", - "message": "'ProvisionedThroughput' is a required property (from extension)", - "source": "SCHEMA", - "entity": { - "logicalId": "ExplicitProvisioned", - "entityType": "Resource", - "resourceType": "AWS::DynamoDB::Table" - }, - "propertyPath": "Properties", - "suggestedFix": "Add 'ProvisionedThroughput'", - "category": "Schema", - "startLine": 10, - "startColumn": 5, - "endLine": 10, - "endColumn": 15, - "ruleDescription": "Required property missing", - "phase": "SCHEMA" - }, { "ruleId": "E3639", "severity": "ERROR", @@ -99630,7 +99583,7 @@ "startLine": 40, "startColumn": 11, "endLine": 40, - "endColumn": 12, + "endColumn": 21, "ruleDescription": "Fn::If condition must exist in Conditions section", "phase": "PARSE" }, @@ -99934,7 +99887,7 @@ "startLine": 61, "startColumn": 13, "endLine": 61, - "endColumn": 14, + "endColumn": 18, "ruleDescription": "Validate identity based IAM policies", "phase": "LINT" }, @@ -100188,7 +100141,7 @@ "startLine": 29, "startColumn": 19, "endLine": 29, - "endColumn": 20, + "endColumn": 40, "ruleDescription": "Validate identity based IAM policies", "phase": "LINT" }, @@ -100596,12 +100549,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Policy" }, - "propertyPath": "Properties.PolicyDocument.Statement.0.Resource.Fn::Join", + "propertyPath": "Properties.PolicyDocument.Statement.0.Resource.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 67, - "startColumn": 15, - "endLine": 67, - "endColumn": 23, + "startLine": 68, + "startColumn": 19, + "endLine": 68, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -100962,9 +100915,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 73, - "startColumn": 7, - "endLine": 73, + "startLine": 74, + "startColumn": 9, + "endLine": 74, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -101232,14 +101185,18 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Role.Fn::GetAtt.0", "suggestedFix": "Check that the GetAtt target resource exists in the template", "category": "Intrinsic Function", - "startLine": 6, - "startColumn": 3, - "endLine": 6, - "endColumn": 19, + "startLine": 11, + "startColumn": 7, + "endLine": 11, + "endColumn": 11, "ruleDescription": "Ref/GetAtt target must exist", - "phase": "SCHEMA" + "phase": "SCHEMA", + "context": { + "resolutionSource": "GetAtt myLambdaExecutionRole.Arn" + } }, { "ruleId": "F1020", @@ -101251,14 +101208,18 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Role.Fn::GetAtt.0", "suggestedFix": "Check that the GetAtt target resource exists in the template", "category": "Intrinsic Function", - "startLine": 16, - "startColumn": 3, - "endLine": 16, - "endColumn": 20, + "startLine": 21, + "startColumn": 7, + "endLine": 21, + "endColumn": 11, "ruleDescription": "Ref/GetAtt target must exist", - "phase": "SCHEMA" + "phase": "SCHEMA", + "context": { + "resolutionSource": "GetAtt myLambdaExecutionRole.Arn" + } }, { "ruleId": "F1020", @@ -101270,14 +101231,18 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Role.Fn::GetAtt.0", "suggestedFix": "Check that the GetAtt target resource exists in the template", "category": "Intrinsic Function", - "startLine": 26, - "startColumn": 3, - "endLine": 26, - "endColumn": 20, + "startLine": 32, + "startColumn": 7, + "endLine": 32, + "endColumn": 11, "ruleDescription": "Ref/GetAtt target must exist", - "phase": "SCHEMA" + "phase": "SCHEMA", + "context": { + "resolutionSource": "GetAtt myLambdaExecutionRole.Arn" + } }, { "ruleId": "F3031", @@ -101976,6 +101941,7 @@ "entityType": "Resource", "resourceType": "" }, + "propertyPath": "Type", "category": "Resource", "startLine": 156, "startColumn": 5, @@ -102129,10 +102095,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Resource", - "startLine": 150, - "startColumn": 7, - "endLine": 150, - "endColumn": 17, + "startLine": 151, + "startColumn": 9, + "endLine": 151, + "endColumn": 15, "ruleDescription": "Validate that all resources have unique primary identifiers", "phase": "LINT" }, @@ -102464,10 +102430,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 150, - "startColumn": 7, - "endLine": 150, - "endColumn": 17, + "startLine": 151, + "startColumn": 9, + "endLine": 151, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -102820,10 +102786,10 @@ }, "propertyPath": "Properties", "category": "Schema", - "startLine": 16, - "startColumn": 5, - "endLine": 16, - "endColumn": 15, + "startLine": 17, + "startColumn": 7, + "endLine": 17, + "endColumn": 13, "conditionScenario": { "cPrimaryRegion": true }, @@ -102920,6 +102886,66 @@ }, "diagnostics": [] }, + "bad/resources/properties/custom_missing_service_token.yaml": { + "filePath": "bad/resources/properties/custom_missing_service_token.yaml", + "status": "OK", + "version": "1.8.0", + "metadata": { + "resourcesScanned": 2, + "counts": { + "fatal": 2, + "errors": 0, + "warnings": 0, + "informational": 0, + "debug": 0 + }, + "suppressed": 0, + "strict": false, + "severityLevel": "DEBUG" + }, + "diagnostics": [ + { + "ruleId": "F3003", + "severity": "FATAL", + "message": "'ServiceToken' is a required property", + "source": "SCHEMA", + "entity": { + "logicalId": "CustomPrefixMissingToken", + "entityType": "Resource", + "resourceType": "Custom::MyHandler" + }, + "propertyPath": "Properties", + "suggestedFix": "Add a ServiceToken property (ARN of the Lambda or SNS topic backing this custom resource)", + "category": "Schema", + "startLine": 4, + "startColumn": 5, + "endLine": 4, + "endColumn": 15, + "ruleDescription": "Required property missing", + "phase": "SCHEMA" + }, + { + "ruleId": "F3003", + "severity": "FATAL", + "message": "'ServiceToken' is a required property", + "source": "SCHEMA", + "entity": { + "logicalId": "CloudFormationCustomMissingToken", + "entityType": "Resource", + "resourceType": "AWS::CloudFormation::CustomResource" + }, + "propertyPath": "Properties", + "suggestedFix": "Add the required property 'ServiceToken'", + "category": "Schema", + "startLine": 9, + "startColumn": 5, + "endLine": 9, + "endColumn": 15, + "ruleDescription": "Required property missing", + "phase": "SCHEMA" + } + ] + }, "bad/resources/properties/list_duplicates.yaml": { "filePath": "bad/resources/properties/list_duplicates.yaml", "status": "OK", @@ -103187,7 +103213,7 @@ "startLine": 17, "startColumn": 11, "endLine": 17, - "endColumn": 12, + "endColumn": 1289, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-cloudwatch.git", "ruleDescription": "String length out of bounds", "phase": "SCHEMA", @@ -104589,12 +104615,12 @@ "entityType": "Resource", "resourceType": "AWS::RDS::DBCluster" }, - "propertyPath": "Properties.MasterUsername.Fn::Join", + "propertyPath": "Properties.MasterUsername.Fn::Join.0", "category": "Intrinsic Function", "startLine": 9, - "startColumn": 7, + "startColumn": 30, "endLine": 9, - "endColumn": 15, + "endColumn": 32, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -104842,6 +104868,172 @@ } ] }, + "bad/resources/sqs/standard_queue_fifo_suffix.yaml": { + "filePath": "bad/resources/sqs/standard_queue_fifo_suffix.yaml", + "status": "OK", + "version": "1.8.0", + "metadata": { + "resourcesScanned": 1, + "counts": { + "fatal": 0, + "errors": 1, + "warnings": 0, + "informational": 6, + "debug": 0 + }, + "suppressed": 0, + "strict": false, + "severityLevel": "DEBUG" + }, + "diagnostics": [ + { + "ruleId": "E3501", + "severity": "ERROR", + "message": "Non-FIFO queue name 'standard-queue.fifo' must not end with '.fifo'", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.QueueName", + "suggestedFix": "Remove .fifo suffix or set FifoQueue to true", + "category": "Resource", + "startLine": 6, + "startColumn": 7, + "endLine": 6, + "endColumn": 16, + "ruleDescription": "Validate SQS queue properties are valid", + "phase": "LINT", + "context": { + "extra": { + "queue_name": "standard-queue.fifo" + } + } + }, + { + "ruleId": "I3011", + "severity": "INFO", + "message": "'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "category": "Best Practice", + "startLine": 3, + "startColumn": 3, + "endLine": 3, + "endColumn": 30, + "ruleDescription": "Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy", + "phase": "LINT" + }, + { + "ruleId": "I3011", + "severity": "INFO", + "message": "'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "category": "Best Practice", + "startLine": 3, + "startColumn": 3, + "endLine": 3, + "endColumn": 30, + "ruleDescription": "Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy", + "phase": "LINT" + }, + { + "ruleId": "I3013", + "severity": "INFO", + "message": "'MessageRetentionPeriod' is a required property (The default retention period will delete the data after a pre-defined time. Set an explicit values to avoid data loss on resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties", + "category": "Best Practice", + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 15, + "ruleDescription": "Check resources with auto expiring content have explicit retention period", + "phase": "LINT" + }, + { + "ruleId": "I9001", + "severity": "INFO", + "message": "Property 'QueueName' is create-only; updating it will cause resource replacement", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.QueueName", + "category": "Best Practice", + "startLine": 6, + "startColumn": 7, + "endLine": 6, + "endColumn": 16, + "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sqs.git", + "ruleDescription": "Create-only property updated triggers resource replacement", + "phase": "SCHEMA", + "context": { + "lifecycle": "create-only" + } + }, + { + "ruleId": "I9001", + "severity": "INFO", + "message": "Property 'FifoQueue' is create-only; updating it will cause resource replacement", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.FifoQueue", + "category": "Best Practice", + "startLine": 7, + "startColumn": 7, + "endLine": 7, + "endColumn": 16, + "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sqs.git", + "ruleDescription": "Create-only property updated triggers resource replacement", + "phase": "SCHEMA", + "context": { + "lifecycle": "create-only" + } + }, + { + "ruleId": "I9040", + "severity": "INFO", + "message": "Resource 'StandardQueueWithFifoSuffix' of type 'AWS::SQS::Queue' supports Tags but none are configured", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueueWithFifoSuffix", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.Tags", + "suggestedFix": "Add Tags to improve resource organization and cost tracking", + "category": "Best Practice", + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 15, + "ruleDescription": "Resource should have Tags", + "phase": "LINT" + } + ] + }, "bad/resources/uniqueNames.yaml": { "filePath": "bad/resources/uniqueNames.yaml", "status": "OK", @@ -105029,7 +105221,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "Resources/mySecurityGroupVpc1", "category": "Reference", "startLine": 23, "startColumn": 3, @@ -105048,7 +105239,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "Resources/mySecurityGroupVpc2", "category": "Reference", "startLine": 33, "startColumn": 3, @@ -105067,7 +105257,6 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "Resources/mySecurityGroupVpc3", "category": "Reference", "startLine": 41, "startColumn": 3, @@ -105086,7 +105275,6 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Resources/myRoleToWriteToS3", "category": "Reference", "startLine": 96, "startColumn": 3, @@ -105105,7 +105293,6 @@ "entityType": "Resource", "resourceType": "AWS::IAM::InstanceProfile" }, - "propertyPath": "Resources/myInstanceProfile", "category": "Reference", "startLine": 145, "startColumn": 3, @@ -105124,7 +105311,6 @@ "entityType": "Resource", "resourceType": "AWS::KMS::Key" }, - "propertyPath": "Resources/myKms", "category": "Reference", "startLine": 153, "startColumn": 3, @@ -105541,7 +105727,7 @@ "startLine": 84, "startColumn": 13, "endLine": 84, - "endColumn": 20, + "endColumn": 21, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -105560,7 +105746,7 @@ "startLine": 92, "startColumn": 13, "endLine": 92, - "endColumn": 20, + "endColumn": 21, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -105579,7 +105765,7 @@ "startLine": 165, "startColumn": 15, "endLine": 165, - "endColumn": 22, + "endColumn": 18, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -105598,7 +105784,7 @@ "startLine": 171, "startColumn": 15, "endLine": 171, - "endColumn": 22, + "endColumn": 18, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -105617,7 +105803,7 @@ "startLine": 192, "startColumn": 24, "endLine": 192, - "endColumn": 31, + "endColumn": 75, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -105636,7 +105822,7 @@ "startLine": 204, "startColumn": 15, "endLine": 204, - "endColumn": 22, + "endColumn": 18, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -106315,7 +106501,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource", "category": "Reference", "startLine": 2, "startColumn": 3, @@ -106334,7 +106519,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource2", "category": "Reference", "startLine": 7, "startColumn": 3, @@ -106353,7 +106537,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource3", "category": "Reference", "startLine": 12, "startColumn": 3, @@ -106372,7 +106555,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource4", "category": "Reference", "startLine": 17, "startColumn": 3, @@ -106391,7 +106573,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource5", "category": "Reference", "startLine": 22, "startColumn": 3, @@ -106410,7 +106591,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource6", "category": "Reference", "startLine": 27, "startColumn": 3, @@ -106429,7 +106609,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource7", "category": "Reference", "startLine": 32, "startColumn": 3, @@ -106448,7 +106627,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource8", "category": "Reference", "startLine": 37, "startColumn": 3, @@ -106467,7 +106645,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource9", "category": "Reference", "startLine": 42, "startColumn": 3, @@ -106686,7 +106863,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource", "category": "Reference", "startLine": 4, "startColumn": 3, @@ -106705,7 +106881,6 @@ "entityType": "Resource", "resourceType": "AWS::SNS::Topic" }, - "propertyPath": "Resources/Resource2", "category": "Reference", "startLine": 7, "startColumn": 3, @@ -106789,7 +106964,7 @@ "startLine": 21, "startColumn": 13, "endLine": 21, - "endColumn": 15, + "endColumn": 34, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106808,7 +106983,7 @@ "startLine": 22, "startColumn": 13, "endLine": 22, - "endColumn": 15, + "endColumn": 30, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106827,7 +107002,7 @@ "startLine": 23, "startColumn": 13, "endLine": 23, - "endColumn": 15, + "endColumn": 27, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106846,7 +107021,7 @@ "startLine": 24, "startColumn": 13, "endLine": 24, - "endColumn": 15, + "endColumn": 24, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106865,7 +107040,7 @@ "startLine": 25, "startColumn": 13, "endLine": 25, - "endColumn": 15, + "endColumn": 31, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106884,7 +107059,7 @@ "startLine": 26, "startColumn": 13, "endLine": 26, - "endColumn": 15, + "endColumn": 31, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106903,7 +107078,7 @@ "startLine": 27, "startColumn": 13, "endLine": 27, - "endColumn": 15, + "endColumn": 31, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -106922,7 +107097,7 @@ "startLine": 28, "startColumn": 13, "endLine": 28, - "endColumn": 15, + "endColumn": 31, "ruleDescription": "CloudFront Aliases", "phase": "LINT" }, @@ -108360,7 +108535,7 @@ "startLine": 32, "startColumn": 11, "endLine": 32, - "endColumn": 12, + "endColumn": 271, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108379,7 +108554,7 @@ "startLine": 33, "startColumn": 11, "endLine": 33, - "endColumn": 12, + "endColumn": 274, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108398,7 +108573,7 @@ "startLine": 35, "startColumn": 11, "endLine": 35, - "endColumn": 12, + "endColumn": 18, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108417,7 +108592,7 @@ "startLine": 55, "startColumn": 11, "endLine": 55, - "endColumn": 12, + "endColumn": 22, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108436,7 +108611,7 @@ "startLine": 56, "startColumn": 11, "endLine": 56, - "endColumn": 12, + "endColumn": 50, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108455,7 +108630,7 @@ "startLine": 57, "startColumn": 11, "endLine": 57, - "endColumn": 12, + "endColumn": 47, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108474,7 +108649,7 @@ "startLine": 58, "startColumn": 11, "endLine": 58, - "endColumn": 12, + "endColumn": 47, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108493,7 +108668,7 @@ "startLine": 59, "startColumn": 11, "endLine": 59, - "endColumn": 12, + "endColumn": 54, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108512,7 +108687,7 @@ "startLine": 69, "startColumn": 11, "endLine": 69, - "endColumn": 12, + "endColumn": 22, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108531,7 +108706,7 @@ "startLine": 70, "startColumn": 11, "endLine": 70, - "endColumn": 12, + "endColumn": 37, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108566,10 +108741,10 @@ }, "propertyPath": "Properties.ResourceRecords", "category": "Resource", - "startLine": 90, - "startColumn": 7, - "endLine": 90, - "endColumn": 22, + "startLine": 91, + "startColumn": 9, + "endLine": 91, + "endColumn": 15, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108588,7 +108763,7 @@ "startLine": 104, "startColumn": 11, "endLine": 104, - "endColumn": 12, + "endColumn": 22, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108607,7 +108782,7 @@ "startLine": 105, "startColumn": 11, "endLine": 105, - "endColumn": 12, + "endColumn": 25, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108626,7 +108801,7 @@ "startLine": 127, "startColumn": 15, "endLine": 127, - "endColumn": 16, + "endColumn": 22, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108645,7 +108820,7 @@ "startLine": 132, "startColumn": 15, "endLine": 132, - "endColumn": 16, + "endColumn": 30, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108664,7 +108839,7 @@ "startLine": 137, "startColumn": 15, "endLine": 137, - "endColumn": 16, + "endColumn": 55, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108683,7 +108858,7 @@ "startLine": 138, "startColumn": 15, "endLine": 138, - "endColumn": 16, + "endColumn": 57, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108702,7 +108877,7 @@ "startLine": 139, "startColumn": 15, "endLine": 139, - "endColumn": 16, + "endColumn": 53, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108721,7 +108896,7 @@ "startLine": 140, "startColumn": 15, "endLine": 140, - "endColumn": 16, + "endColumn": 48, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108740,7 +108915,7 @@ "startLine": 141, "startColumn": 15, "endLine": 141, - "endColumn": 16, + "endColumn": 25, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108759,7 +108934,7 @@ "startLine": 142, "startColumn": 15, "endLine": 142, - "endColumn": 16, + "endColumn": 53, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108778,7 +108953,7 @@ "startLine": 147, "startColumn": 15, "endLine": 147, - "endColumn": 16, + "endColumn": 27, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108797,7 +108972,7 @@ "startLine": 152, "startColumn": 15, "endLine": 152, - "endColumn": 16, + "endColumn": 29, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108816,7 +108991,7 @@ "startLine": 157, "startColumn": 15, "endLine": 157, - "endColumn": 16, + "endColumn": 52, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108835,7 +109010,7 @@ "startLine": 158, "startColumn": 15, "endLine": 158, - "endColumn": 16, + "endColumn": 52, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108854,7 +109029,7 @@ "startLine": 159, "startColumn": 15, "endLine": 159, - "endColumn": 16, + "endColumn": 47, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108873,7 +109048,7 @@ "startLine": 169, "startColumn": 15, "endLine": 169, - "endColumn": 16, + "endColumn": 32, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -108892,7 +109067,7 @@ "startLine": 170, "startColumn": 15, "endLine": 170, - "endColumn": 16, + "endColumn": 38, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109494,7 +109669,7 @@ "startLine": 67, "startColumn": 31, "endLine": 67, - "endColumn": 32, + "endColumn": 49, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109513,7 +109688,7 @@ "startLine": 85, "startColumn": 31, "endLine": 85, - "endColumn": 32, + "endColumn": 50, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109532,7 +109707,7 @@ "startLine": 97, "startColumn": 17, "endLine": 97, - "endColumn": 18, + "endColumn": 41, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109551,7 +109726,7 @@ "startLine": 117, "startColumn": 17, "endLine": 117, - "endColumn": 18, + "endColumn": 42, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109958,7 +110133,7 @@ "startLine": 60, "startColumn": 31, "endLine": 60, - "endColumn": 32, + "endColumn": 50, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109977,7 +110152,7 @@ "startLine": 78, "startColumn": 31, "endLine": 78, - "endColumn": 32, + "endColumn": 56, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -109996,7 +110171,7 @@ "startLine": 88, "startColumn": 31, "endLine": 88, - "endColumn": 32, + "endColumn": 51, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -110015,7 +110190,7 @@ "startLine": 110, "startColumn": 31, "endLine": 110, - "endColumn": 32, + "endColumn": 52, "ruleDescription": "Validate Route53 RecordSets", "phase": "LINT" }, @@ -110216,10 +110391,10 @@ "propertyPath": "Properties.IntelligentTieringConfigurations[0].Tierings[0].Days", "suggestedFix": "Set Days between 90 and 730", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 11, + "startColumn": 15, + "endLine": 11, + "endColumn": 19, "ruleDescription": "Validate the days for tierings in IntelligentTieringConfigurations", "phase": "LINT" }, @@ -110236,10 +110411,10 @@ "propertyPath": "Properties.IntelligentTieringConfigurations[1].Tierings[0].Days", "suggestedFix": "Set Days between 90 and 730", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 16, + "startColumn": 15, + "endLine": 16, + "endColumn": 19, "ruleDescription": "Validate the days for tierings in IntelligentTieringConfigurations", "phase": "LINT" }, @@ -110256,10 +110431,10 @@ "propertyPath": "Properties.IntelligentTieringConfigurations[1].Tierings[1].Days", "suggestedFix": "Set Days between 180 and 730", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 18, + "startColumn": 15, + "endLine": 18, + "endColumn": 19, "ruleDescription": "Validate the days for tierings in IntelligentTieringConfigurations", "phase": "LINT" }, @@ -110276,10 +110451,10 @@ "propertyPath": "Properties.IntelligentTieringConfigurations[1].Tierings[2].Days", "suggestedFix": "Set Days between 180 and 730", "category": "Resource", - "startLine": 5, - "startColumn": 5, - "endLine": 5, - "endColumn": 15, + "startLine": 20, + "startColumn": 15, + "endLine": 20, + "endColumn": 19, "ruleDescription": "Validate the days for tierings in IntelligentTieringConfigurations", "phase": "LINT" }, @@ -111077,12 +111252,12 @@ "entityType": "Resource", "resourceType": "AWS::SageMaker::InferenceExperiment" }, - "propertyPath": "Properties.ModelVariants.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", + "propertyPath": "Properties.ModelVariants.0.InfrastructureConfig.RealTimeInferenceConfig.InstanceType", "category": "Resource", - "startLine": 23, - "startColumn": 7, - "endLine": 23, - "endColumn": 20, + "startLine": 26, + "startColumn": 15, + "endLine": 26, + "endColumn": 27, "ruleDescription": "Validate SageMaker hosting instance types based on region", "phase": "LINT" }, @@ -111096,12 +111271,12 @@ "entityType": "Resource", "resourceType": "AWS::SageMaker::ModelPackage" }, - "propertyPath": "Properties.ValidationSpecification.ValidationProfiles.TransformJobDefinition.TransformResources.InstanceType", + "propertyPath": "Properties.ValidationSpecification.ValidationProfiles.0.TransformJobDefinition.TransformResources.InstanceType", "category": "Resource", - "startLine": 36, - "startColumn": 9, - "endLine": 36, - "endColumn": 27, + "startLine": 39, + "startColumn": 17, + "endLine": 39, + "endColumn": 29, "ruleDescription": "Validate SageMaker transform instance types based on region", "phase": "LINT" }, @@ -111115,12 +111290,12 @@ "entityType": "Resource", "resourceType": "AWS::SageMaker::Cluster" }, - "propertyPath": "Properties.InstanceGroups.InstanceType", + "propertyPath": "Properties.InstanceGroups.0.InstanceType", "category": "Resource", - "startLine": 45, - "startColumn": 7, - "endLine": 45, - "endColumn": 21, + "startLine": 46, + "startColumn": 11, + "endLine": 46, + "endColumn": 23, "ruleDescription": "Validate SageMaker cluster instance types based on region", "phase": "LINT" }, @@ -111134,12 +111309,12 @@ "entityType": "Resource", "resourceType": "AWS::SageMaker::Cluster" }, - "propertyPath": "Properties.RestrictedInstanceGroups.InstanceType", + "propertyPath": "Properties.RestrictedInstanceGroups.0.InstanceType", "category": "Resource", - "startLine": 47, - "startColumn": 7, - "endLine": 47, - "endColumn": 31, + "startLine": 48, + "startColumn": 11, + "endLine": 48, + "endColumn": 23, "ruleDescription": "Validate SageMaker cluster instance types based on region", "phase": "LINT" }, @@ -112360,11 +112535,12 @@ "entityType": "Resource", "resourceType": "AWS::Serverless::Function" }, + "propertyPath": "Type", "category": "Structure", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 7, + "startLine": 4, + "startColumn": 5, + "endLine": 4, + "endColumn": 9, "ruleDescription": "Check if Serverless Resources have Serverless Transform", "phase": "LINT" }, @@ -112418,11 +112594,12 @@ "entityType": "Resource", "resourceType": "AWS::Serverless::Function" }, + "propertyPath": "Type", "category": "Structure", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 7, + "startLine": 4, + "startColumn": 5, + "endLine": 4, + "endColumn": 9, "ruleDescription": "Check if Serverless Resources have Serverless Transform", "phase": "LINT" }, @@ -113358,11 +113535,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Runtime", "category": "Resource", - "startLine": 23, - "startColumn": 3, - "endLine": 23, - "endColumn": 12, + "startLine": 27, + "startColumn": 7, + "endLine": 27, + "endColumn": 14, "ruleDescription": "Lambda ZipFile requires nodejs or python runtime", "phase": "LINT" }, @@ -114917,10 +115095,10 @@ }, "propertyPath": "Outputs/WriteOnlyOutput/Value.Fn::GetAtt.1", "category": "Structure", - "startLine": 10, - "startColumn": 3, - "endLine": 10, - "endColumn": 18, + "startLine": 11, + "startColumn": 5, + "endLine": 11, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -115980,7 +116158,7 @@ "resourcesScanned": 1, "counts": { "fatal": 0, - "errors": 2, + "errors": 1, "warnings": 0, "informational": 6, "debug": 0 @@ -115990,25 +116168,6 @@ "severityLevel": "DEBUG" }, "diagnostics": [ - { - "ruleId": "E2504", - "severity": "ERROR", - "message": "FIFO queue name 'my-queue' must end with '.fifo'", - "source": "ENGINE", - "entity": { - "logicalId": "FifoQueue", - "entityType": "Resource", - "resourceType": "AWS::SQS::Queue" - }, - "propertyPath": "Properties.QueueName", - "category": "Resource", - "startLine": 6, - "startColumn": 7, - "endLine": 6, - "endColumn": 16, - "ruleDescription": "FIFO queue name must end with .fifo", - "phase": "LINT" - }, { "ruleId": "E3501", "severity": "ERROR", @@ -116548,7 +116707,7 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "Properties.DefinitionString", + "propertyPath": "Properties.DefinitionString.StartAt", "category": "Resource", "startLine": 6, "startColumn": 7, @@ -116626,7 +116785,7 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "Properties.DefinitionString", + "propertyPath": "Properties.DefinitionString.StartAt", "category": "Resource", "startLine": 7, "startColumn": 7, @@ -116645,7 +116804,7 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "Properties.DefinitionString", + "propertyPath": "Properties.DefinitionString.States.DoWork.Type", "category": "Resource", "startLine": 7, "startColumn": 7, @@ -118292,7 +118451,7 @@ "startLine": 4, "startColumn": 5, "endLine": 4, - "endColumn": 6, + "endColumn": 7, "ruleDescription": "Validate Transform configuration", "phase": "PARSE" }, @@ -118567,11 +118726,12 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Condition", "category": "Structure", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 4, + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 14, "ruleDescription": "Condition referenced by resource is not defined", "phase": "PARSE" }, @@ -118747,11 +118907,12 @@ "entityType": "Resource", "resourceType": "AWS::Fake::NonExistent" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 3, - "startColumn": 3, - "endLine": 3, - "endColumn": 15, + "startLine": 4, + "startColumn": 5, + "endLine": 4, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -118811,37 +118972,17 @@ "metadata": { "resourcesScanned": 8, "counts": { - "fatal": 1, + "fatal": 0, "errors": 4, "warnings": 3, "informational": 16, "debug": 0 }, - "suppressed": 0, + "suppressed": 1, "strict": false, "severityLevel": "DEBUG" }, "diagnostics": [ - { - "ruleId": "F3003", - "severity": "FATAL", - "message": "'ProvisionedThroughput' is a required property (from extension)", - "source": "SCHEMA", - "entity": { - "logicalId": "DataTable", - "entityType": "Resource", - "resourceType": "AWS::DynamoDB::Table" - }, - "propertyPath": "Properties", - "suggestedFix": "Add 'ProvisionedThroughput'", - "category": "Schema", - "startLine": 72, - "startColumn": 4, - "endLine": 72, - "endColumn": 15, - "ruleDescription": "Required property missing", - "phase": "SCHEMA" - }, { "ruleId": "E3045", "severity": "ERROR", @@ -119178,10 +119319,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 127, - "startColumn": 5, - "endLine": 127, - "endColumn": 20, + "startLine": 128, + "startColumn": 6, + "endLine": 128, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -119428,13 +119569,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 188, - "startColumn": 4, - "endLine": 188, - "endColumn": 14, + "startLine": 190, + "startColumn": 5, + "endLine": 190, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119448,13 +119589,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 331, - "startColumn": 4, - "endLine": 331, - "endColumn": 14, + "startLine": 333, + "startColumn": 5, + "endLine": 333, + "endColumn": 122, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119468,13 +119609,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 424, - "startColumn": 4, - "endLine": 424, - "endColumn": 14, + "startLine": 426, + "startColumn": 5, + "endLine": 426, + "endColumn": 125, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119488,13 +119629,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 602, - "startColumn": 4, - "endLine": 602, - "endColumn": 14, + "startLine": 604, + "startColumn": 5, + "endLine": 604, + "endColumn": 254, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119508,13 +119649,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 770, - "startColumn": 4, - "endLine": 770, - "endColumn": 14, + "startLine": 772, + "startColumn": 5, + "endLine": 772, + "endColumn": 254, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119528,13 +119669,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 938, - "startColumn": 4, - "endLine": 938, - "endColumn": 14, + "startLine": 940, + "startColumn": 5, + "endLine": 940, + "endColumn": 254, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119548,13 +119689,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1066, - "startColumn": 4, - "endLine": 1066, - "endColumn": 14, + "startLine": 1068, + "startColumn": 5, + "endLine": 1068, + "endColumn": 254, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -119960,10 +120101,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 20, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -119983,10 +120124,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 1077, - "startColumn": 5, - "endLine": 1077, - "endColumn": 18, + "startLine": 1078, + "startColumn": 6, + "endLine": 1078, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -120395,10 +120536,10 @@ }, "propertyPath": "Properties.AppId", "category": "Best Practice", - "startLine": 17, - "startColumn": 5, - "endLine": 17, - "endColumn": 11, + "startLine": 18, + "startColumn": 6, + "endLine": 18, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-amplify", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -120615,13 +120756,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 147, - "startColumn": 4, - "endLine": 147, - "endColumn": 14, + "startLine": 149, + "startColumn": 5, + "endLine": 149, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -120635,13 +120776,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 275, - "startColumn": 4, - "endLine": 275, - "endColumn": 14, + "startLine": 277, + "startColumn": 5, + "endLine": 277, + "endColumn": 44, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -120655,13 +120796,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 403, - "startColumn": 4, - "endLine": 403, - "endColumn": 14, + "startLine": 405, + "startColumn": 5, + "endLine": 405, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -120675,13 +120816,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 531, - "startColumn": 4, - "endLine": 531, - "endColumn": 14, + "startLine": 533, + "startColumn": 5, + "endLine": 533, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -120695,13 +120836,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 659, - "startColumn": 4, - "endLine": 659, - "endColumn": 14, + "startLine": 661, + "startColumn": 5, + "endLine": 661, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -120761,10 +120902,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 738, - "startColumn": 5, - "endLine": 738, - "endColumn": 15, + "startLine": 739, + "startColumn": 6, + "endLine": 739, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -120785,10 +120926,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 764, - "startColumn": 5, - "endLine": 764, - "endColumn": 15, + "startLine": 765, + "startColumn": 6, + "endLine": 765, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -120832,10 +120973,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 779, - "startColumn": 5, - "endLine": 779, - "endColumn": 14, + "startLine": 780, + "startColumn": 6, + "endLine": 780, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -120879,10 +121020,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 786, - "startColumn": 5, - "endLine": 786, - "endColumn": 15, + "startLine": 787, + "startColumn": 6, + "endLine": 787, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -120925,10 +121066,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 798, - "startColumn": 5, - "endLine": 798, - "endColumn": 18, + "startLine": 799, + "startColumn": 6, + "endLine": 799, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -120970,9 +121111,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 805, - "startColumn": 5, - "endLine": 805, + "startLine": 806, + "startColumn": 6, + "endLine": 806, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121015,10 +121156,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 842, - "startColumn": 5, - "endLine": 842, - "endColumn": 18, + "startLine": 843, + "startColumn": 6, + "endLine": 843, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121060,9 +121201,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 849, - "startColumn": 5, - "endLine": 849, + "startLine": 850, + "startColumn": 6, + "endLine": 850, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121106,10 +121247,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 910, - "startColumn": 5, - "endLine": 910, - "endColumn": 16, + "startLine": 911, + "startColumn": 6, + "endLine": 911, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121130,10 +121271,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 913, - "startColumn": 5, - "endLine": 913, - "endColumn": 15, + "startLine": 914, + "startColumn": 6, + "endLine": 914, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121176,10 +121317,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 925, - "startColumn": 5, - "endLine": 925, - "endColumn": 18, + "startLine": 926, + "startColumn": 6, + "endLine": 926, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121221,9 +121362,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 932, - "startColumn": 5, - "endLine": 932, + "startLine": 933, + "startColumn": 6, + "endLine": 933, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121266,10 +121407,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 969, - "startColumn": 5, - "endLine": 969, - "endColumn": 18, + "startLine": 970, + "startColumn": 6, + "endLine": 970, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121311,9 +121452,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 976, - "startColumn": 5, - "endLine": 976, + "startLine": 977, + "startColumn": 6, + "endLine": 977, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121357,10 +121498,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1037, - "startColumn": 5, - "endLine": 1037, - "endColumn": 16, + "startLine": 1038, + "startColumn": 6, + "endLine": 1038, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121381,10 +121522,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1040, - "startColumn": 5, - "endLine": 1040, - "endColumn": 15, + "startLine": 1041, + "startColumn": 6, + "endLine": 1041, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121428,10 +121569,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1082, - "startColumn": 5, - "endLine": 1082, - "endColumn": 16, + "startLine": 1083, + "startColumn": 6, + "endLine": 1083, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121452,10 +121593,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1085, - "startColumn": 5, - "endLine": 1085, - "endColumn": 15, + "startLine": 1086, + "startColumn": 6, + "endLine": 1086, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121476,10 +121617,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 1096, - "startColumn": 5, - "endLine": 1096, - "endColumn": 14, + "startLine": 1097, + "startColumn": 6, + "endLine": 1097, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121523,10 +121664,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1100, - "startColumn": 5, - "endLine": 1100, - "endColumn": 15, + "startLine": 1101, + "startColumn": 6, + "endLine": 1101, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121569,10 +121710,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1112, - "startColumn": 5, - "endLine": 1112, - "endColumn": 18, + "startLine": 1113, + "startColumn": 6, + "endLine": 1113, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121614,9 +121755,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1119, - "startColumn": 5, - "endLine": 1119, + "startLine": 1120, + "startColumn": 6, + "endLine": 1120, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121659,10 +121800,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1156, - "startColumn": 5, - "endLine": 1156, - "endColumn": 18, + "startLine": 1157, + "startColumn": 6, + "endLine": 1157, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121704,9 +121845,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1163, - "startColumn": 5, - "endLine": 1163, + "startLine": 1164, + "startColumn": 6, + "endLine": 1164, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121750,10 +121891,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1224, - "startColumn": 5, - "endLine": 1224, - "endColumn": 16, + "startLine": 1225, + "startColumn": 6, + "endLine": 1225, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121774,10 +121915,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1227, - "startColumn": 5, - "endLine": 1227, - "endColumn": 15, + "startLine": 1228, + "startColumn": 6, + "endLine": 1228, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121820,10 +121961,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1239, - "startColumn": 5, - "endLine": 1239, - "endColumn": 18, + "startLine": 1240, + "startColumn": 6, + "endLine": 1240, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121865,9 +122006,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1246, - "startColumn": 5, - "endLine": 1246, + "startLine": 1247, + "startColumn": 6, + "endLine": 1247, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -121910,10 +122051,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1283, - "startColumn": 5, - "endLine": 1283, - "endColumn": 18, + "startLine": 1284, + "startColumn": 6, + "endLine": 1284, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -121955,9 +122096,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1290, - "startColumn": 5, - "endLine": 1290, + "startLine": 1291, + "startColumn": 6, + "endLine": 1291, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122001,10 +122142,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1351, - "startColumn": 5, - "endLine": 1351, - "endColumn": 16, + "startLine": 1352, + "startColumn": 6, + "endLine": 1352, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122025,10 +122166,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1354, - "startColumn": 5, - "endLine": 1354, - "endColumn": 15, + "startLine": 1355, + "startColumn": 6, + "endLine": 1355, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122071,10 +122212,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1366, - "startColumn": 5, - "endLine": 1366, - "endColumn": 18, + "startLine": 1367, + "startColumn": 6, + "endLine": 1367, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -122116,9 +122257,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1373, - "startColumn": 5, - "endLine": 1373, + "startLine": 1374, + "startColumn": 6, + "endLine": 1374, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122161,10 +122302,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1410, - "startColumn": 5, - "endLine": 1410, - "endColumn": 18, + "startLine": 1411, + "startColumn": 6, + "endLine": 1411, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -122206,9 +122347,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1417, - "startColumn": 5, - "endLine": 1417, + "startLine": 1418, + "startColumn": 6, + "endLine": 1418, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122252,10 +122393,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1478, - "startColumn": 5, - "endLine": 1478, - "endColumn": 16, + "startLine": 1479, + "startColumn": 6, + "endLine": 1479, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122276,10 +122417,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1481, - "startColumn": 5, - "endLine": 1481, - "endColumn": 15, + "startLine": 1482, + "startColumn": 6, + "endLine": 1482, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122323,10 +122464,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1523, - "startColumn": 5, - "endLine": 1523, - "endColumn": 16, + "startLine": 1524, + "startColumn": 6, + "endLine": 1524, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122347,10 +122488,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1526, - "startColumn": 5, - "endLine": 1526, - "endColumn": 15, + "startLine": 1527, + "startColumn": 6, + "endLine": 1527, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122692,13 +122833,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 140, - "startColumn": 4, - "endLine": 140, - "endColumn": 14, + "startLine": 142, + "startColumn": 5, + "endLine": 142, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -122758,10 +122899,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 230, - "startColumn": 5, - "endLine": 230, - "endColumn": 15, + "startLine": 231, + "startColumn": 6, + "endLine": 231, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122782,10 +122923,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 269, - "startColumn": 5, - "endLine": 269, - "endColumn": 15, + "startLine": 270, + "startColumn": 6, + "endLine": 270, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122829,10 +122970,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 284, - "startColumn": 5, - "endLine": 284, - "endColumn": 14, + "startLine": 285, + "startColumn": 6, + "endLine": 285, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122876,10 +123017,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 291, - "startColumn": 5, - "endLine": 291, - "endColumn": 15, + "startLine": 292, + "startColumn": 6, + "endLine": 292, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -122922,10 +123063,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 303, - "startColumn": 5, - "endLine": 303, - "endColumn": 18, + "startLine": 304, + "startColumn": 6, + "endLine": 304, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -122967,9 +123108,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 310, - "startColumn": 5, - "endLine": 310, + "startLine": 311, + "startColumn": 6, + "endLine": 311, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123012,10 +123153,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 339, - "startColumn": 5, - "endLine": 339, - "endColumn": 18, + "startLine": 340, + "startColumn": 6, + "endLine": 340, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -123057,9 +123198,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, + "startLine": 347, + "startColumn": 6, + "endLine": 347, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123103,10 +123244,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 419, - "startColumn": 5, - "endLine": 419, - "endColumn": 16, + "startLine": 420, + "startColumn": 6, + "endLine": 420, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123127,10 +123268,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 422, - "startColumn": 5, - "endLine": 422, - "endColumn": 15, + "startLine": 423, + "startColumn": 6, + "endLine": 423, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123151,10 +123292,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 433, - "startColumn": 5, - "endLine": 433, - "endColumn": 14, + "startLine": 434, + "startColumn": 6, + "endLine": 434, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123198,10 +123339,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 437, - "startColumn": 5, - "endLine": 437, - "endColumn": 15, + "startLine": 438, + "startColumn": 6, + "endLine": 438, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123245,10 +123386,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 498, - "startColumn": 5, - "endLine": 498, - "endColumn": 16, + "startLine": 499, + "startColumn": 6, + "endLine": 499, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123269,10 +123410,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 501, - "startColumn": 5, - "endLine": 501, - "endColumn": 15, + "startLine": 502, + "startColumn": 6, + "endLine": 502, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123537,13 +123678,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 63, - "startColumn": 4, - "endLine": 63, - "endColumn": 14, + "startLine": 64, + "startColumn": 5, + "endLine": 64, + "endColumn": 42, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -123557,13 +123698,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 195, - "startColumn": 4, - "endLine": 195, - "endColumn": 14, + "startLine": 197, + "startColumn": 5, + "endLine": 197, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -123577,13 +123718,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 266, - "startColumn": 4, - "endLine": 266, - "endColumn": 14, + "startLine": 267, + "startColumn": 5, + "endLine": 267, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -123621,10 +123762,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 306, - "startColumn": 5, - "endLine": 306, - "endColumn": 18, + "startLine": 307, + "startColumn": 6, + "endLine": 307, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -123666,9 +123807,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 313, - "startColumn": 5, - "endLine": 313, + "startLine": 314, + "startColumn": 6, + "endLine": 314, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123689,10 +123830,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 392, - "startColumn": 5, - "endLine": 392, - "endColumn": 15, + "startLine": 393, + "startColumn": 6, + "endLine": 393, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123713,10 +123854,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 431, - "startColumn": 5, - "endLine": 431, - "endColumn": 15, + "startLine": 432, + "startColumn": 6, + "endLine": 432, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123737,10 +123878,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 473, - "startColumn": 5, - "endLine": 473, - "endColumn": 15, + "startLine": 474, + "startColumn": 6, + "endLine": 474, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123784,10 +123925,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 485, - "startColumn": 5, - "endLine": 485, - "endColumn": 14, + "startLine": 486, + "startColumn": 6, + "endLine": 486, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123831,10 +123972,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 492, - "startColumn": 5, - "endLine": 492, - "endColumn": 15, + "startLine": 493, + "startColumn": 6, + "endLine": 493, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123877,10 +124018,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 504, - "startColumn": 5, - "endLine": 504, - "endColumn": 18, + "startLine": 505, + "startColumn": 6, + "endLine": 505, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -123922,9 +124063,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 511, - "startColumn": 5, - "endLine": 511, + "startLine": 512, + "startColumn": 6, + "endLine": 512, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -123967,10 +124108,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 540, - "startColumn": 5, - "endLine": 540, - "endColumn": 18, + "startLine": 541, + "startColumn": 6, + "endLine": 541, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -124012,9 +124153,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 547, - "startColumn": 5, - "endLine": 547, + "startLine": 548, + "startColumn": 6, + "endLine": 548, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124058,10 +124199,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 595, - "startColumn": 5, - "endLine": 595, - "endColumn": 16, + "startLine": 596, + "startColumn": 6, + "endLine": 596, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124082,10 +124223,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 598, - "startColumn": 5, - "endLine": 598, - "endColumn": 15, + "startLine": 599, + "startColumn": 6, + "endLine": 599, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124330,13 +124471,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 102, - "startColumn": 4, - "endLine": 102, - "endColumn": 14, + "startLine": 103, + "startColumn": 5, + "endLine": 103, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124350,13 +124491,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 169, - "startColumn": 4, - "endLine": 169, - "endColumn": 14, + "startLine": 170, + "startColumn": 5, + "endLine": 170, + "endColumn": 40, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124370,13 +124511,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 169, - "startColumn": 4, - "endLine": 169, - "endColumn": 14, + "startLine": 171, + "startColumn": 5, + "endLine": 171, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124390,13 +124531,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 169, - "startColumn": 4, - "endLine": 169, - "endColumn": 14, + "startLine": 171, + "startColumn": 5, + "endLine": 171, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124410,13 +124551,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 169, - "startColumn": 4, - "endLine": 169, - "endColumn": 14, + "startLine": 171, + "startColumn": 5, + "endLine": 171, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124430,13 +124571,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 169, - "startColumn": 4, - "endLine": 169, - "endColumn": 14, + "startLine": 171, + "startColumn": 5, + "endLine": 171, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124450,13 +124591,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 289, - "startColumn": 4, - "endLine": 289, - "endColumn": 14, + "startLine": 291, + "startColumn": 5, + "endLine": 291, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124470,13 +124611,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SecurityGroup" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 367, - "startColumn": 4, - "endLine": 367, - "endColumn": 14, + "startLine": 368, + "startColumn": 5, + "endLine": 368, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124490,13 +124631,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 434, - "startColumn": 4, - "endLine": 434, - "endColumn": 14, + "startLine": 435, + "startColumn": 5, + "endLine": 435, + "endColumn": 40, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124510,13 +124651,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 434, - "startColumn": 4, - "endLine": 434, - "endColumn": 14, + "startLine": 436, + "startColumn": 5, + "endLine": 436, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124530,13 +124671,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 434, - "startColumn": 4, - "endLine": 434, - "endColumn": 14, + "startLine": 436, + "startColumn": 5, + "endLine": 436, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124550,13 +124691,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 434, - "startColumn": 4, - "endLine": 434, - "endColumn": 14, + "startLine": 436, + "startColumn": 5, + "endLine": 436, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124570,13 +124711,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 434, - "startColumn": 4, - "endLine": 434, - "endColumn": 14, + "startLine": 436, + "startColumn": 5, + "endLine": 436, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124590,13 +124731,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 646, - "startColumn": 4, - "endLine": 646, - "endColumn": 14, + "startLine": 648, + "startColumn": 5, + "endLine": 648, + "endColumn": 32, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -124634,10 +124775,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 95, - "startColumn": 5, - "endLine": 95, - "endColumn": 11, + "startLine": 96, + "startColumn": 6, + "endLine": 96, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -124679,10 +124820,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 360, - "startColumn": 5, - "endLine": 360, - "endColumn": 11, + "startLine": 361, + "startColumn": 6, + "endLine": 361, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -124725,10 +124866,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 725, - "startColumn": 5, - "endLine": 725, - "endColumn": 15, + "startLine": 726, + "startColumn": 6, + "endLine": 726, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124749,10 +124890,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 745, - "startColumn": 5, - "endLine": 745, - "endColumn": 15, + "startLine": 746, + "startColumn": 6, + "endLine": 746, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124819,10 +124960,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 891, - "startColumn": 5, - "endLine": 891, - "endColumn": 16, + "startLine": 892, + "startColumn": 6, + "endLine": 892, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124843,10 +124984,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 897, - "startColumn": 5, - "endLine": 897, - "endColumn": 15, + "startLine": 898, + "startColumn": 6, + "endLine": 898, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124867,10 +125008,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 908, - "startColumn": 5, - "endLine": 908, - "endColumn": 14, + "startLine": 909, + "startColumn": 6, + "endLine": 909, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124914,10 +125055,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 915, - "startColumn": 5, - "endLine": 915, - "endColumn": 15, + "startLine": 916, + "startColumn": 6, + "endLine": 916, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124961,10 +125102,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 931, - "startColumn": 5, - "endLine": 931, - "endColumn": 16, + "startLine": 932, + "startColumn": 6, + "endLine": 932, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -124985,10 +125126,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 934, - "startColumn": 5, - "endLine": 934, - "endColumn": 15, + "startLine": 935, + "startColumn": 6, + "endLine": 935, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125393,10 +125534,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125437,10 +125578,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125460,10 +125601,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125484,10 +125625,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125511,10 +125652,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125561,10 +125702,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125585,10 +125726,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 108, - "startColumn": 5, - "endLine": 108, - "endColumn": 22, + "startLine": 109, + "startColumn": 6, + "endLine": 109, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125629,10 +125770,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 132, - "startColumn": 5, - "endLine": 132, - "endColumn": 11, + "startLine": 133, + "startColumn": 6, + "endLine": 133, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125652,10 +125793,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 149, - "startColumn": 5, - "endLine": 149, - "endColumn": 11, + "startLine": 150, + "startColumn": 6, + "endLine": 150, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125676,10 +125817,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 160, - "startColumn": 5, - "endLine": 160, - "endColumn": 18, + "startLine": 161, + "startColumn": 6, + "endLine": 161, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125703,10 +125844,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 163, - "startColumn": 5, - "endLine": 163, - "endColumn": 14, + "startLine": 164, + "startColumn": 6, + "endLine": 164, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125753,10 +125894,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 178, - "startColumn": 5, - "endLine": 178, - "endColumn": 18, + "startLine": 179, + "startColumn": 6, + "endLine": 179, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125777,10 +125918,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 192, - "startColumn": 5, - "endLine": 192, - "endColumn": 22, + "startLine": 193, + "startColumn": 6, + "endLine": 193, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125821,10 +125962,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 216, - "startColumn": 5, - "endLine": 216, - "endColumn": 11, + "startLine": 217, + "startColumn": 6, + "endLine": 217, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125844,10 +125985,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 233, - "startColumn": 5, - "endLine": 233, - "endColumn": 11, + "startLine": 234, + "startColumn": 6, + "endLine": 234, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125868,10 +126009,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 244, - "startColumn": 5, - "endLine": 244, - "endColumn": 18, + "startLine": 245, + "startColumn": 6, + "endLine": 245, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125895,10 +126036,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 247, - "startColumn": 5, - "endLine": 247, - "endColumn": 14, + "startLine": 248, + "startColumn": 6, + "endLine": 248, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -125922,10 +126063,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 22, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125966,10 +126107,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 282, - "startColumn": 5, - "endLine": 282, - "endColumn": 11, + "startLine": 283, + "startColumn": 6, + "endLine": 283, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -125989,10 +126130,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 299, - "startColumn": 5, - "endLine": 299, - "endColumn": 11, + "startLine": 300, + "startColumn": 6, + "endLine": 300, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126013,10 +126154,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 310, - "startColumn": 5, - "endLine": 310, - "endColumn": 18, + "startLine": 311, + "startColumn": 6, + "endLine": 311, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126040,10 +126181,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 313, - "startColumn": 5, - "endLine": 313, - "endColumn": 14, + "startLine": 314, + "startColumn": 6, + "endLine": 314, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126067,10 +126208,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 341, - "startColumn": 5, - "endLine": 341, - "endColumn": 11, + "startLine": 342, + "startColumn": 6, + "endLine": 342, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126112,13 +126253,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 157, - "startColumn": 4, - "endLine": 157, - "endColumn": 14, + "startLine": 159, + "startColumn": 5, + "endLine": 159, + "endColumn": 38, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -126132,13 +126273,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 284, - "startColumn": 4, - "endLine": 284, - "endColumn": 14, + "startLine": 286, + "startColumn": 5, + "endLine": 286, + "endColumn": 41, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -126152,13 +126293,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 427, - "startColumn": 4, - "endLine": 427, - "endColumn": 14, + "startLine": 429, + "startColumn": 5, + "endLine": 429, + "endColumn": 38, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -126240,10 +126381,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 504, - "startColumn": 5, - "endLine": 504, - "endColumn": 11, + "startLine": 505, + "startColumn": 6, + "endLine": 505, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126264,10 +126405,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 537, - "startColumn": 5, - "endLine": 537, - "endColumn": 11, + "startLine": 538, + "startColumn": 6, + "endLine": 538, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126288,10 +126429,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 570, - "startColumn": 5, - "endLine": 570, - "endColumn": 11, + "startLine": 571, + "startColumn": 6, + "endLine": 571, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126312,10 +126453,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 603, - "startColumn": 5, - "endLine": 603, - "endColumn": 11, + "startLine": 604, + "startColumn": 6, + "endLine": 604, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126336,10 +126477,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 627, - "startColumn": 5, - "endLine": 627, - "endColumn": 11, + "startLine": 628, + "startColumn": 6, + "endLine": 628, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126360,10 +126501,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 651, - "startColumn": 5, - "endLine": 651, - "endColumn": 11, + "startLine": 652, + "startColumn": 6, + "endLine": 652, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126384,10 +126525,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 675, - "startColumn": 5, - "endLine": 675, - "endColumn": 11, + "startLine": 676, + "startColumn": 6, + "endLine": 676, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126408,10 +126549,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 691, - "startColumn": 5, - "endLine": 691, - "endColumn": 11, + "startLine": 692, + "startColumn": 6, + "endLine": 692, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2/tree/master/aws-apigatewayv2-stage.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126666,60 +126807,60 @@ { "ruleId": "W3005", "severity": "WARN", - "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.0'", + "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.0.Fn::Select.1'", "source": "CFN_LINT", "entity": { "logicalId": "ASGScalingPolicyAModestLoadC5714E5A", "entityType": "Resource", "resourceType": "AWS::AutoScaling::ScalingPolicy" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 687, - "startColumn": 4, - "endLine": 687, - "endColumn": 14, + "startLine": 688, + "startColumn": 5, + "endLine": 688, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.2'", + "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.2.Fn::Select.1'", "source": "CFN_LINT", "entity": { "logicalId": "ASGScalingPolicyAModestLoadC5714E5A", "entityType": "Resource", "resourceType": "AWS::AutoScaling::ScalingPolicy" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 687, - "startColumn": 4, - "endLine": 687, - "endColumn": 14, + "startLine": 688, + "startColumn": 5, + "endLine": 688, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.4'", + "message": "'LBListener49E825B4' dependency already enforced by a 'Ref' at 'Properties.TargetTrackingConfiguration.PredefinedMetricSpecification.ResourceLabel.Fn::Join.1.4.Fn::Select.1'", "source": "CFN_LINT", "entity": { "logicalId": "ASGScalingPolicyAModestLoadC5714E5A", "entityType": "Resource", "resourceType": "AWS::AutoScaling::ScalingPolicy" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 687, - "startColumn": 4, - "endLine": 687, - "endColumn": 14, + "startLine": 688, + "startColumn": 5, + "endLine": 688, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -126733,13 +126874,13 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::ScalingPolicy" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 687, - "startColumn": 4, - "endLine": 687, - "endColumn": 14, + "startLine": 689, + "startColumn": 5, + "endLine": 689, + "endColumn": 35, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -126818,10 +126959,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -126862,10 +127003,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -126885,10 +127026,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126909,10 +127050,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126936,10 +127077,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -126986,10 +127127,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127010,10 +127151,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127033,10 +127174,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127056,10 +127197,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127100,10 +127241,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127123,10 +127264,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127147,10 +127288,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127174,10 +127315,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127224,10 +127365,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127248,10 +127389,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127271,10 +127412,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127294,10 +127435,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127338,10 +127479,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127361,10 +127502,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127385,10 +127526,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127412,10 +127553,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127462,10 +127603,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127486,10 +127627,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127530,10 +127671,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127553,10 +127694,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127577,10 +127718,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127604,10 +127745,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127654,10 +127795,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127678,10 +127819,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127727,10 +127868,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 480, - "startColumn": 5, - "endLine": 480, - "endColumn": 11, + "startLine": 481, + "startColumn": 6, + "endLine": 481, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -127773,10 +127914,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 493, - "startColumn": 5, - "endLine": 493, - "endColumn": 13, + "startLine": 494, + "startColumn": 6, + "endLine": 494, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127820,10 +127961,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 500, - "startColumn": 5, - "endLine": 500, - "endColumn": 27, + "startLine": 501, + "startColumn": 6, + "endLine": 501, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127867,10 +128008,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 554, - "startColumn": 5, - "endLine": 554, - "endColumn": 24, + "startLine": 555, + "startColumn": 6, + "endLine": 555, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127891,10 +128032,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 557, - "startColumn": 5, - "endLine": 557, - "endColumn": 13, + "startLine": 558, + "startColumn": 6, + "endLine": 558, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127960,10 +128101,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 569, - "startColumn": 5, - "endLine": 569, - "endColumn": 14, + "startLine": 570, + "startColumn": 6, + "endLine": 570, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -127983,10 +128124,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 583, - "startColumn": 5, - "endLine": 583, - "endColumn": 29, + "startLine": 584, + "startColumn": 6, + "endLine": 584, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -128028,10 +128169,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 621, - "startColumn": 5, - "endLine": 621, - "endColumn": 26, + "startLine": 622, + "startColumn": 6, + "endLine": 622, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128120,10 +128261,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 746, - "startColumn": 5, - "endLine": 746, - "endColumn": 11, + "startLine": 747, + "startColumn": 6, + "endLine": 747, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -128143,10 +128284,10 @@ }, "propertyPath": "Properties.DestinationSecurityGroupId", "category": "Best Practice", - "startLine": 758, - "startColumn": 5, - "endLine": 758, - "endColumn": 32, + "startLine": 759, + "startColumn": 6, + "endLine": 759, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128190,10 +128331,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 765, - "startColumn": 5, - "endLine": 765, - "endColumn": 13, + "startLine": 766, + "startColumn": 6, + "endLine": 766, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128260,10 +128401,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 789, - "startColumn": 5, - "endLine": 789, - "endColumn": 21, + "startLine": 790, + "startColumn": 6, + "endLine": 790, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128350,10 +128491,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 811, - "startColumn": 5, - "endLine": 811, - "endColumn": 11, + "startLine": 812, + "startColumn": 6, + "endLine": 812, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -128561,10 +128702,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 93, - "startColumn": 5, - "endLine": 93, - "endColumn": 11, + "startLine": 94, + "startColumn": 6, + "endLine": 94, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -128584,10 +128725,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 170, - "startColumn": 5, - "endLine": 170, - "endColumn": 11, + "startLine": 171, + "startColumn": 6, + "endLine": 171, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128631,10 +128772,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 11, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128678,10 +128819,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 304, - "startColumn": 5, - "endLine": 304, - "endColumn": 11, + "startLine": 305, + "startColumn": 6, + "endLine": 305, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128702,10 +128843,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 332, - "startColumn": 5, - "endLine": 332, - "endColumn": 11, + "startLine": 333, + "startColumn": 6, + "endLine": 333, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128726,10 +128867,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 360, - "startColumn": 5, - "endLine": 360, - "endColumn": 11, + "startLine": 361, + "startColumn": 6, + "endLine": 361, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128796,10 +128937,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 397, - "startColumn": 5, - "endLine": 397, - "endColumn": 11, + "startLine": 398, + "startColumn": 6, + "endLine": 398, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -128984,13 +129125,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 202, - "startColumn": 4, - "endLine": 202, - "endColumn": 14, + "startLine": 203, + "startColumn": 5, + "endLine": 203, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -129006,10 +129147,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 16, - "startColumn": 5, - "endLine": 16, - "endColumn": 11, + "startLine": 17, + "startColumn": 6, + "endLine": 17, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129029,10 +129170,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 30, - "startColumn": 5, - "endLine": 30, - "endColumn": 11, + "startLine": 31, + "startColumn": 6, + "endLine": 31, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129052,10 +129193,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 89, - "startColumn": 5, - "endLine": 89, - "endColumn": 11, + "startLine": 90, + "startColumn": 6, + "endLine": 90, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129099,10 +129240,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 134, - "startColumn": 5, - "endLine": 134, - "endColumn": 11, + "startLine": 135, + "startColumn": 6, + "endLine": 135, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129191,10 +129332,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 238, - "startColumn": 5, - "endLine": 238, - "endColumn": 18, + "startLine": 239, + "startColumn": 6, + "endLine": 239, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129236,10 +129377,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 245, - "startColumn": 5, - "endLine": 245, - "endColumn": 15, + "startLine": 246, + "startColumn": 6, + "endLine": 246, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129379,10 +129520,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 16, - "startColumn": 5, - "endLine": 16, - "endColumn": 11, + "startLine": 17, + "startColumn": 6, + "endLine": 17, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129402,10 +129543,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 30, - "startColumn": 5, - "endLine": 30, - "endColumn": 11, + "startLine": 31, + "startColumn": 6, + "endLine": 31, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -129425,10 +129566,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 45, - "startColumn": 5, - "endLine": 45, - "endColumn": 11, + "startLine": 46, + "startColumn": 6, + "endLine": 46, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129472,10 +129613,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 64, - "startColumn": 5, - "endLine": 64, - "endColumn": 11, + "startLine": 65, + "startColumn": 6, + "endLine": 65, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129542,10 +129683,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 89, - "startColumn": 5, - "endLine": 89, - "endColumn": 11, + "startLine": 90, + "startColumn": 6, + "endLine": 90, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129612,10 +129753,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 114, - "startColumn": 5, - "endLine": 114, - "endColumn": 11, + "startLine": 115, + "startColumn": 6, + "endLine": 115, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129682,10 +129823,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 139, - "startColumn": 5, - "endLine": 139, - "endColumn": 11, + "startLine": 140, + "startColumn": 6, + "endLine": 140, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -129882,13 +130023,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 52, - "startColumn": 4, - "endLine": 52, - "endColumn": 14, + "startLine": 53, + "startColumn": 5, + "endLine": 53, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -129902,13 +130043,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 109, - "startColumn": 4, - "endLine": 109, - "endColumn": 14, + "startLine": 110, + "startColumn": 5, + "endLine": 110, + "endColumn": 58, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -129922,13 +130063,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 166, - "startColumn": 4, - "endLine": 166, - "endColumn": 14, + "startLine": 167, + "startColumn": 5, + "endLine": 167, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -129942,13 +130083,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 223, - "startColumn": 4, - "endLine": 223, - "endColumn": 14, + "startLine": 224, + "startColumn": 5, + "endLine": 224, + "endColumn": 58, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -130166,10 +130307,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 32, - "startColumn": 5, - "endLine": 32, - "endColumn": 12, + "startLine": 33, + "startColumn": 6, + "endLine": 33, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130293,10 +130434,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130337,10 +130478,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130360,10 +130501,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130384,10 +130525,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130411,10 +130552,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130461,10 +130602,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130485,10 +130626,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 108, - "startColumn": 5, - "endLine": 108, - "endColumn": 22, + "startLine": 109, + "startColumn": 6, + "endLine": 109, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130529,10 +130670,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 132, - "startColumn": 5, - "endLine": 132, - "endColumn": 11, + "startLine": 133, + "startColumn": 6, + "endLine": 133, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130552,10 +130693,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 149, - "startColumn": 5, - "endLine": 149, - "endColumn": 11, + "startLine": 150, + "startColumn": 6, + "endLine": 150, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130576,10 +130717,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 160, - "startColumn": 5, - "endLine": 160, - "endColumn": 18, + "startLine": 161, + "startColumn": 6, + "endLine": 161, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130603,10 +130744,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 163, - "startColumn": 5, - "endLine": 163, - "endColumn": 14, + "startLine": 164, + "startColumn": 6, + "endLine": 164, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130653,10 +130794,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 178, - "startColumn": 5, - "endLine": 178, - "endColumn": 18, + "startLine": 179, + "startColumn": 6, + "endLine": 179, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130677,10 +130818,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 192, - "startColumn": 5, - "endLine": 192, - "endColumn": 22, + "startLine": 193, + "startColumn": 6, + "endLine": 193, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130721,10 +130862,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 216, - "startColumn": 5, - "endLine": 216, - "endColumn": 11, + "startLine": 217, + "startColumn": 6, + "endLine": 217, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130744,10 +130885,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 233, - "startColumn": 5, - "endLine": 233, - "endColumn": 11, + "startLine": 234, + "startColumn": 6, + "endLine": 234, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130768,10 +130909,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 244, - "startColumn": 5, - "endLine": 244, - "endColumn": 18, + "startLine": 245, + "startColumn": 6, + "endLine": 245, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130795,10 +130936,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 247, - "startColumn": 5, - "endLine": 247, - "endColumn": 14, + "startLine": 248, + "startColumn": 6, + "endLine": 248, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130822,10 +130963,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 22, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130866,10 +131007,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 282, - "startColumn": 5, - "endLine": 282, - "endColumn": 11, + "startLine": 283, + "startColumn": 6, + "endLine": 283, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -130889,10 +131030,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 299, - "startColumn": 5, - "endLine": 299, - "endColumn": 11, + "startLine": 300, + "startColumn": 6, + "endLine": 300, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130913,10 +131054,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 310, - "startColumn": 5, - "endLine": 310, - "endColumn": 18, + "startLine": 311, + "startColumn": 6, + "endLine": 311, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130940,10 +131081,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 313, - "startColumn": 5, - "endLine": 313, - "endColumn": 14, + "startLine": 314, + "startColumn": 6, + "endLine": 314, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -130967,10 +131108,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 341, - "startColumn": 5, - "endLine": 341, - "endColumn": 11, + "startLine": 342, + "startColumn": 6, + "endLine": 342, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131038,10 +131179,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 424, - "startColumn": 5, - "endLine": 424, - "endColumn": 11, + "startLine": 425, + "startColumn": 6, + "endLine": 425, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -131222,10 +131363,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 581, - "startColumn": 5, - "endLine": 581, - "endColumn": 18, + "startLine": 582, + "startColumn": 6, + "endLine": 582, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131246,10 +131387,10 @@ }, "propertyPath": "Properties.ServerId", "category": "Best Practice", - "startLine": 624, - "startColumn": 5, - "endLine": 624, - "endColumn": 14, + "startLine": 625, + "startColumn": 6, + "endLine": 625, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-transfer", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131293,10 +131434,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 641, - "startColumn": 5, - "endLine": 641, - "endColumn": 18, + "startLine": 642, + "startColumn": 6, + "endLine": 642, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131584,10 +131725,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -131628,10 +131769,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -131651,10 +131792,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131675,10 +131816,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131702,10 +131843,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131752,10 +131893,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131776,10 +131917,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 108, - "startColumn": 5, - "endLine": 108, - "endColumn": 22, + "startLine": 109, + "startColumn": 6, + "endLine": 109, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -131820,10 +131961,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 132, - "startColumn": 5, - "endLine": 132, - "endColumn": 11, + "startLine": 133, + "startColumn": 6, + "endLine": 133, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -131843,10 +131984,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 149, - "startColumn": 5, - "endLine": 149, - "endColumn": 11, + "startLine": 150, + "startColumn": 6, + "endLine": 150, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131867,10 +132008,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 160, - "startColumn": 5, - "endLine": 160, - "endColumn": 18, + "startLine": 161, + "startColumn": 6, + "endLine": 161, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131894,10 +132035,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 163, - "startColumn": 5, - "endLine": 163, - "endColumn": 14, + "startLine": 164, + "startColumn": 6, + "endLine": 164, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131944,10 +132085,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 178, - "startColumn": 5, - "endLine": 178, - "endColumn": 18, + "startLine": 179, + "startColumn": 6, + "endLine": 179, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -131968,10 +132109,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 192, - "startColumn": 5, - "endLine": 192, - "endColumn": 22, + "startLine": 193, + "startColumn": 6, + "endLine": 193, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132012,10 +132153,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 216, - "startColumn": 5, - "endLine": 216, - "endColumn": 11, + "startLine": 217, + "startColumn": 6, + "endLine": 217, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132035,10 +132176,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 233, - "startColumn": 5, - "endLine": 233, - "endColumn": 11, + "startLine": 234, + "startColumn": 6, + "endLine": 234, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132059,10 +132200,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 244, - "startColumn": 5, - "endLine": 244, - "endColumn": 18, + "startLine": 245, + "startColumn": 6, + "endLine": 245, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132086,10 +132227,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 247, - "startColumn": 5, - "endLine": 247, - "endColumn": 14, + "startLine": 248, + "startColumn": 6, + "endLine": 248, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132113,10 +132254,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 22, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132157,10 +132298,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 282, - "startColumn": 5, - "endLine": 282, - "endColumn": 11, + "startLine": 283, + "startColumn": 6, + "endLine": 283, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132180,10 +132321,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 299, - "startColumn": 5, - "endLine": 299, - "endColumn": 11, + "startLine": 300, + "startColumn": 6, + "endLine": 300, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132204,10 +132345,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 310, - "startColumn": 5, - "endLine": 310, - "endColumn": 18, + "startLine": 311, + "startColumn": 6, + "endLine": 311, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132231,10 +132372,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 313, - "startColumn": 5, - "endLine": 313, - "endColumn": 14, + "startLine": 314, + "startColumn": 6, + "endLine": 314, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132258,10 +132399,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 341, - "startColumn": 5, - "endLine": 341, - "endColumn": 11, + "startLine": 342, + "startColumn": 6, + "endLine": 342, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132329,10 +132470,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 424, - "startColumn": 5, - "endLine": 424, - "endColumn": 11, + "startLine": 425, + "startColumn": 6, + "endLine": 425, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132513,10 +132654,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 581, - "startColumn": 5, - "endLine": 581, - "endColumn": 18, + "startLine": 582, + "startColumn": 6, + "endLine": 582, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132537,10 +132678,10 @@ }, "propertyPath": "Properties.ServerId", "category": "Best Practice", - "startLine": 624, - "startColumn": 5, - "endLine": 624, - "endColumn": 14, + "startLine": 625, + "startColumn": 6, + "endLine": 625, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-transfer", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132584,10 +132725,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 641, - "startColumn": 5, - "endLine": 641, - "endColumn": 18, + "startLine": 642, + "startColumn": 6, + "endLine": 642, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132811,10 +132952,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 40, - "startColumn": 5, - "endLine": 40, - "endColumn": 12, + "startLine": 41, + "startColumn": 6, + "endLine": 41, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -132857,10 +132998,10 @@ }, "propertyPath": "Properties.BackupPlanId", "category": "Best Practice", - "startLine": 253, - "startColumn": 5, - "endLine": 253, - "endColumn": 18, + "startLine": 254, + "startColumn": 6, + "endLine": 254, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -132942,13 +133083,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 556, - "startColumn": 4, - "endLine": 556, - "endColumn": 14, + "startLine": 557, + "startColumn": 5, + "endLine": 557, + "endColumn": 66, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -132962,13 +133103,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1073, - "startColumn": 4, - "endLine": 1073, - "endColumn": 14, + "startLine": 1075, + "startColumn": 5, + "endLine": 1075, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -133051,10 +133192,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 41, - "startColumn": 5, - "endLine": 41, - "endColumn": 22, + "startLine": 42, + "startColumn": 6, + "endLine": 42, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133095,10 +133236,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133118,10 +133259,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 82, - "startColumn": 5, - "endLine": 82, - "endColumn": 11, + "startLine": 83, + "startColumn": 6, + "endLine": 83, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133142,10 +133283,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 93, - "startColumn": 5, - "endLine": 93, - "endColumn": 18, + "startLine": 94, + "startColumn": 6, + "endLine": 94, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133169,10 +133310,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 96, - "startColumn": 5, - "endLine": 96, - "endColumn": 14, + "startLine": 97, + "startColumn": 6, + "endLine": 97, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133219,10 +133360,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 111, - "startColumn": 5, - "endLine": 111, - "endColumn": 18, + "startLine": 112, + "startColumn": 6, + "endLine": 112, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133243,10 +133384,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 140, - "startColumn": 5, - "endLine": 140, - "endColumn": 18, + "startLine": 141, + "startColumn": 6, + "endLine": 141, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133266,10 +133407,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 146, - "startColumn": 5, - "endLine": 146, - "endColumn": 14, + "startLine": 147, + "startColumn": 6, + "endLine": 147, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133289,10 +133430,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 167, - "startColumn": 5, - "endLine": 167, - "endColumn": 22, + "startLine": 168, + "startColumn": 6, + "endLine": 168, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133333,10 +133474,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133356,10 +133497,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 208, - "startColumn": 5, - "endLine": 208, - "endColumn": 11, + "startLine": 209, + "startColumn": 6, + "endLine": 209, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133380,10 +133521,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 219, - "startColumn": 5, - "endLine": 219, - "endColumn": 18, + "startLine": 220, + "startColumn": 6, + "endLine": 220, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133407,10 +133548,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 222, - "startColumn": 5, - "endLine": 222, - "endColumn": 14, + "startLine": 223, + "startColumn": 6, + "endLine": 223, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133457,10 +133598,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 237, - "startColumn": 5, - "endLine": 237, - "endColumn": 18, + "startLine": 238, + "startColumn": 6, + "endLine": 238, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133481,10 +133622,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 251, - "startColumn": 5, - "endLine": 251, - "endColumn": 22, + "startLine": 252, + "startColumn": 6, + "endLine": 252, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133525,10 +133666,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 275, - "startColumn": 5, - "endLine": 275, - "endColumn": 11, + "startLine": 276, + "startColumn": 6, + "endLine": 276, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133548,10 +133689,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 292, - "startColumn": 5, - "endLine": 292, - "endColumn": 11, + "startLine": 293, + "startColumn": 6, + "endLine": 293, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133572,10 +133713,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 303, - "startColumn": 5, - "endLine": 303, - "endColumn": 18, + "startLine": 304, + "startColumn": 6, + "endLine": 304, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133599,10 +133740,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 306, - "startColumn": 5, - "endLine": 306, - "endColumn": 14, + "startLine": 307, + "startColumn": 6, + "endLine": 307, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133649,10 +133790,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 321, - "startColumn": 5, - "endLine": 321, - "endColumn": 18, + "startLine": 322, + "startColumn": 6, + "endLine": 322, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133673,10 +133814,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 332, - "startColumn": 5, - "endLine": 332, - "endColumn": 22, + "startLine": 333, + "startColumn": 6, + "endLine": 333, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133717,10 +133858,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 356, - "startColumn": 5, - "endLine": 356, - "endColumn": 11, + "startLine": 357, + "startColumn": 6, + "endLine": 357, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133740,10 +133881,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 373, - "startColumn": 5, - "endLine": 373, - "endColumn": 11, + "startLine": 374, + "startColumn": 6, + "endLine": 374, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133764,10 +133905,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 384, - "startColumn": 5, - "endLine": 384, - "endColumn": 18, + "startLine": 385, + "startColumn": 6, + "endLine": 385, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133791,10 +133932,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 387, - "startColumn": 5, - "endLine": 387, - "endColumn": 14, + "startLine": 388, + "startColumn": 6, + "endLine": 388, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133841,10 +133982,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 402, - "startColumn": 5, - "endLine": 402, - "endColumn": 18, + "startLine": 403, + "startColumn": 6, + "endLine": 403, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133865,10 +134006,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 430, - "startColumn": 5, - "endLine": 430, - "endColumn": 11, + "startLine": 431, + "startColumn": 6, + "endLine": 431, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -133914,10 +134055,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 576, - "startColumn": 5, - "endLine": 576, - "endColumn": 11, + "startLine": 577, + "startColumn": 6, + "endLine": 577, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -133937,10 +134078,10 @@ }, "propertyPath": "Properties.ComputeResources.InstanceRole", "category": "Best Practice", - "startLine": 749, - "startColumn": 6, - "endLine": 749, - "endColumn": 19, + "startLine": 750, + "startColumn": 7, + "endLine": 750, + "endColumn": 18, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134092,10 +134233,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 1084, - "startColumn": 5, - "endLine": 1084, - "endColumn": 18, + "startLine": 1085, + "startColumn": 6, + "endLine": 1085, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134479,10 +134620,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134523,10 +134664,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134546,10 +134687,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134570,10 +134711,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134597,10 +134738,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134647,10 +134788,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134671,10 +134812,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134694,10 +134835,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134717,10 +134858,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134761,10 +134902,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134784,10 +134925,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134808,10 +134949,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134835,10 +134976,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134885,10 +135026,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -134909,10 +135050,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134932,10 +135073,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134955,10 +135096,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -134999,10 +135140,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135022,10 +135163,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135046,10 +135187,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135073,10 +135214,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135123,10 +135264,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135147,10 +135288,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135191,10 +135332,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135214,10 +135355,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135238,10 +135379,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135265,10 +135406,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135315,10 +135456,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135339,10 +135480,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135388,10 +135529,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 480, - "startColumn": 5, - "endLine": 480, - "endColumn": 11, + "startLine": 481, + "startColumn": 6, + "endLine": 481, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135434,10 +135575,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 493, - "startColumn": 5, - "endLine": 493, - "endColumn": 13, + "startLine": 494, + "startColumn": 6, + "endLine": 494, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135481,10 +135622,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 500, - "startColumn": 5, - "endLine": 500, - "endColumn": 27, + "startLine": 501, + "startColumn": 6, + "endLine": 501, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135528,10 +135669,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 554, - "startColumn": 5, - "endLine": 554, - "endColumn": 24, + "startLine": 555, + "startColumn": 6, + "endLine": 555, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135552,10 +135693,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 557, - "startColumn": 5, - "endLine": 557, - "endColumn": 13, + "startLine": 558, + "startColumn": 6, + "endLine": 558, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135621,10 +135762,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 569, - "startColumn": 5, - "endLine": 569, - "endColumn": 14, + "startLine": 570, + "startColumn": 6, + "endLine": 570, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135644,10 +135785,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 583, - "startColumn": 5, - "endLine": 583, - "endColumn": 29, + "startLine": 584, + "startColumn": 6, + "endLine": 584, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135711,10 +135852,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 631, - "startColumn": 5, - "endLine": 631, - "endColumn": 11, + "startLine": 632, + "startColumn": 6, + "endLine": 632, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -135734,10 +135875,10 @@ }, "propertyPath": "Properties.DestinationSecurityGroupId", "category": "Best Practice", - "startLine": 643, - "startColumn": 5, - "endLine": 643, - "endColumn": 32, + "startLine": 644, + "startColumn": 6, + "endLine": 644, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135781,10 +135922,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 650, - "startColumn": 5, - "endLine": 650, - "endColumn": 13, + "startLine": 651, + "startColumn": 6, + "endLine": 651, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -135978,13 +136119,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 363, - "startColumn": 4, - "endLine": 363, - "endColumn": 14, + "startLine": 365, + "startColumn": 5, + "endLine": 365, + "endColumn": 82, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -136000,10 +136141,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 40, - "startColumn": 5, - "endLine": 40, - "endColumn": 12, + "startLine": 41, + "startColumn": 6, + "endLine": 41, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136254,13 +136395,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 946, - "startColumn": 4, - "endLine": 946, - "endColumn": 14, + "startLine": 948, + "startColumn": 5, + "endLine": 948, + "endColumn": 36, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -136274,13 +136415,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1084, - "startColumn": 4, - "endLine": 1084, - "endColumn": 14, + "startLine": 1085, + "startColumn": 5, + "endLine": 1085, + "endColumn": 60, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -136294,13 +136435,13 @@ "entityType": "Resource", "resourceType": "AWS::CodePipeline::Pipeline" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 2461, - "startColumn": 4, - "endLine": 2461, - "endColumn": 14, + "startLine": 2463, + "startColumn": 5, + "endLine": 2463, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -136362,10 +136503,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 182, - "startColumn": 5, - "endLine": 182, - "endColumn": 22, + "startLine": 183, + "startColumn": 6, + "endLine": 183, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136478,9 +136619,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 194, - "startColumn": 5, - "endLine": 194, + "startLine": 195, + "startColumn": 6, + "endLine": 195, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -136546,10 +136687,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 1119, - "startColumn": 5, - "endLine": 1119, - "endColumn": 22, + "startLine": 1120, + "startColumn": 6, + "endLine": 1120, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136590,10 +136731,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1143, - "startColumn": 5, - "endLine": 1143, - "endColumn": 11, + "startLine": 1144, + "startColumn": 6, + "endLine": 1144, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136613,10 +136754,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1164, - "startColumn": 5, - "endLine": 1164, - "endColumn": 11, + "startLine": 1165, + "startColumn": 6, + "endLine": 1165, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136637,10 +136778,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1179, - "startColumn": 5, - "endLine": 1179, - "endColumn": 18, + "startLine": 1180, + "startColumn": 6, + "endLine": 1180, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136664,10 +136805,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1182, - "startColumn": 5, - "endLine": 1182, - "endColumn": 14, + "startLine": 1183, + "startColumn": 6, + "endLine": 1183, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136714,10 +136855,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1201, - "startColumn": 5, - "endLine": 1201, - "endColumn": 18, + "startLine": 1202, + "startColumn": 6, + "endLine": 1202, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136738,10 +136879,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1236, - "startColumn": 5, - "endLine": 1236, - "endColumn": 18, + "startLine": 1237, + "startColumn": 6, + "endLine": 1237, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136761,10 +136902,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1242, - "startColumn": 5, - "endLine": 1242, - "endColumn": 14, + "startLine": 1243, + "startColumn": 6, + "endLine": 1243, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136784,10 +136925,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 1265, - "startColumn": 5, - "endLine": 1265, - "endColumn": 22, + "startLine": 1266, + "startColumn": 6, + "endLine": 1266, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136828,10 +136969,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1289, - "startColumn": 5, - "endLine": 1289, - "endColumn": 11, + "startLine": 1290, + "startColumn": 6, + "endLine": 1290, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136851,10 +136992,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1310, - "startColumn": 5, - "endLine": 1310, - "endColumn": 11, + "startLine": 1311, + "startColumn": 6, + "endLine": 1311, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136875,10 +137016,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1325, - "startColumn": 5, - "endLine": 1325, - "endColumn": 18, + "startLine": 1326, + "startColumn": 6, + "endLine": 1326, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136902,10 +137043,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1328, - "startColumn": 5, - "endLine": 1328, - "endColumn": 14, + "startLine": 1329, + "startColumn": 6, + "endLine": 1329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136952,10 +137093,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1347, - "startColumn": 5, - "endLine": 1347, - "endColumn": 18, + "startLine": 1348, + "startColumn": 6, + "endLine": 1348, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -136976,10 +137117,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1382, - "startColumn": 5, - "endLine": 1382, - "endColumn": 18, + "startLine": 1383, + "startColumn": 6, + "endLine": 1383, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -136999,10 +137140,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1388, - "startColumn": 5, - "endLine": 1388, - "endColumn": 14, + "startLine": 1389, + "startColumn": 6, + "endLine": 1389, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137022,10 +137163,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 1411, - "startColumn": 5, - "endLine": 1411, - "endColumn": 22, + "startLine": 1412, + "startColumn": 6, + "endLine": 1412, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137066,10 +137207,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1435, - "startColumn": 5, - "endLine": 1435, - "endColumn": 11, + "startLine": 1436, + "startColumn": 6, + "endLine": 1436, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137089,10 +137230,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1456, - "startColumn": 5, - "endLine": 1456, - "endColumn": 11, + "startLine": 1457, + "startColumn": 6, + "endLine": 1457, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137113,10 +137254,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1471, - "startColumn": 5, - "endLine": 1471, - "endColumn": 18, + "startLine": 1472, + "startColumn": 6, + "endLine": 1472, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137140,10 +137281,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1474, - "startColumn": 5, - "endLine": 1474, - "endColumn": 14, + "startLine": 1475, + "startColumn": 6, + "endLine": 1475, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137190,10 +137331,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1493, - "startColumn": 5, - "endLine": 1493, - "endColumn": 18, + "startLine": 1494, + "startColumn": 6, + "endLine": 1494, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137214,10 +137355,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 1508, - "startColumn": 5, - "endLine": 1508, - "endColumn": 22, + "startLine": 1509, + "startColumn": 6, + "endLine": 1509, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137258,10 +137399,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1532, - "startColumn": 5, - "endLine": 1532, - "endColumn": 11, + "startLine": 1533, + "startColumn": 6, + "endLine": 1533, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137281,10 +137422,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1553, - "startColumn": 5, - "endLine": 1553, - "endColumn": 11, + "startLine": 1554, + "startColumn": 6, + "endLine": 1554, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137305,10 +137446,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1568, - "startColumn": 5, - "endLine": 1568, - "endColumn": 18, + "startLine": 1569, + "startColumn": 6, + "endLine": 1569, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137332,10 +137473,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1571, - "startColumn": 5, - "endLine": 1571, - "endColumn": 14, + "startLine": 1572, + "startColumn": 6, + "endLine": 1572, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137382,10 +137523,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1590, - "startColumn": 5, - "endLine": 1590, - "endColumn": 18, + "startLine": 1591, + "startColumn": 6, + "endLine": 1591, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137406,10 +137547,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1626, - "startColumn": 5, - "endLine": 1626, - "endColumn": 11, + "startLine": 1627, + "startColumn": 6, + "endLine": 1627, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137521,10 +137662,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1651, - "startColumn": 5, - "endLine": 1651, - "endColumn": 11, + "startLine": 1652, + "startColumn": 6, + "endLine": 1652, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137632,10 +137773,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1672, - "startColumn": 5, - "endLine": 1672, - "endColumn": 11, + "startLine": 1673, + "startColumn": 6, + "endLine": 1673, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137677,10 +137818,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1700, - "startColumn": 5, - "endLine": 1700, - "endColumn": 11, + "startLine": 1701, + "startColumn": 6, + "endLine": 1701, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137746,10 +137887,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 1757, - "startColumn": 5, - "endLine": 1757, - "endColumn": 21, + "startLine": 1758, + "startColumn": 6, + "endLine": 1758, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137770,10 +137911,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 1780, - "startColumn": 5, - "endLine": 1780, - "endColumn": 13, + "startLine": 1781, + "startColumn": 6, + "endLine": 1781, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137794,10 +137935,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 1792, - "startColumn": 5, - "endLine": 1792, - "endColumn": 13, + "startLine": 1793, + "startColumn": 6, + "endLine": 1793, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137883,10 +138024,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1861, - "startColumn": 5, - "endLine": 1861, - "endColumn": 11, + "startLine": 1862, + "startColumn": 6, + "endLine": 1862, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -137929,10 +138070,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 1880, - "startColumn": 5, - "endLine": 1880, - "endColumn": 13, + "startLine": 1881, + "startColumn": 6, + "endLine": 1881, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -137976,10 +138117,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 1887, - "startColumn": 5, - "endLine": 1887, - "endColumn": 27, + "startLine": 1888, + "startColumn": 6, + "endLine": 1888, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -138046,10 +138187,10 @@ }, "propertyPath": "Properties.ApplicationName", "category": "Best Practice", - "startLine": 1954, - "startColumn": 5, - "endLine": 1954, - "endColumn": 21, + "startLine": 1955, + "startColumn": 6, + "endLine": 1955, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -138093,10 +138234,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 2122, - "startColumn": 5, - "endLine": 2122, - "endColumn": 12, + "startLine": 2123, + "startColumn": 6, + "endLine": 2123, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -138860,13 +139001,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 55, - "startColumn": 4, - "endLine": 55, - "endColumn": 14, + "startLine": 56, + "startColumn": 5, + "endLine": 56, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -138882,10 +139023,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 133, - "startColumn": 5, - "endLine": 133, - "endColumn": 15, + "startLine": 134, + "startColumn": 6, + "endLine": 134, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -138906,10 +139047,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 152, - "startColumn": 5, - "endLine": 152, - "endColumn": 15, + "startLine": 153, + "startColumn": 6, + "endLine": 153, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -138953,10 +139094,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 167, - "startColumn": 5, - "endLine": 167, - "endColumn": 14, + "startLine": 168, + "startColumn": 6, + "endLine": 168, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139000,10 +139141,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 15, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139046,10 +139187,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 186, - "startColumn": 5, - "endLine": 186, - "endColumn": 18, + "startLine": 187, + "startColumn": 6, + "endLine": 187, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -139091,9 +139232,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 193, - "startColumn": 5, - "endLine": 193, + "startLine": 194, + "startColumn": 6, + "endLine": 194, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139136,10 +139277,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 230, - "startColumn": 5, - "endLine": 230, - "endColumn": 18, + "startLine": 231, + "startColumn": 6, + "endLine": 231, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -139181,9 +139322,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 237, - "startColumn": 5, - "endLine": 237, + "startLine": 238, + "startColumn": 6, + "endLine": 238, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139227,10 +139368,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 301, - "startColumn": 5, - "endLine": 301, - "endColumn": 16, + "startLine": 302, + "startColumn": 6, + "endLine": 302, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139251,10 +139392,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 304, - "startColumn": 5, - "endLine": 304, - "endColumn": 15, + "startLine": 305, + "startColumn": 6, + "endLine": 305, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139275,10 +139416,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 365, - "startColumn": 5, - "endLine": 365, - "endColumn": 15, + "startLine": 366, + "startColumn": 6, + "endLine": 366, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -139500,13 +139641,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 126, - "startColumn": 4, - "endLine": 126, - "endColumn": 14, + "startLine": 128, + "startColumn": 5, + "endLine": 128, + "endColumn": 61, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139520,13 +139661,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 204, - "startColumn": 4, - "endLine": 204, - "endColumn": 14, + "startLine": 205, + "startColumn": 5, + "endLine": 205, + "endColumn": 72, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139542,10 +139683,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 140, - "startColumn": 5, - "endLine": 140, - "endColumn": 18, + "startLine": 141, + "startColumn": 6, + "endLine": 141, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -139686,13 +139827,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 126, - "startColumn": 4, - "endLine": 126, - "endColumn": 14, + "startLine": 128, + "startColumn": 5, + "endLine": 128, + "endColumn": 63, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139706,13 +139847,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 230, - "startColumn": 4, - "endLine": 230, - "endColumn": 14, + "startLine": 231, + "startColumn": 5, + "endLine": 231, + "endColumn": 72, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139726,13 +139867,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 317, - "startColumn": 4, - "endLine": 317, - "endColumn": 14, + "startLine": 319, + "startColumn": 5, + "endLine": 319, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139748,10 +139889,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 166, - "startColumn": 5, - "endLine": 166, - "endColumn": 18, + "startLine": 167, + "startColumn": 6, + "endLine": 167, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -139955,13 +140096,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 233, - "startColumn": 4, - "endLine": 233, - "endColumn": 14, + "startLine": 235, + "startColumn": 5, + "endLine": 235, + "endColumn": 50, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -139975,13 +140116,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 438, - "startColumn": 4, - "endLine": 438, - "endColumn": 14, + "startLine": 440, + "startColumn": 5, + "endLine": 440, + "endColumn": 50, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -140084,10 +140225,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 259, - "startColumn": 5, - "endLine": 259, - "endColumn": 20, + "startLine": 260, + "startColumn": 6, + "endLine": 260, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140129,10 +140270,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 480, - "startColumn": 5, - "endLine": 480, - "endColumn": 20, + "startLine": 481, + "startColumn": 6, + "endLine": 481, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140454,13 +140595,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 658, - "startColumn": 4, - "endLine": 658, - "endColumn": 14, + "startLine": 660, + "startColumn": 5, + "endLine": 660, + "endColumn": 30, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -140474,13 +140615,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 658, - "startColumn": 4, - "endLine": 658, - "endColumn": 14, + "startLine": 660, + "startColumn": 5, + "endLine": 660, + "endColumn": 30, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -140494,13 +140635,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 777, - "startColumn": 4, - "endLine": 777, - "endColumn": 14, + "startLine": 778, + "startColumn": 5, + "endLine": 778, + "endColumn": 65, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -140514,13 +140655,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 939, - "startColumn": 4, - "endLine": 939, - "endColumn": 14, + "startLine": 941, + "startColumn": 5, + "endLine": 941, + "endColumn": 88, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -140580,10 +140721,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 25, - "startColumn": 5, - "endLine": 25, - "endColumn": 22, + "startLine": 26, + "startColumn": 6, + "endLine": 26, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140624,10 +140765,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 49, - "startColumn": 5, - "endLine": 49, - "endColumn": 11, + "startLine": 50, + "startColumn": 6, + "endLine": 50, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140647,10 +140788,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 66, - "startColumn": 5, - "endLine": 66, - "endColumn": 11, + "startLine": 67, + "startColumn": 6, + "endLine": 67, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140671,10 +140812,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 77, - "startColumn": 5, - "endLine": 77, - "endColumn": 18, + "startLine": 78, + "startColumn": 6, + "endLine": 78, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140698,10 +140839,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 80, - "startColumn": 5, - "endLine": 80, - "endColumn": 14, + "startLine": 81, + "startColumn": 6, + "endLine": 81, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140748,10 +140889,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 95, - "startColumn": 5, - "endLine": 95, - "endColumn": 18, + "startLine": 96, + "startColumn": 6, + "endLine": 96, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140772,10 +140913,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 109, - "startColumn": 5, - "endLine": 109, - "endColumn": 22, + "startLine": 110, + "startColumn": 6, + "endLine": 110, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140816,10 +140957,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 133, - "startColumn": 5, - "endLine": 133, - "endColumn": 11, + "startLine": 134, + "startColumn": 6, + "endLine": 134, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -140839,10 +140980,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 11, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140863,10 +141004,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 161, - "startColumn": 5, - "endLine": 161, - "endColumn": 18, + "startLine": 162, + "startColumn": 6, + "endLine": 162, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140890,10 +141031,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 164, - "startColumn": 5, - "endLine": 164, - "endColumn": 14, + "startLine": 165, + "startColumn": 6, + "endLine": 165, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140940,10 +141081,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 179, - "startColumn": 5, - "endLine": 179, - "endColumn": 18, + "startLine": 180, + "startColumn": 6, + "endLine": 180, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -140964,10 +141105,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 210, - "startColumn": 5, - "endLine": 210, - "endColumn": 11, + "startLine": 211, + "startColumn": 6, + "endLine": 211, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141013,10 +141154,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 238, - "startColumn": 5, - "endLine": 238, - "endColumn": 11, + "startLine": 239, + "startColumn": 6, + "endLine": 239, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141036,10 +141177,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 12, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141127,10 +141268,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 541, - "startColumn": 5, - "endLine": 541, - "endColumn": 11, + "startLine": 542, + "startColumn": 6, + "endLine": 542, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141150,10 +141291,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 565, - "startColumn": 5, - "endLine": 565, - "endColumn": 22, + "startLine": 566, + "startColumn": 6, + "endLine": 566, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141173,10 +141314,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 576, - "startColumn": 5, - "endLine": 576, - "endColumn": 13, + "startLine": 577, + "startColumn": 6, + "endLine": 577, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141242,10 +141383,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 594, - "startColumn": 5, - "endLine": 594, - "endColumn": 14, + "startLine": 595, + "startColumn": 6, + "endLine": 595, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141266,10 +141407,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 603, - "startColumn": 5, - "endLine": 603, - "endColumn": 14, + "startLine": 604, + "startColumn": 6, + "endLine": 604, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141503,13 +141644,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 415, - "startColumn": 4, - "endLine": 415, - "endColumn": 14, + "startLine": 417, + "startColumn": 5, + "endLine": 417, + "endColumn": 29, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141523,13 +141664,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 443, - "startColumn": 4, - "endLine": 443, - "endColumn": 14, + "startLine": 445, + "startColumn": 5, + "endLine": 445, + "endColumn": 29, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141543,13 +141684,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 618, - "startColumn": 4, - "endLine": 618, - "endColumn": 14, + "startLine": 620, + "startColumn": 5, + "endLine": 620, + "endColumn": 60, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141563,13 +141704,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 786, - "startColumn": 4, - "endLine": 786, - "endColumn": 14, + "startLine": 788, + "startColumn": 5, + "endLine": 788, + "endColumn": 63, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141583,13 +141724,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 954, - "startColumn": 4, - "endLine": 954, - "endColumn": 14, + "startLine": 956, + "startColumn": 5, + "endLine": 956, + "endColumn": 62, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141603,13 +141744,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1082, - "startColumn": 4, - "endLine": 1082, - "endColumn": 14, + "startLine": 1084, + "startColumn": 5, + "endLine": 1084, + "endColumn": 55, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -141669,10 +141810,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141713,10 +141854,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141736,10 +141877,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141760,10 +141901,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141787,10 +141928,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141814,10 +141955,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 90, - "startColumn": 5, - "endLine": 90, - "endColumn": 22, + "startLine": 91, + "startColumn": 6, + "endLine": 91, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141858,10 +141999,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 114, - "startColumn": 5, - "endLine": 114, - "endColumn": 11, + "startLine": 115, + "startColumn": 6, + "endLine": 115, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -141881,10 +142022,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 131, - "startColumn": 5, - "endLine": 131, - "endColumn": 11, + "startLine": 132, + "startColumn": 6, + "endLine": 132, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141905,10 +142046,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 142, - "startColumn": 5, - "endLine": 142, - "endColumn": 18, + "startLine": 143, + "startColumn": 6, + "endLine": 143, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141932,10 +142073,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 145, - "startColumn": 5, - "endLine": 145, - "endColumn": 14, + "startLine": 146, + "startColumn": 6, + "endLine": 146, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -141981,10 +142122,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 196, - "startColumn": 5, - "endLine": 196, - "endColumn": 11, + "startLine": 197, + "startColumn": 6, + "endLine": 197, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142004,10 +142145,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 246, - "startColumn": 5, - "endLine": 246, - "endColumn": 22, + "startLine": 247, + "startColumn": 6, + "endLine": 247, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142027,10 +142168,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 257, - "startColumn": 5, - "endLine": 257, - "endColumn": 13, + "startLine": 258, + "startColumn": 6, + "endLine": 258, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142096,10 +142237,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 269, - "startColumn": 5, - "endLine": 269, - "endColumn": 14, + "startLine": 270, + "startColumn": 6, + "endLine": 270, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142120,10 +142261,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 278, - "startColumn": 5, - "endLine": 278, - "endColumn": 14, + "startLine": 279, + "startColumn": 6, + "endLine": 279, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142455,10 +142596,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142499,10 +142640,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142522,10 +142663,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142546,10 +142687,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142573,10 +142714,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142623,10 +142764,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142647,10 +142788,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142670,10 +142811,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142693,10 +142834,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142737,10 +142878,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142760,10 +142901,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142784,10 +142925,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142811,10 +142952,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142861,10 +143002,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -142885,10 +143026,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142908,10 +143049,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142931,10 +143072,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142975,10 +143116,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -142998,10 +143139,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143022,10 +143163,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143049,10 +143190,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143099,10 +143240,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143123,10 +143264,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143167,10 +143308,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143190,10 +143331,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143214,10 +143355,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143241,10 +143382,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143291,10 +143432,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143315,10 +143456,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143364,10 +143505,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 480, - "startColumn": 5, - "endLine": 480, - "endColumn": 11, + "startLine": 481, + "startColumn": 6, + "endLine": 481, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143387,10 +143528,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 591, - "startColumn": 5, - "endLine": 591, - "endColumn": 24, + "startLine": 592, + "startColumn": 6, + "endLine": 592, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143411,10 +143552,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 594, - "startColumn": 5, - "endLine": 594, - "endColumn": 13, + "startLine": 595, + "startColumn": 6, + "endLine": 595, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143480,10 +143621,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 606, - "startColumn": 5, - "endLine": 606, - "endColumn": 14, + "startLine": 607, + "startColumn": 6, + "endLine": 607, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143504,10 +143645,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 633, - "startColumn": 5, - "endLine": 633, - "endColumn": 29, + "startLine": 634, + "startColumn": 6, + "endLine": 634, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143549,10 +143690,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 678, - "startColumn": 5, - "endLine": 678, - "endColumn": 13, + "startLine": 679, + "startColumn": 6, + "endLine": 679, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143573,10 +143714,10 @@ }, "propertyPath": "Properties.AutoScalingGroupProvider.AutoScalingGroupArn", "category": "Best Practice", - "startLine": 691, - "startColumn": 6, - "endLine": 691, - "endColumn": 26, + "startLine": 692, + "startColumn": 7, + "endLine": 692, + "endColumn": 11, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143699,10 +143840,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143743,10 +143884,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143766,10 +143907,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143790,10 +143931,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143817,10 +143958,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143867,10 +144008,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -143891,10 +144032,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143914,10 +144055,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143937,10 +144078,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -143981,10 +144122,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144004,10 +144145,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144028,10 +144169,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144055,10 +144196,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144105,10 +144246,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144129,10 +144270,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144152,10 +144293,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144175,10 +144316,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144219,10 +144360,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144242,10 +144383,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144266,10 +144407,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144293,10 +144434,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144343,10 +144484,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144367,10 +144508,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144411,10 +144552,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144434,10 +144575,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144458,10 +144599,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144485,10 +144626,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144535,10 +144676,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144559,10 +144700,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -144694,10 +144835,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -144775,13 +144916,13 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Service" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 110, - "startColumn": 4, - "endLine": 110, - "endColumn": 14, + "startLine": 111, + "startColumn": 5, + "endLine": 111, + "endColumn": 30, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -144935,9 +145076,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 47, - "startColumn": 5, - "endLine": 47, + "startLine": 48, + "startColumn": 6, + "endLine": 48, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -144959,10 +145100,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 61, - "startColumn": 5, - "endLine": 61, - "endColumn": 13, + "startLine": 62, + "startColumn": 6, + "endLine": 62, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -145026,10 +145167,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 130, - "startColumn": 5, - "endLine": 130, - "endColumn": 11, + "startLine": 131, + "startColumn": 6, + "endLine": 131, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -145072,10 +145213,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 146, - "startColumn": 5, - "endLine": 146, - "endColumn": 13, + "startLine": 147, + "startColumn": 6, + "endLine": 147, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145119,10 +145260,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 153, - "startColumn": 5, - "endLine": 153, - "endColumn": 27, + "startLine": 154, + "startColumn": 6, + "endLine": 154, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145166,10 +145307,10 @@ }, "propertyPath": "Properties.DestinationSecurityGroupId", "category": "Best Practice", - "startLine": 169, - "startColumn": 5, - "endLine": 169, - "endColumn": 32, + "startLine": 170, + "startColumn": 6, + "endLine": 170, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145213,10 +145354,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 176, - "startColumn": 5, - "endLine": 176, - "endColumn": 13, + "startLine": 177, + "startColumn": 6, + "endLine": 177, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145283,10 +145424,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 200, - "startColumn": 5, - "endLine": 200, - "endColumn": 21, + "startLine": 201, + "startColumn": 6, + "endLine": 201, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145373,10 +145514,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 222, - "startColumn": 5, - "endLine": 222, - "endColumn": 11, + "startLine": 223, + "startColumn": 6, + "endLine": 223, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -145604,10 +145745,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -145627,10 +145768,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 67, - "startColumn": 5, - "endLine": 67, - "endColumn": 21, + "startLine": 68, + "startColumn": 6, + "endLine": 68, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -145717,10 +145858,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 89, - "startColumn": 5, - "endLine": 89, - "endColumn": 11, + "startLine": 90, + "startColumn": 6, + "endLine": 90, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -145978,9 +146119,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 47, - "startColumn": 5, - "endLine": 47, + "startLine": 48, + "startColumn": 6, + "endLine": 48, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -146002,10 +146143,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 61, - "startColumn": 5, - "endLine": 61, - "endColumn": 13, + "startLine": 62, + "startColumn": 6, + "endLine": 62, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146069,10 +146210,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 128, - "startColumn": 5, - "endLine": 128, - "endColumn": 11, + "startLine": 129, + "startColumn": 6, + "endLine": 129, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146115,10 +146256,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 144, - "startColumn": 5, - "endLine": 144, - "endColumn": 13, + "startLine": 145, + "startColumn": 6, + "endLine": 145, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146162,10 +146303,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 151, - "startColumn": 5, - "endLine": 151, - "endColumn": 27, + "startLine": 152, + "startColumn": 6, + "endLine": 152, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146209,10 +146350,10 @@ }, "propertyPath": "Properties.DestinationSecurityGroupId", "category": "Best Practice", - "startLine": 167, - "startColumn": 5, - "endLine": 167, - "endColumn": 32, + "startLine": 168, + "startColumn": 6, + "endLine": 168, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146256,10 +146397,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 13, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146424,13 +146565,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 846, - "startColumn": 4, - "endLine": 846, - "endColumn": 14, + "startLine": 848, + "startColumn": 5, + "endLine": 848, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -146444,13 +146585,13 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LifecycleHook" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 976, - "startColumn": 4, - "endLine": 976, - "endColumn": 14, + "startLine": 978, + "startColumn": 5, + "endLine": 978, + "endColumn": 73, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -146529,10 +146670,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146573,10 +146714,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146596,10 +146737,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146620,10 +146761,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146647,10 +146788,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146697,10 +146838,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146721,10 +146862,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146744,10 +146885,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146767,10 +146908,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146811,10 +146952,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146834,10 +146975,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146858,10 +146999,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146885,10 +147026,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146935,10 +147076,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -146959,10 +147100,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -146982,10 +147123,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147005,10 +147146,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147049,10 +147190,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147072,10 +147213,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147096,10 +147237,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147123,10 +147264,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147173,10 +147314,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147197,10 +147338,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147241,10 +147382,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147264,10 +147405,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147288,10 +147429,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147315,10 +147456,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147365,10 +147506,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147389,10 +147530,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147438,10 +147579,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 486, - "startColumn": 5, - "endLine": 486, - "endColumn": 11, + "startLine": 487, + "startColumn": 6, + "endLine": 487, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147461,10 +147602,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 597, - "startColumn": 5, - "endLine": 597, - "endColumn": 24, + "startLine": 598, + "startColumn": 6, + "endLine": 598, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147485,10 +147626,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 600, - "startColumn": 5, - "endLine": 600, - "endColumn": 13, + "startLine": 601, + "startColumn": 6, + "endLine": 601, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147554,10 +147695,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 612, - "startColumn": 5, - "endLine": 612, - "endColumn": 14, + "startLine": 613, + "startColumn": 6, + "endLine": 613, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147578,10 +147719,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 638, - "startColumn": 5, - "endLine": 638, - "endColumn": 29, + "startLine": 639, + "startColumn": 6, + "endLine": 639, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147645,10 +147786,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 858, - "startColumn": 5, - "endLine": 858, - "endColumn": 18, + "startLine": 859, + "startColumn": 6, + "endLine": 859, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147690,10 +147831,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 865, - "startColumn": 5, - "endLine": 865, - "endColumn": 15, + "startLine": 866, + "startColumn": 6, + "endLine": 866, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -147713,10 +147854,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 876, - "startColumn": 5, - "endLine": 876, - "endColumn": 14, + "startLine": 877, + "startColumn": 6, + "endLine": 877, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147760,10 +147901,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 883, - "startColumn": 5, - "endLine": 883, - "endColumn": 14, + "startLine": 884, + "startColumn": 6, + "endLine": 884, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147784,10 +147925,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 960, - "startColumn": 5, - "endLine": 960, - "endColumn": 26, + "startLine": 961, + "startColumn": 6, + "endLine": 961, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147831,10 +147972,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 1027, - "startColumn": 5, - "endLine": 1027, - "endColumn": 22, + "startLine": 1028, + "startColumn": 6, + "endLine": 1028, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -147924,9 +148065,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 1038, - "startColumn": 5, - "endLine": 1038, + "startLine": 1039, + "startColumn": 6, + "endLine": 1039, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -147948,10 +148089,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 1112, - "startColumn": 5, - "endLine": 1112, - "endColumn": 13, + "startLine": 1113, + "startColumn": 6, + "endLine": 1113, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148153,13 +148294,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 846, - "startColumn": 4, - "endLine": 846, - "endColumn": 14, + "startLine": 848, + "startColumn": 5, + "endLine": 848, + "endColumn": 88, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -148173,13 +148314,13 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LifecycleHook" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 976, - "startColumn": 4, - "endLine": 976, - "endColumn": 14, + "startLine": 978, + "startColumn": 5, + "endLine": 978, + "endColumn": 83, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -148258,10 +148399,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148302,10 +148443,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148325,10 +148466,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148349,10 +148490,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148376,10 +148517,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148426,10 +148567,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148450,10 +148591,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148473,10 +148614,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148496,10 +148637,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148540,10 +148681,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148563,10 +148704,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148587,10 +148728,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148614,10 +148755,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148664,10 +148805,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148688,10 +148829,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148711,10 +148852,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148734,10 +148875,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148778,10 +148919,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148801,10 +148942,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148825,10 +148966,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148852,10 +148993,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148902,10 +149043,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -148926,10 +149067,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148970,10 +149111,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -148993,10 +149134,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149017,10 +149158,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149044,10 +149185,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149094,10 +149235,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149118,10 +149259,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149167,10 +149308,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 486, - "startColumn": 5, - "endLine": 486, - "endColumn": 11, + "startLine": 487, + "startColumn": 6, + "endLine": 487, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149190,10 +149331,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 597, - "startColumn": 5, - "endLine": 597, - "endColumn": 24, + "startLine": 598, + "startColumn": 6, + "endLine": 598, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149214,10 +149355,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 600, - "startColumn": 5, - "endLine": 600, - "endColumn": 13, + "startLine": 601, + "startColumn": 6, + "endLine": 601, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149283,10 +149424,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 612, - "startColumn": 5, - "endLine": 612, - "endColumn": 14, + "startLine": 613, + "startColumn": 6, + "endLine": 613, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149307,10 +149448,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 638, - "startColumn": 5, - "endLine": 638, - "endColumn": 29, + "startLine": 639, + "startColumn": 6, + "endLine": 639, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149374,10 +149515,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 858, - "startColumn": 5, - "endLine": 858, - "endColumn": 18, + "startLine": 859, + "startColumn": 6, + "endLine": 859, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149419,10 +149560,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 865, - "startColumn": 5, - "endLine": 865, - "endColumn": 15, + "startLine": 866, + "startColumn": 6, + "endLine": 866, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149442,10 +149583,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 876, - "startColumn": 5, - "endLine": 876, - "endColumn": 14, + "startLine": 877, + "startColumn": 6, + "endLine": 877, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149489,10 +149630,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 883, - "startColumn": 5, - "endLine": 883, - "endColumn": 14, + "startLine": 884, + "startColumn": 6, + "endLine": 884, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149513,10 +149654,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 960, - "startColumn": 5, - "endLine": 960, - "endColumn": 26, + "startLine": 961, + "startColumn": 6, + "endLine": 961, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -149629,9 +149770,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 1035, - "startColumn": 5, - "endLine": 1035, + "startLine": 1036, + "startColumn": 6, + "endLine": 1036, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -149675,10 +149816,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1068, - "startColumn": 5, - "endLine": 1068, - "endColumn": 11, + "startLine": 1069, + "startColumn": 6, + "endLine": 1069, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149698,10 +149839,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 1079, - "startColumn": 5, - "endLine": 1079, - "endColumn": 13, + "startLine": 1080, + "startColumn": 6, + "endLine": 1080, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -149883,13 +150024,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 846, - "startColumn": 4, - "endLine": 846, - "endColumn": 14, + "startLine": 848, + "startColumn": 5, + "endLine": 848, + "endColumn": 78, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -149903,13 +150044,13 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LifecycleHook" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 976, - "startColumn": 4, - "endLine": 976, - "endColumn": 14, + "startLine": 978, + "startColumn": 5, + "endLine": 978, + "endColumn": 73, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -149988,10 +150129,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150032,10 +150173,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150055,10 +150196,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150079,10 +150220,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150106,10 +150247,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150156,10 +150297,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150180,10 +150321,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150203,10 +150344,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150226,10 +150367,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150270,10 +150411,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150293,10 +150434,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150317,10 +150458,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150344,10 +150485,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150394,10 +150535,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150418,10 +150559,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150441,10 +150582,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150464,10 +150605,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150508,10 +150649,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150531,10 +150672,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150555,10 +150696,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150582,10 +150723,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150632,10 +150773,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150656,10 +150797,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150700,10 +150841,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150723,10 +150864,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150747,10 +150888,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150774,10 +150915,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150824,10 +150965,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150848,10 +150989,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150897,10 +151038,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 486, - "startColumn": 5, - "endLine": 486, - "endColumn": 11, + "startLine": 487, + "startColumn": 6, + "endLine": 487, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -150920,10 +151061,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 597, - "startColumn": 5, - "endLine": 597, - "endColumn": 24, + "startLine": 598, + "startColumn": 6, + "endLine": 598, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -150944,10 +151085,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 600, - "startColumn": 5, - "endLine": 600, - "endColumn": 13, + "startLine": 601, + "startColumn": 6, + "endLine": 601, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151013,10 +151154,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 612, - "startColumn": 5, - "endLine": 612, - "endColumn": 14, + "startLine": 613, + "startColumn": 6, + "endLine": 613, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151037,10 +151178,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 638, - "startColumn": 5, - "endLine": 638, - "endColumn": 29, + "startLine": 639, + "startColumn": 6, + "endLine": 639, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151104,10 +151245,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 858, - "startColumn": 5, - "endLine": 858, - "endColumn": 18, + "startLine": 859, + "startColumn": 6, + "endLine": 859, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151149,10 +151290,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 865, - "startColumn": 5, - "endLine": 865, - "endColumn": 15, + "startLine": 866, + "startColumn": 6, + "endLine": 866, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151172,10 +151313,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 876, - "startColumn": 5, - "endLine": 876, - "endColumn": 14, + "startLine": 877, + "startColumn": 6, + "endLine": 877, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151219,10 +151360,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 883, - "startColumn": 5, - "endLine": 883, - "endColumn": 14, + "startLine": 884, + "startColumn": 6, + "endLine": 884, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151243,10 +151384,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 960, - "startColumn": 5, - "endLine": 960, - "endColumn": 26, + "startLine": 961, + "startColumn": 6, + "endLine": 961, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151359,9 +151500,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 1027, - "startColumn": 5, - "endLine": 1027, + "startLine": 1028, + "startColumn": 6, + "endLine": 1028, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -151383,10 +151524,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 1041, - "startColumn": 5, - "endLine": 1041, - "endColumn": 13, + "startLine": 1042, + "startColumn": 6, + "endLine": 1042, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151548,13 +151689,13 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Service" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 777, - "startColumn": 4, - "endLine": 777, - "endColumn": 14, + "startLine": 778, + "startColumn": 5, + "endLine": 778, + "endColumn": 52, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -151614,10 +151755,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151658,10 +151799,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151681,10 +151822,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151705,10 +151846,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151732,10 +151873,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151782,10 +151923,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151806,10 +151947,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151829,10 +151970,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151852,10 +151993,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151896,10 +152037,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -151919,10 +152060,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151943,10 +152084,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -151970,10 +152111,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152020,10 +152161,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152044,10 +152185,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152067,10 +152208,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152090,10 +152231,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152134,10 +152275,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152157,10 +152298,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152181,10 +152322,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152208,10 +152349,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152258,10 +152399,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152282,10 +152423,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152326,10 +152467,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152349,10 +152490,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152373,10 +152514,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152400,10 +152541,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152450,10 +152591,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152474,10 +152615,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152569,10 +152710,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 520, - "startColumn": 5, - "endLine": 520, - "endColumn": 11, + "startLine": 521, + "startColumn": 6, + "endLine": 521, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152592,10 +152733,10 @@ }, "propertyPath": "Properties.DestinationSecurityGroupId", "category": "Best Practice", - "startLine": 532, - "startColumn": 5, - "endLine": 532, - "endColumn": 32, + "startLine": 533, + "startColumn": 6, + "endLine": 533, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152639,10 +152780,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 539, - "startColumn": 5, - "endLine": 539, - "endColumn": 13, + "startLine": 540, + "startColumn": 6, + "endLine": 540, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152709,10 +152850,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 563, - "startColumn": 5, - "endLine": 563, - "endColumn": 21, + "startLine": 564, + "startColumn": 6, + "endLine": 564, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152799,10 +152940,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 585, - "startColumn": 5, - "endLine": 585, - "endColumn": 11, + "startLine": 586, + "startColumn": 6, + "endLine": 586, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -152868,10 +153009,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 642, - "startColumn": 5, - "endLine": 642, - "endColumn": 22, + "startLine": 643, + "startColumn": 6, + "endLine": 643, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -152984,9 +153125,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 654, - "startColumn": 5, - "endLine": 654, + "startLine": 655, + "startColumn": 6, + "endLine": 655, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -153008,10 +153149,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 728, - "startColumn": 5, - "endLine": 728, - "endColumn": 13, + "startLine": 729, + "startColumn": 6, + "endLine": 729, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153075,10 +153216,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 797, - "startColumn": 5, - "endLine": 797, - "endColumn": 11, + "startLine": 798, + "startColumn": 6, + "endLine": 798, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153121,10 +153262,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 813, - "startColumn": 5, - "endLine": 813, - "endColumn": 13, + "startLine": 814, + "startColumn": 6, + "endLine": 814, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153168,10 +153309,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 820, - "startColumn": 5, - "endLine": 820, - "endColumn": 27, + "startLine": 821, + "startColumn": 6, + "endLine": 821, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153453,13 +153594,13 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Service" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 718, - "startColumn": 4, - "endLine": 718, - "endColumn": 14, + "startLine": 719, + "startColumn": 5, + "endLine": 719, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -153519,10 +153660,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153563,10 +153704,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153586,10 +153727,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153610,10 +153751,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153637,10 +153778,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153687,10 +153828,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153711,10 +153852,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153734,10 +153875,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153757,10 +153898,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153801,10 +153942,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153824,10 +153965,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153848,10 +153989,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153875,10 +154016,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153925,10 +154066,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -153949,10 +154090,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153972,10 +154113,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -153995,10 +154136,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154039,10 +154180,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154062,10 +154203,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154086,10 +154227,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154113,10 +154254,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154163,10 +154304,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154187,10 +154328,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154231,10 +154372,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154254,10 +154395,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154278,10 +154419,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154305,10 +154446,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154355,10 +154496,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154379,10 +154520,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154452,10 +154593,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 510, - "startColumn": 5, - "endLine": 510, - "endColumn": 21, + "startLine": 511, + "startColumn": 6, + "endLine": 511, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154542,10 +154683,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 526, - "startColumn": 5, - "endLine": 526, - "endColumn": 11, + "startLine": 527, + "startColumn": 6, + "endLine": 527, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154611,10 +154752,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 583, - "startColumn": 5, - "endLine": 583, - "endColumn": 22, + "startLine": 584, + "startColumn": 6, + "endLine": 584, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154727,9 +154868,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 595, - "startColumn": 5, - "endLine": 595, + "startLine": 596, + "startColumn": 6, + "endLine": 596, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -154751,10 +154892,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 669, - "startColumn": 5, - "endLine": 669, - "endColumn": 13, + "startLine": 670, + "startColumn": 6, + "endLine": 670, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154818,10 +154959,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 738, - "startColumn": 5, - "endLine": 738, - "endColumn": 11, + "startLine": 739, + "startColumn": 6, + "endLine": 739, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -154841,10 +154982,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 754, - "startColumn": 5, - "endLine": 754, - "endColumn": 16, + "startLine": 755, + "startColumn": 6, + "endLine": 755, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -154934,10 +155075,10 @@ }, "propertyPath": "Properties.ScalingTargetId", "category": "Best Practice", - "startLine": 803, - "startColumn": 5, - "endLine": 803, - "endColumn": 21, + "startLine": 804, + "startColumn": 6, + "endLine": 804, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155222,10 +155363,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155266,10 +155407,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155289,10 +155430,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155313,10 +155454,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155340,10 +155481,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155390,10 +155531,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155414,10 +155555,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155437,10 +155578,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155460,10 +155601,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155504,10 +155645,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155527,10 +155668,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155551,10 +155692,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155578,10 +155719,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155628,10 +155769,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155652,10 +155793,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155675,10 +155816,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155698,10 +155839,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155742,10 +155883,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155765,10 +155906,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155789,10 +155930,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155816,10 +155957,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155866,10 +156007,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155890,10 +156031,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155934,10 +156075,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -155957,10 +156098,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -155981,10 +156122,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156008,10 +156149,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156058,10 +156199,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156082,10 +156223,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156155,10 +156296,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 512, - "startColumn": 5, - "endLine": 512, - "endColumn": 22, + "startLine": 513, + "startColumn": 6, + "endLine": 513, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156271,9 +156412,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 524, - "startColumn": 5, - "endLine": 524, + "startLine": 525, + "startColumn": 6, + "endLine": 525, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -156295,10 +156436,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 598, - "startColumn": 5, - "endLine": 598, - "endColumn": 13, + "startLine": 599, + "startColumn": 6, + "endLine": 599, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -156362,10 +156503,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 655, - "startColumn": 5, - "endLine": 655, - "endColumn": 11, + "startLine": 656, + "startColumn": 6, + "endLine": 656, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -156566,13 +156707,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 108, - "startColumn": 4, - "endLine": 108, - "endColumn": 14, + "startLine": 110, + "startColumn": 5, + "endLine": 110, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -156588,10 +156729,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 15, - "startColumn": 5, - "endLine": 15, - "endColumn": 14, + "startLine": 16, + "startColumn": 6, + "endLine": 16, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156635,10 +156776,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 19, - "startColumn": 5, - "endLine": 19, - "endColumn": 14, + "startLine": 20, + "startColumn": 6, + "endLine": 20, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156681,10 +156822,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 141, - "startColumn": 5, - "endLine": 141, - "endColumn": 18, + "startLine": 142, + "startColumn": 6, + "endLine": 142, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -156726,10 +156867,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 148, - "startColumn": 5, - "endLine": 148, - "endColumn": 15, + "startLine": 149, + "startColumn": 6, + "endLine": 149, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -156849,10 +156990,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 15, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156873,10 +157014,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 96, - "startColumn": 5, - "endLine": 96, - "endColumn": 15, + "startLine": 97, + "startColumn": 6, + "endLine": 97, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156920,10 +157061,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 111, - "startColumn": 5, - "endLine": 111, - "endColumn": 14, + "startLine": 112, + "startColumn": 6, + "endLine": 112, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156967,10 +157108,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 118, - "startColumn": 5, - "endLine": 118, - "endColumn": 15, + "startLine": 119, + "startColumn": 6, + "endLine": 119, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -156991,10 +157132,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -157038,10 +157179,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 133, - "startColumn": 5, - "endLine": 133, - "endColumn": 15, + "startLine": 134, + "startColumn": 6, + "endLine": 134, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -157085,10 +157226,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 157, - "startColumn": 5, - "endLine": 157, - "endColumn": 16, + "startLine": 158, + "startColumn": 6, + "endLine": 158, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -157109,10 +157250,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 160, - "startColumn": 5, - "endLine": 160, - "endColumn": 15, + "startLine": 161, + "startColumn": 6, + "endLine": 161, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -157581,10 +157722,10 @@ }, "propertyPath": "Properties.ParentImage", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 17, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-imagebuilder.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -157917,13 +158058,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 230, - "startColumn": 4, - "endLine": 230, - "endColumn": 14, + "startLine": 231, + "startColumn": 5, + "endLine": 231, + "endColumn": 96, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -157937,13 +158078,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 346, - "startColumn": 4, - "endLine": 346, - "endColumn": 14, + "startLine": 348, + "startColumn": 5, + "endLine": 348, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158077,13 +158218,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 89, - "startColumn": 4, - "endLine": 89, - "endColumn": 14, + "startLine": 90, + "startColumn": 5, + "endLine": 90, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158203,13 +158344,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 167, - "startColumn": 4, - "endLine": 167, - "endColumn": 14, + "startLine": 168, + "startColumn": 5, + "endLine": 168, + "endColumn": 53, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158223,13 +158364,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 283, - "startColumn": 4, - "endLine": 283, - "endColumn": 14, + "startLine": 285, + "startColumn": 5, + "endLine": 285, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158243,13 +158384,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 347, - "startColumn": 4, - "endLine": 347, - "endColumn": 14, + "startLine": 348, + "startColumn": 5, + "endLine": 348, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158287,10 +158428,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 41, - "startColumn": 5, - "endLine": 41, - "endColumn": 18, + "startLine": 42, + "startColumn": 6, + "endLine": 42, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -158332,10 +158473,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 15, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -158377,10 +158518,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 96, - "startColumn": 5, - "endLine": 96, - "endColumn": 18, + "startLine": 97, + "startColumn": 6, + "endLine": 97, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -158422,10 +158563,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 103, - "startColumn": 5, - "endLine": 103, - "endColumn": 15, + "startLine": 104, + "startColumn": 6, + "endLine": 104, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -158646,13 +158787,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 57, - "startColumn": 4, - "endLine": 57, - "endColumn": 14, + "startLine": 58, + "startColumn": 5, + "endLine": 58, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158666,13 +158807,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 236, - "startColumn": 4, - "endLine": 236, - "endColumn": 14, + "startLine": 238, + "startColumn": 5, + "endLine": 238, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158852,13 +158993,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 53, - "startColumn": 4, - "endLine": 53, - "endColumn": 14, + "startLine": 54, + "startColumn": 5, + "endLine": 54, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -158896,10 +159037,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 85, - "startColumn": 5, - "endLine": 85, - "endColumn": 18, + "startLine": 86, + "startColumn": 6, + "endLine": 86, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -158941,10 +159082,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 92, - "startColumn": 5, - "endLine": 92, - "endColumn": 15, + "startLine": 93, + "startColumn": 6, + "endLine": 93, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159042,13 +159183,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 83, - "startColumn": 4, - "endLine": 83, - "endColumn": 14, + "startLine": 84, + "startColumn": 5, + "endLine": 84, + "endColumn": 39, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -159212,10 +159353,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 69, - "startColumn": 5, - "endLine": 69, - "endColumn": 18, + "startLine": 70, + "startColumn": 6, + "endLine": 70, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159274,10 +159415,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 61, - "startColumn": 5, - "endLine": 61, - "endColumn": 18, + "startLine": 62, + "startColumn": 6, + "endLine": 62, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159357,13 +159498,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 99, - "startColumn": 4, - "endLine": 99, - "endColumn": 14, + "startLine": 101, + "startColumn": 5, + "endLine": 101, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -159502,13 +159643,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 126, - "startColumn": 4, - "endLine": 126, - "endColumn": 14, + "startLine": 128, + "startColumn": 5, + "endLine": 128, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -159524,10 +159665,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 206, - "startColumn": 5, - "endLine": 206, - "endColumn": 15, + "startLine": 207, + "startColumn": 6, + "endLine": 207, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159548,10 +159689,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 228, - "startColumn": 5, - "endLine": 228, - "endColumn": 15, + "startLine": 229, + "startColumn": 6, + "endLine": 229, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159617,10 +159758,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 244, - "startColumn": 5, - "endLine": 244, - "endColumn": 18, + "startLine": 245, + "startColumn": 6, + "endLine": 245, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159662,9 +159803,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 251, - "startColumn": 5, - "endLine": 251, + "startLine": 252, + "startColumn": 6, + "endLine": 252, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159707,10 +159848,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 288, - "startColumn": 5, - "endLine": 288, - "endColumn": 18, + "startLine": 289, + "startColumn": 6, + "endLine": 289, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159752,9 +159893,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 295, - "startColumn": 5, - "endLine": 295, + "startLine": 296, + "startColumn": 6, + "endLine": 296, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159798,10 +159939,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 359, - "startColumn": 5, - "endLine": 359, - "endColumn": 16, + "startLine": 360, + "startColumn": 6, + "endLine": 360, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159822,10 +159963,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 365, - "startColumn": 5, - "endLine": 365, - "endColumn": 15, + "startLine": 366, + "startColumn": 6, + "endLine": 366, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159846,10 +159987,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 376, - "startColumn": 5, - "endLine": 376, - "endColumn": 14, + "startLine": 377, + "startColumn": 6, + "endLine": 377, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159893,10 +160034,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 383, - "startColumn": 5, - "endLine": 383, - "endColumn": 15, + "startLine": 384, + "startColumn": 6, + "endLine": 384, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -159939,10 +160080,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 395, - "startColumn": 5, - "endLine": 395, - "endColumn": 18, + "startLine": 396, + "startColumn": 6, + "endLine": 396, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -159984,9 +160125,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 402, - "startColumn": 5, - "endLine": 402, + "startLine": 403, + "startColumn": 6, + "endLine": 403, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160029,10 +160170,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 439, - "startColumn": 5, - "endLine": 439, - "endColumn": 18, + "startLine": 440, + "startColumn": 6, + "endLine": 440, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -160074,9 +160215,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 446, - "startColumn": 5, - "endLine": 446, + "startLine": 447, + "startColumn": 6, + "endLine": 447, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160120,10 +160261,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 507, - "startColumn": 5, - "endLine": 507, - "endColumn": 16, + "startLine": 508, + "startColumn": 6, + "endLine": 508, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160144,10 +160285,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 510, - "startColumn": 5, - "endLine": 510, - "endColumn": 15, + "startLine": 511, + "startColumn": 6, + "endLine": 511, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160190,10 +160331,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 522, - "startColumn": 5, - "endLine": 522, - "endColumn": 18, + "startLine": 523, + "startColumn": 6, + "endLine": 523, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -160235,9 +160376,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 529, - "startColumn": 5, - "endLine": 529, + "startLine": 530, + "startColumn": 6, + "endLine": 530, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160280,10 +160421,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 566, - "startColumn": 5, - "endLine": 566, - "endColumn": 18, + "startLine": 567, + "startColumn": 6, + "endLine": 567, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -160325,9 +160466,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 573, - "startColumn": 5, - "endLine": 573, + "startLine": 574, + "startColumn": 6, + "endLine": 574, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160371,10 +160512,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 634, - "startColumn": 5, - "endLine": 634, - "endColumn": 16, + "startLine": 635, + "startColumn": 6, + "endLine": 635, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160395,10 +160536,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 637, - "startColumn": 5, - "endLine": 637, - "endColumn": 15, + "startLine": 638, + "startColumn": 6, + "endLine": 638, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160441,10 +160582,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 649, - "startColumn": 5, - "endLine": 649, - "endColumn": 18, + "startLine": 650, + "startColumn": 6, + "endLine": 650, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -160486,9 +160627,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 656, - "startColumn": 5, - "endLine": 656, + "startLine": 657, + "startColumn": 6, + "endLine": 657, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160531,10 +160672,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 693, - "startColumn": 5, - "endLine": 693, - "endColumn": 18, + "startLine": 694, + "startColumn": 6, + "endLine": 694, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -160576,9 +160717,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 700, - "startColumn": 5, - "endLine": 700, + "startLine": 701, + "startColumn": 6, + "endLine": 701, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160622,10 +160763,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 761, - "startColumn": 5, - "endLine": 761, - "endColumn": 16, + "startLine": 762, + "startColumn": 6, + "endLine": 762, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160646,10 +160787,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 764, - "startColumn": 5, - "endLine": 764, - "endColumn": 15, + "startLine": 765, + "startColumn": 6, + "endLine": 765, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -160872,13 +161013,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 279, - "startColumn": 7, - "endLine": 279, - "endColumn": 17, + "startLine": 281, + "startColumn": 9, + "endLine": 281, + "endColumn": 67, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -160892,13 +161033,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 425, - "startColumn": 7, - "endLine": 425, - "endColumn": 17, + "startLine": 427, + "startColumn": 9, + "endLine": 427, + "endColumn": 68, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -161070,10 +161211,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 64, - "startColumn": 9, - "endLine": 64, - "endColumn": 18, + "startLine": 65, + "startColumn": 11, + "endLine": 65, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161094,10 +161235,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 67, - "startColumn": 9, - "endLine": 67, - "endColumn": 18, + "startLine": 68, + "startColumn": 11, + "endLine": 68, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161164,10 +161305,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 136, - "startColumn": 9, - "endLine": 136, - "endColumn": 18, + "startLine": 137, + "startColumn": 11, + "endLine": 137, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161188,10 +161329,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 139, - "startColumn": 9, - "endLine": 139, - "endColumn": 18, + "startLine": 140, + "startColumn": 11, + "endLine": 140, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161212,10 +161353,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 295, - "startColumn": 9, - "endLine": 295, - "endColumn": 24, + "startLine": 296, + "startColumn": 11, + "endLine": 296, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -161235,10 +161376,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 441, - "startColumn": 9, - "endLine": 441, - "endColumn": 24, + "startLine": 442, + "startColumn": 11, + "endLine": 442, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -161258,10 +161399,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 515, - "startColumn": 9, - "endLine": 515, - "endColumn": 19, + "startLine": 516, + "startColumn": 11, + "endLine": 516, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161282,10 +161423,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 533, - "startColumn": 9, - "endLine": 533, - "endColumn": 19, + "startLine": 534, + "startColumn": 11, + "endLine": 534, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161329,10 +161470,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 557, - "startColumn": 9, - "endLine": 557, - "endColumn": 18, + "startLine": 558, + "startColumn": 11, + "endLine": 558, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161376,10 +161517,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 564, - "startColumn": 9, - "endLine": 564, - "endColumn": 19, + "startLine": 565, + "startColumn": 11, + "endLine": 565, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161423,10 +161564,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 576, - "startColumn": 9, - "endLine": 576, - "endColumn": 20, + "startLine": 577, + "startColumn": 11, + "endLine": 577, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161447,10 +161588,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 579, - "startColumn": 9, - "endLine": 579, - "endColumn": 19, + "startLine": 580, + "startColumn": 11, + "endLine": 580, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161471,10 +161612,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 668, - "startColumn": 9, - "endLine": 668, - "endColumn": 19, + "startLine": 669, + "startColumn": 11, + "endLine": 669, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161541,10 +161682,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 691, - "startColumn": 9, - "endLine": 691, - "endColumn": 19, + "startLine": 692, + "startColumn": 11, + "endLine": 692, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -161930,13 +162071,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 162, - "startColumn": 7, - "endLine": 162, - "endColumn": 17, + "startLine": 164, + "startColumn": 9, + "endLine": 164, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -162018,9 +162159,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 186, - "startColumn": 9, - "endLine": 186, + "startLine": 187, + "startColumn": 11, + "endLine": 187, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162063,10 +162204,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 193, - "startColumn": 9, - "endLine": 193, - "endColumn": 19, + "startLine": 194, + "startColumn": 11, + "endLine": 194, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -162086,9 +162227,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 225, - "startColumn": 9, - "endLine": 225, + "startLine": 226, + "startColumn": 11, + "endLine": 226, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -162110,9 +162251,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 244, - "startColumn": 9, - "endLine": 244, + "startLine": 245, + "startColumn": 11, + "endLine": 245, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -162134,9 +162275,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 267, - "startColumn": 9, - "endLine": 267, + "startLine": 268, + "startColumn": 11, + "endLine": 268, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2/tree/master/aws-apigatewayv2-stage.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -162586,13 +162727,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 129, - "startColumn": 7, - "endLine": 129, - "endColumn": 17, + "startLine": 131, + "startColumn": 9, + "endLine": 131, + "endColumn": 43, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -162606,13 +162747,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 292, - "startColumn": 7, - "endLine": 292, - "endColumn": 17, + "startLine": 293, + "startColumn": 9, + "endLine": 293, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -162626,13 +162767,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 449, - "startColumn": 7, - "endLine": 449, - "endColumn": 17, + "startLine": 450, + "startColumn": 9, + "endLine": 450, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -162671,10 +162812,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 142, - "startColumn": 9, - "endLine": 142, - "endColumn": 22, + "startLine": 143, + "startColumn": 11, + "endLine": 143, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162740,9 +162881,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 174, - "startColumn": 9, - "endLine": 174, + "startLine": 175, + "startColumn": 11, + "endLine": 175, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162785,10 +162926,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 181, - "startColumn": 9, - "endLine": 181, - "endColumn": 19, + "startLine": 182, + "startColumn": 11, + "endLine": 182, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -162831,10 +162972,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 193, - "startColumn": 9, - "endLine": 193, - "endColumn": 18, + "startLine": 194, + "startColumn": 11, + "endLine": 194, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162855,10 +162996,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 196, - "startColumn": 9, - "endLine": 196, - "endColumn": 18, + "startLine": 197, + "startColumn": 11, + "endLine": 197, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162879,10 +163020,10 @@ }, "propertyPath": "Properties.EventBusName", "category": "Best Practice", - "startLine": 305, - "startColumn": 9, - "endLine": 305, - "endColumn": 22, + "startLine": 306, + "startColumn": 11, + "endLine": 306, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -162924,9 +163065,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 346, - "startColumn": 9, - "endLine": 346, + "startLine": 347, + "startColumn": 11, + "endLine": 347, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -162969,10 +163110,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 353, - "startColumn": 9, - "endLine": 353, - "endColumn": 19, + "startLine": 354, + "startColumn": 11, + "endLine": 354, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -162992,10 +163133,10 @@ }, "propertyPath": "Properties.EventBusName", "category": "Best Practice", - "startLine": 462, - "startColumn": 9, - "endLine": 462, - "endColumn": 22, + "startLine": 463, + "startColumn": 11, + "endLine": 463, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -163037,9 +163178,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 495, - "startColumn": 9, - "endLine": 495, + "startLine": 496, + "startColumn": 11, + "endLine": 496, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163082,10 +163223,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 502, - "startColumn": 9, - "endLine": 502, - "endColumn": 19, + "startLine": 503, + "startColumn": 11, + "endLine": 503, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -163105,10 +163246,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 576, - "startColumn": 9, - "endLine": 576, - "endColumn": 19, + "startLine": 577, + "startColumn": 11, + "endLine": 577, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163129,10 +163270,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 594, - "startColumn": 9, - "endLine": 594, - "endColumn": 19, + "startLine": 595, + "startColumn": 11, + "endLine": 595, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163176,10 +163317,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 618, - "startColumn": 9, - "endLine": 618, - "endColumn": 18, + "startLine": 619, + "startColumn": 11, + "endLine": 619, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163223,10 +163364,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 625, - "startColumn": 9, - "endLine": 625, - "endColumn": 19, + "startLine": 626, + "startColumn": 11, + "endLine": 626, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163270,10 +163411,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 637, - "startColumn": 9, - "endLine": 637, - "endColumn": 20, + "startLine": 638, + "startColumn": 11, + "endLine": 638, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163294,10 +163435,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 640, - "startColumn": 9, - "endLine": 640, - "endColumn": 19, + "startLine": 641, + "startColumn": 11, + "endLine": 641, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163318,10 +163459,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 729, - "startColumn": 9, - "endLine": 729, - "endColumn": 19, + "startLine": 730, + "startColumn": 11, + "endLine": 730, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163388,10 +163529,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 752, - "startColumn": 9, - "endLine": 752, - "endColumn": 19, + "startLine": 753, + "startColumn": 11, + "endLine": 753, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163797,13 +163938,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 154, - "startColumn": 7, - "endLine": 154, - "endColumn": 17, + "startLine": 156, + "startColumn": 9, + "endLine": 156, + "endColumn": 64, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -163841,10 +163982,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 171, - "startColumn": 9, - "endLine": 171, - "endColumn": 24, + "startLine": 172, + "startColumn": 11, + "endLine": 172, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -163886,10 +164027,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 246, - "startColumn": 9, - "endLine": 246, - "endColumn": 19, + "startLine": 247, + "startColumn": 11, + "endLine": 247, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163910,10 +164051,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 264, - "startColumn": 9, - "endLine": 264, - "endColumn": 19, + "startLine": 265, + "startColumn": 11, + "endLine": 265, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -163957,10 +164098,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 288, - "startColumn": 9, - "endLine": 288, - "endColumn": 18, + "startLine": 289, + "startColumn": 11, + "endLine": 289, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164004,10 +164145,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 295, - "startColumn": 9, - "endLine": 295, - "endColumn": 19, + "startLine": 296, + "startColumn": 11, + "endLine": 296, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164051,10 +164192,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 307, - "startColumn": 9, - "endLine": 307, - "endColumn": 20, + "startLine": 308, + "startColumn": 11, + "endLine": 308, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164075,10 +164216,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 310, - "startColumn": 9, - "endLine": 310, - "endColumn": 19, + "startLine": 311, + "startColumn": 11, + "endLine": 311, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164099,10 +164240,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 396, - "startColumn": 9, - "endLine": 396, - "endColumn": 19, + "startLine": 397, + "startColumn": 11, + "endLine": 397, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164169,10 +164310,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 419, - "startColumn": 9, - "endLine": 419, - "endColumn": 19, + "startLine": 420, + "startColumn": 11, + "endLine": 420, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164545,13 +164686,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 111, - "startColumn": 7, - "endLine": 111, - "endColumn": 17, + "startLine": 113, + "startColumn": 9, + "endLine": 113, + "endColumn": 46, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -164565,13 +164706,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 205, - "startColumn": 7, - "endLine": 205, - "endColumn": 17, + "startLine": 206, + "startColumn": 9, + "endLine": 206, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -164585,13 +164726,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 354, - "startColumn": 7, - "endLine": 354, - "endColumn": 17, + "startLine": 355, + "startColumn": 9, + "endLine": 355, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -164605,13 +164746,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 504, - "startColumn": 7, - "endLine": 504, - "endColumn": 17, + "startLine": 505, + "startColumn": 9, + "endLine": 505, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -164649,9 +164790,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 252, - "startColumn": 9, - "endLine": 252, + "startLine": 253, + "startColumn": 11, + "endLine": 253, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164694,10 +164835,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 259, - "startColumn": 9, - "endLine": 259, - "endColumn": 19, + "startLine": 260, + "startColumn": 11, + "endLine": 260, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -164739,9 +164880,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 402, - "startColumn": 9, - "endLine": 402, + "startLine": 403, + "startColumn": 11, + "endLine": 403, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164784,10 +164925,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 409, - "startColumn": 9, - "endLine": 409, - "endColumn": 19, + "startLine": 410, + "startColumn": 11, + "endLine": 410, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -164829,9 +164970,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 552, - "startColumn": 9, - "endLine": 552, + "startLine": 553, + "startColumn": 11, + "endLine": 553, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164874,10 +165015,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 559, - "startColumn": 9, - "endLine": 559, - "endColumn": 19, + "startLine": 560, + "startColumn": 11, + "endLine": 560, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -164897,10 +165038,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 633, - "startColumn": 9, - "endLine": 633, - "endColumn": 19, + "startLine": 634, + "startColumn": 11, + "endLine": 634, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164921,10 +165062,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 650, - "startColumn": 9, - "endLine": 650, - "endColumn": 19, + "startLine": 651, + "startColumn": 11, + "endLine": 651, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -164968,10 +165109,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 665, - "startColumn": 9, - "endLine": 665, - "endColumn": 18, + "startLine": 666, + "startColumn": 11, + "endLine": 666, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165015,10 +165156,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 672, - "startColumn": 9, - "endLine": 672, - "endColumn": 19, + "startLine": 673, + "startColumn": 11, + "endLine": 673, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165061,9 +165202,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 684, - "startColumn": 9, - "endLine": 684, + "startLine": 685, + "startColumn": 11, + "endLine": 685, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165106,10 +165247,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 691, - "startColumn": 9, - "endLine": 691, - "endColumn": 19, + "startLine": 692, + "startColumn": 11, + "endLine": 692, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -165151,9 +165292,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 728, - "startColumn": 9, - "endLine": 728, + "startLine": 729, + "startColumn": 11, + "endLine": 729, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165196,10 +165337,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 735, - "startColumn": 9, - "endLine": 735, - "endColumn": 19, + "startLine": 736, + "startColumn": 11, + "endLine": 736, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -165242,10 +165383,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 768, - "startColumn": 9, - "endLine": 768, - "endColumn": 20, + "startLine": 769, + "startColumn": 11, + "endLine": 769, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165266,10 +165407,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 771, - "startColumn": 9, - "endLine": 771, - "endColumn": 19, + "startLine": 772, + "startColumn": 11, + "endLine": 772, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165312,9 +165453,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 811, - "startColumn": 9, - "endLine": 811, + "startLine": 812, + "startColumn": 11, + "endLine": 812, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165357,10 +165498,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 818, - "startColumn": 9, - "endLine": 818, - "endColumn": 19, + "startLine": 819, + "startColumn": 11, + "endLine": 819, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -165402,9 +165543,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 855, - "startColumn": 9, - "endLine": 855, + "startLine": 856, + "startColumn": 11, + "endLine": 856, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165447,10 +165588,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 862, - "startColumn": 9, - "endLine": 862, - "endColumn": 19, + "startLine": 863, + "startColumn": 11, + "endLine": 863, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -165493,10 +165634,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 895, - "startColumn": 9, - "endLine": 895, - "endColumn": 20, + "startLine": 896, + "startColumn": 11, + "endLine": 896, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165517,10 +165658,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 901, - "startColumn": 9, - "endLine": 901, - "endColumn": 19, + "startLine": 902, + "startColumn": 11, + "endLine": 902, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -165921,13 +166062,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 216, - "startColumn": 7, - "endLine": 216, - "endColumn": 17, + "startLine": 218, + "startColumn": 9, + "endLine": 218, + "endColumn": 63, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -165941,13 +166082,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 368, - "startColumn": 7, - "endLine": 368, - "endColumn": 17, + "startLine": 370, + "startColumn": 9, + "endLine": 370, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -166007,9 +166148,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 416, - "startColumn": 9, - "endLine": 416, + "startLine": 417, + "startColumn": 11, + "endLine": 417, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166052,10 +166193,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 423, - "startColumn": 9, - "endLine": 423, - "endColumn": 19, + "startLine": 424, + "startColumn": 11, + "endLine": 424, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -166075,10 +166216,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 497, - "startColumn": 9, - "endLine": 497, - "endColumn": 19, + "startLine": 498, + "startColumn": 11, + "endLine": 498, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166099,10 +166240,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 514, - "startColumn": 9, - "endLine": 514, - "endColumn": 19, + "startLine": 515, + "startColumn": 11, + "endLine": 515, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166146,10 +166287,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 529, - "startColumn": 9, - "endLine": 529, - "endColumn": 18, + "startLine": 530, + "startColumn": 11, + "endLine": 530, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166193,10 +166334,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 536, - "startColumn": 9, - "endLine": 536, - "endColumn": 19, + "startLine": 537, + "startColumn": 11, + "endLine": 537, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166239,9 +166380,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 548, - "startColumn": 9, - "endLine": 548, + "startLine": 549, + "startColumn": 11, + "endLine": 549, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166284,10 +166425,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 555, - "startColumn": 9, - "endLine": 555, - "endColumn": 19, + "startLine": 556, + "startColumn": 11, + "endLine": 556, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -166329,9 +166470,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 592, - "startColumn": 9, - "endLine": 592, + "startLine": 593, + "startColumn": 11, + "endLine": 593, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166374,10 +166515,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 599, - "startColumn": 9, - "endLine": 599, - "endColumn": 19, + "startLine": 600, + "startColumn": 11, + "endLine": 600, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -166420,10 +166561,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 632, - "startColumn": 9, - "endLine": 632, - "endColumn": 20, + "startLine": 633, + "startColumn": 11, + "endLine": 633, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166444,10 +166585,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 635, - "startColumn": 9, - "endLine": 635, - "endColumn": 19, + "startLine": 636, + "startColumn": 11, + "endLine": 636, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166490,9 +166631,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 675, - "startColumn": 9, - "endLine": 675, + "startLine": 676, + "startColumn": 11, + "endLine": 676, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166535,10 +166676,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 682, - "startColumn": 9, - "endLine": 682, - "endColumn": 19, + "startLine": 683, + "startColumn": 11, + "endLine": 683, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -166580,9 +166721,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 719, - "startColumn": 9, - "endLine": 719, + "startLine": 720, + "startColumn": 11, + "endLine": 720, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166625,10 +166766,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 726, - "startColumn": 9, - "endLine": 726, - "endColumn": 19, + "startLine": 727, + "startColumn": 11, + "endLine": 727, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -166671,10 +166812,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 759, - "startColumn": 9, - "endLine": 759, - "endColumn": 20, + "startLine": 760, + "startColumn": 11, + "endLine": 760, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -166695,10 +166836,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 765, - "startColumn": 9, - "endLine": 765, - "endColumn": 19, + "startLine": 766, + "startColumn": 11, + "endLine": 766, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167104,13 +167245,13 @@ "entityType": "Resource", "resourceType": "Custom::S3BucketNotifications" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 65, - "startColumn": 7, - "endLine": 65, - "endColumn": 17, + "startLine": 67, + "startColumn": 9, + "endLine": 67, + "endColumn": 52, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167124,13 +167265,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 202, - "startColumn": 7, - "endLine": 202, - "endColumn": 17, + "startLine": 204, + "startColumn": 9, + "endLine": 204, + "endColumn": 80, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167144,13 +167285,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1091, - "startColumn": 7, - "endLine": 1091, - "endColumn": 17, + "startLine": 1093, + "startColumn": 9, + "endLine": 1093, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167164,13 +167305,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1228, - "startColumn": 7, - "endLine": 1228, - "endColumn": 17, + "startLine": 1230, + "startColumn": 9, + "endLine": 1230, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167184,13 +167325,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1437, - "startColumn": 7, - "endLine": 1437, - "endColumn": 17, + "startLine": 1439, + "startColumn": 9, + "endLine": 1439, + "endColumn": 46, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167204,13 +167345,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1588, - "startColumn": 7, - "endLine": 1588, - "endColumn": 17, + "startLine": 1589, + "startColumn": 9, + "endLine": 1589, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -167369,9 +167510,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 232, - "startColumn": 9, - "endLine": 232, + "startLine": 233, + "startColumn": 11, + "endLine": 233, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167392,10 +167533,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 235, - "startColumn": 9, - "endLine": 235, - "endColumn": 26, + "startLine": 236, + "startColumn": 11, + "endLine": 236, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -167414,9 +167555,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 266, - "startColumn": 9, - "endLine": 266, + "startLine": 267, + "startColumn": 11, + "endLine": 267, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -167438,10 +167579,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 283, - "startColumn": 9, - "endLine": 283, - "endColumn": 22, + "startLine": 284, + "startColumn": 11, + "endLine": 284, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167465,10 +167606,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 286, - "startColumn": 9, - "endLine": 286, - "endColumn": 18, + "startLine": 287, + "startColumn": 11, + "endLine": 287, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167492,10 +167633,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 297, - "startColumn": 9, - "endLine": 297, - "endColumn": 22, + "startLine": 298, + "startColumn": 11, + "endLine": 298, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167539,9 +167680,9 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 330, - "startColumn": 9, - "endLine": 330, + "startLine": 331, + "startColumn": 11, + "endLine": 331, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167562,10 +167703,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 336, - "startColumn": 9, - "endLine": 336, - "endColumn": 18, + "startLine": 337, + "startColumn": 11, + "endLine": 337, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -167607,9 +167748,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 354, - "startColumn": 9, - "endLine": 354, + "startLine": 355, + "startColumn": 11, + "endLine": 355, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167630,10 +167771,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 9, - "endLine": 357, - "endColumn": 26, + "startLine": 358, + "startColumn": 11, + "endLine": 358, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -167652,9 +167793,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 388, - "startColumn": 9, - "endLine": 388, + "startLine": 389, + "startColumn": 11, + "endLine": 389, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -167676,10 +167817,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 405, - "startColumn": 9, - "endLine": 405, - "endColumn": 22, + "startLine": 406, + "startColumn": 11, + "endLine": 406, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167703,10 +167844,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 408, - "startColumn": 9, - "endLine": 408, - "endColumn": 18, + "startLine": 409, + "startColumn": 11, + "endLine": 409, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167730,10 +167871,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 419, - "startColumn": 9, - "endLine": 419, - "endColumn": 22, + "startLine": 420, + "startColumn": 11, + "endLine": 420, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167777,9 +167918,9 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 452, - "startColumn": 9, - "endLine": 452, + "startLine": 453, + "startColumn": 11, + "endLine": 453, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167800,10 +167941,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 458, - "startColumn": 9, - "endLine": 458, - "endColumn": 18, + "startLine": 459, + "startColumn": 11, + "endLine": 459, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -167845,9 +167986,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 476, - "startColumn": 9, - "endLine": 476, + "startLine": 477, + "startColumn": 11, + "endLine": 477, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167868,10 +168009,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 479, - "startColumn": 9, - "endLine": 479, - "endColumn": 26, + "startLine": 480, + "startColumn": 11, + "endLine": 480, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -167890,9 +168031,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 510, - "startColumn": 9, - "endLine": 510, + "startLine": 511, + "startColumn": 11, + "endLine": 511, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -167914,10 +168055,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 527, - "startColumn": 9, - "endLine": 527, - "endColumn": 22, + "startLine": 528, + "startColumn": 11, + "endLine": 528, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167941,10 +168082,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 530, - "startColumn": 9, - "endLine": 530, - "endColumn": 18, + "startLine": 531, + "startColumn": 11, + "endLine": 531, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -167968,10 +168109,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 541, - "startColumn": 9, - "endLine": 541, - "endColumn": 22, + "startLine": 542, + "startColumn": 11, + "endLine": 542, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168037,9 +168178,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 557, - "startColumn": 9, - "endLine": 557, + "startLine": 558, + "startColumn": 11, + "endLine": 558, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168060,10 +168201,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 560, - "startColumn": 9, - "endLine": 560, - "endColumn": 26, + "startLine": 561, + "startColumn": 11, + "endLine": 561, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -168082,9 +168223,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 591, - "startColumn": 9, - "endLine": 591, + "startLine": 592, + "startColumn": 11, + "endLine": 592, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -168106,10 +168247,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 608, - "startColumn": 9, - "endLine": 608, - "endColumn": 22, + "startLine": 609, + "startColumn": 11, + "endLine": 609, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168133,10 +168274,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 611, - "startColumn": 9, - "endLine": 611, - "endColumn": 18, + "startLine": 612, + "startColumn": 11, + "endLine": 612, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168160,10 +168301,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 622, - "startColumn": 9, - "endLine": 622, - "endColumn": 22, + "startLine": 623, + "startColumn": 11, + "endLine": 623, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168207,9 +168348,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 651, - "startColumn": 9, - "endLine": 651, + "startLine": 652, + "startColumn": 11, + "endLine": 652, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -168280,10 +168421,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 795, - "startColumn": 9, - "endLine": 795, - "endColumn": 26, + "startLine": 796, + "startColumn": 11, + "endLine": 796, + "endColumn": 22, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168396,10 +168537,10 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 807, - "startColumn": 9, - "endLine": 807, - "endColumn": 21, + "startLine": 808, + "startColumn": 11, + "endLine": 808, + "endColumn": 22, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168420,10 +168561,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 1107, - "startColumn": 9, - "endLine": 1107, - "endColumn": 24, + "startLine": 1108, + "startColumn": 11, + "endLine": 1108, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -168465,9 +168606,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1276, - "startColumn": 9, - "endLine": 1276, + "startLine": 1277, + "startColumn": 11, + "endLine": 1277, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168510,10 +168651,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1283, - "startColumn": 9, - "endLine": 1283, - "endColumn": 19, + "startLine": 1284, + "startColumn": 11, + "endLine": 1284, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -168555,9 +168696,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1485, - "startColumn": 9, - "endLine": 1485, + "startLine": 1486, + "startColumn": 11, + "endLine": 1486, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168600,10 +168741,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1492, - "startColumn": 9, - "endLine": 1492, - "endColumn": 19, + "startLine": 1493, + "startColumn": 11, + "endLine": 1493, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -168645,9 +168786,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1627, - "startColumn": 9, - "endLine": 1627, + "startLine": 1628, + "startColumn": 11, + "endLine": 1628, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -168690,10 +168831,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1634, - "startColumn": 9, - "endLine": 1634, - "endColumn": 19, + "startLine": 1635, + "startColumn": 11, + "endLine": 1635, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -169212,13 +169353,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 165, - "startColumn": 7, - "endLine": 165, - "endColumn": 17, + "startLine": 167, + "startColumn": 9, + "endLine": 167, + "endColumn": 52, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169300,9 +169441,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 189, - "startColumn": 9, - "endLine": 189, + "startLine": 190, + "startColumn": 11, + "endLine": 190, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -169345,10 +169486,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 196, - "startColumn": 9, - "endLine": 196, - "endColumn": 19, + "startLine": 197, + "startColumn": 11, + "endLine": 197, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -169368,9 +169509,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 228, - "startColumn": 9, - "endLine": 228, + "startLine": 229, + "startColumn": 11, + "endLine": 229, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -169392,9 +169533,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 247, - "startColumn": 9, - "endLine": 247, + "startLine": 248, + "startColumn": 11, + "endLine": 248, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -169416,9 +169557,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 270, - "startColumn": 9, - "endLine": 270, + "startLine": 271, + "startColumn": 11, + "endLine": 271, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2/tree/master/aws-apigatewayv2-stage.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -169806,13 +169947,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 173, - "startColumn": 7, - "endLine": 173, - "endColumn": 17, + "startLine": 175, + "startColumn": 9, + "endLine": 175, + "endColumn": 55, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169826,13 +169967,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 319, - "startColumn": 7, - "endLine": 319, - "endColumn": 17, + "startLine": 321, + "startColumn": 9, + "endLine": 321, + "endColumn": 55, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169846,13 +169987,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 465, - "startColumn": 7, - "endLine": 465, - "endColumn": 17, + "startLine": 467, + "startColumn": 9, + "endLine": 467, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169866,13 +170007,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 611, - "startColumn": 7, - "endLine": 611, - "endColumn": 17, + "startLine": 613, + "startColumn": 9, + "endLine": 613, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169886,13 +170027,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 757, - "startColumn": 7, - "endLine": 757, - "endColumn": 17, + "startLine": 759, + "startColumn": 9, + "endLine": 759, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169906,13 +170047,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 903, - "startColumn": 7, - "endLine": 903, - "endColumn": 17, + "startLine": 905, + "startColumn": 9, + "endLine": 905, + "endColumn": 53, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169926,13 +170067,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1049, - "startColumn": 7, - "endLine": 1049, - "endColumn": 17, + "startLine": 1051, + "startColumn": 9, + "endLine": 1051, + "endColumn": 53, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169946,13 +170087,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1195, - "startColumn": 7, - "endLine": 1195, - "endColumn": 17, + "startLine": 1197, + "startColumn": 9, + "endLine": 1197, + "endColumn": 55, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169966,13 +170107,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1417, - "startColumn": 7, - "endLine": 1417, - "endColumn": 17, + "startLine": 1419, + "startColumn": 9, + "endLine": 1419, + "endColumn": 33, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -169986,13 +170127,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1542, - "startColumn": 7, - "endLine": 1542, - "endColumn": 17, + "startLine": 1544, + "startColumn": 9, + "endLine": 1544, + "endColumn": 46, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -170030,10 +170171,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1615, - "startColumn": 9, - "endLine": 1615, - "endColumn": 19, + "startLine": 1616, + "startColumn": 11, + "endLine": 1616, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170054,10 +170195,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1632, - "startColumn": 9, - "endLine": 1632, - "endColumn": 19, + "startLine": 1633, + "startColumn": 11, + "endLine": 1633, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170101,10 +170242,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 1647, - "startColumn": 9, - "endLine": 1647, - "endColumn": 18, + "startLine": 1648, + "startColumn": 11, + "endLine": 1648, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170148,10 +170289,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1654, - "startColumn": 9, - "endLine": 1654, - "endColumn": 19, + "startLine": 1655, + "startColumn": 11, + "endLine": 1655, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170194,9 +170335,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1666, - "startColumn": 9, - "endLine": 1666, + "startLine": 1667, + "startColumn": 11, + "endLine": 1667, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170239,10 +170380,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1673, - "startColumn": 9, - "endLine": 1673, - "endColumn": 19, + "startLine": 1674, + "startColumn": 11, + "endLine": 1674, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -170284,9 +170425,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1710, - "startColumn": 9, - "endLine": 1710, + "startLine": 1711, + "startColumn": 11, + "endLine": 1711, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170329,10 +170470,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1717, - "startColumn": 9, - "endLine": 1717, - "endColumn": 19, + "startLine": 1718, + "startColumn": 11, + "endLine": 1718, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -170375,10 +170516,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1750, - "startColumn": 9, - "endLine": 1750, - "endColumn": 20, + "startLine": 1751, + "startColumn": 11, + "endLine": 1751, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170399,10 +170540,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1753, - "startColumn": 9, - "endLine": 1753, - "endColumn": 19, + "startLine": 1754, + "startColumn": 11, + "endLine": 1754, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170445,9 +170586,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1793, - "startColumn": 9, - "endLine": 1793, + "startLine": 1794, + "startColumn": 11, + "endLine": 1794, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170490,10 +170631,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1800, - "startColumn": 9, - "endLine": 1800, - "endColumn": 19, + "startLine": 1801, + "startColumn": 11, + "endLine": 1801, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -170535,9 +170676,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 1837, - "startColumn": 9, - "endLine": 1837, + "startLine": 1838, + "startColumn": 11, + "endLine": 1838, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170580,10 +170721,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 1844, - "startColumn": 9, - "endLine": 1844, - "endColumn": 19, + "startLine": 1845, + "startColumn": 11, + "endLine": 1845, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -170626,10 +170767,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 1877, - "startColumn": 9, - "endLine": 1877, - "endColumn": 20, + "startLine": 1878, + "startColumn": 11, + "endLine": 1878, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -170650,10 +170791,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 1883, - "startColumn": 9, - "endLine": 1883, - "endColumn": 19, + "startLine": 1884, + "startColumn": 11, + "endLine": 1884, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171254,13 +171395,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 162, - "startColumn": 7, - "endLine": 162, - "endColumn": 17, + "startLine": 164, + "startColumn": 9, + "endLine": 164, + "endColumn": 52, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -171274,13 +171415,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 328, - "startColumn": 7, - "endLine": 328, - "endColumn": 17, + "startLine": 330, + "startColumn": 9, + "endLine": 330, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -171373,10 +171514,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 344, - "startColumn": 9, - "endLine": 344, - "endColumn": 24, + "startLine": 345, + "startColumn": 11, + "endLine": 345, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -171396,10 +171537,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 418, - "startColumn": 9, - "endLine": 418, - "endColumn": 19, + "startLine": 419, + "startColumn": 11, + "endLine": 419, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171420,10 +171561,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 435, - "startColumn": 9, - "endLine": 435, - "endColumn": 19, + "startLine": 436, + "startColumn": 11, + "endLine": 436, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171467,10 +171608,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 450, - "startColumn": 9, - "endLine": 450, - "endColumn": 18, + "startLine": 451, + "startColumn": 11, + "endLine": 451, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171514,10 +171655,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 457, - "startColumn": 9, - "endLine": 457, - "endColumn": 19, + "startLine": 458, + "startColumn": 11, + "endLine": 458, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171560,9 +171701,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 469, - "startColumn": 9, - "endLine": 469, + "startLine": 470, + "startColumn": 11, + "endLine": 470, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171605,10 +171746,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 476, - "startColumn": 9, - "endLine": 476, - "endColumn": 19, + "startLine": 477, + "startColumn": 11, + "endLine": 477, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -171650,9 +171791,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 513, - "startColumn": 9, - "endLine": 513, + "startLine": 514, + "startColumn": 11, + "endLine": 514, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171695,10 +171836,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 520, - "startColumn": 9, - "endLine": 520, - "endColumn": 19, + "startLine": 521, + "startColumn": 11, + "endLine": 521, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -171741,10 +171882,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 553, - "startColumn": 9, - "endLine": 553, - "endColumn": 20, + "startLine": 554, + "startColumn": 11, + "endLine": 554, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171765,10 +171906,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 556, - "startColumn": 9, - "endLine": 556, - "endColumn": 19, + "startLine": 557, + "startColumn": 11, + "endLine": 557, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171811,9 +171952,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 596, - "startColumn": 9, - "endLine": 596, + "startLine": 597, + "startColumn": 11, + "endLine": 597, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171856,10 +171997,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 603, - "startColumn": 9, - "endLine": 603, - "endColumn": 19, + "startLine": 604, + "startColumn": 11, + "endLine": 604, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -171901,9 +172042,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 640, - "startColumn": 9, - "endLine": 640, + "startLine": 641, + "startColumn": 11, + "endLine": 641, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -171946,10 +172087,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 647, - "startColumn": 9, - "endLine": 647, - "endColumn": 19, + "startLine": 648, + "startColumn": 11, + "endLine": 648, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -171992,10 +172133,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 680, - "startColumn": 9, - "endLine": 680, - "endColumn": 20, + "startLine": 681, + "startColumn": 11, + "endLine": 681, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172016,10 +172157,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 686, - "startColumn": 9, - "endLine": 686, - "endColumn": 19, + "startLine": 687, + "startColumn": 11, + "endLine": 687, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172299,13 +172440,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 159, - "startColumn": 7, - "endLine": 159, - "endColumn": 17, + "startLine": 161, + "startColumn": 9, + "endLine": 161, + "endColumn": 44, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -172365,9 +172506,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 194, - "startColumn": 9, - "endLine": 194, + "startLine": 195, + "startColumn": 11, + "endLine": 195, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172410,10 +172551,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 201, - "startColumn": 9, - "endLine": 201, - "endColumn": 19, + "startLine": 202, + "startColumn": 11, + "endLine": 202, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -172572,13 +172713,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 551, - "startColumn": 7, - "endLine": 551, - "endColumn": 17, + "startLine": 552, + "startColumn": 9, + "endLine": 552, + "endColumn": 49, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -172594,10 +172735,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 59, - "startColumn": 9, - "endLine": 59, - "endColumn": 15, + "startLine": 60, + "startColumn": 11, + "endLine": 60, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -172617,10 +172758,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 74, - "startColumn": 9, - "endLine": 74, - "endColumn": 15, + "startLine": 75, + "startColumn": 11, + "endLine": 75, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -172640,10 +172781,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 156, - "startColumn": 9, - "endLine": 156, - "endColumn": 15, + "startLine": 157, + "startColumn": 11, + "endLine": 157, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172687,10 +172828,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 186, - "startColumn": 9, - "endLine": 186, - "endColumn": 15, + "startLine": 187, + "startColumn": 11, + "endLine": 187, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172757,10 +172898,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 210, - "startColumn": 9, - "endLine": 210, - "endColumn": 15, + "startLine": 211, + "startColumn": 11, + "endLine": 211, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172827,10 +172968,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 234, - "startColumn": 9, - "endLine": 234, - "endColumn": 15, + "startLine": 235, + "startColumn": 11, + "endLine": 235, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172897,10 +173038,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 258, - "startColumn": 9, - "endLine": 258, - "endColumn": 15, + "startLine": 259, + "startColumn": 11, + "endLine": 259, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -172967,10 +173108,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 282, - "startColumn": 9, - "endLine": 282, - "endColumn": 15, + "startLine": 283, + "startColumn": 11, + "endLine": 283, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -173037,10 +173178,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 306, - "startColumn": 9, - "endLine": 306, - "endColumn": 15, + "startLine": 307, + "startColumn": 11, + "endLine": 307, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -173107,10 +173248,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 379, - "startColumn": 9, - "endLine": 379, - "endColumn": 15, + "startLine": 380, + "startColumn": 11, + "endLine": 380, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -173154,10 +173295,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 409, - "startColumn": 9, - "endLine": 409, - "endColumn": 15, + "startLine": 410, + "startColumn": 11, + "endLine": 410, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-appsync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -173224,10 +173365,10 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 433, - "startColumn": 9, - "endLine": 433, - "endColumn": 15, + "startLine": 434, + "startColumn": 11, + "endLine": 434, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -173468,13 +173609,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 165, - "startColumn": 7, - "endLine": 165, - "endColumn": 17, + "startLine": 167, + "startColumn": 9, + "endLine": 167, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -173556,9 +173697,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 189, - "startColumn": 9, - "endLine": 189, + "startLine": 190, + "startColumn": 11, + "endLine": 190, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -173601,10 +173742,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 196, - "startColumn": 9, - "endLine": 196, - "endColumn": 19, + "startLine": 197, + "startColumn": 11, + "endLine": 197, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -173624,9 +173765,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 228, - "startColumn": 9, - "endLine": 228, + "startLine": 229, + "startColumn": 11, + "endLine": 229, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -173648,9 +173789,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 247, - "startColumn": 9, - "endLine": 247, + "startLine": 248, + "startColumn": 11, + "endLine": 248, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -173672,9 +173813,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 270, - "startColumn": 9, - "endLine": 270, + "startLine": 271, + "startColumn": 11, + "endLine": 271, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2/tree/master/aws-apigatewayv2-stage.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -173878,13 +174019,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 87, - "startColumn": 7, - "endLine": 87, - "endColumn": 17, + "startLine": 88, + "startColumn": 9, + "endLine": 88, + "endColumn": 56, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -173898,13 +174039,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 195, - "startColumn": 7, - "endLine": 195, - "endColumn": 17, + "startLine": 197, + "startColumn": 9, + "endLine": 197, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -173965,9 +174106,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 253, - "startColumn": 9, - "endLine": 253, + "startLine": 254, + "startColumn": 11, + "endLine": 254, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2/tree/master/aws-apigatewayv2-stage.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -174012,9 +174153,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 266, - "startColumn": 9, - "endLine": 266, + "startLine": 267, + "startColumn": 11, + "endLine": 267, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -174036,9 +174177,9 @@ }, "propertyPath": "Properties.ApiId", "category": "Best Practice", - "startLine": 294, - "startColumn": 9, - "endLine": 294, + "startLine": 295, + "startColumn": 11, + "endLine": 295, "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigatewayv2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -174259,13 +174400,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 87, - "startColumn": 7, - "endLine": 87, - "endColumn": 17, + "startLine": 88, + "startColumn": 9, + "endLine": 88, + "endColumn": 46, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -174281,10 +174422,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 164, - "startColumn": 9, - "endLine": 164, - "endColumn": 19, + "startLine": 165, + "startColumn": 11, + "endLine": 165, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174305,10 +174446,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 180, - "startColumn": 9, - "endLine": 180, - "endColumn": 19, + "startLine": 181, + "startColumn": 11, + "endLine": 181, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174352,10 +174493,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 210, - "startColumn": 9, - "endLine": 210, - "endColumn": 18, + "startLine": 211, + "startColumn": 11, + "endLine": 211, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174399,10 +174540,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 217, - "startColumn": 9, - "endLine": 217, - "endColumn": 19, + "startLine": 218, + "startColumn": 11, + "endLine": 218, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174445,9 +174586,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 229, - "startColumn": 9, - "endLine": 229, + "startLine": 230, + "startColumn": 11, + "endLine": 230, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174490,10 +174631,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 236, - "startColumn": 9, - "endLine": 236, - "endColumn": 19, + "startLine": 237, + "startColumn": 11, + "endLine": 237, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -174535,9 +174676,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 273, - "startColumn": 9, - "endLine": 273, + "startLine": 274, + "startColumn": 11, + "endLine": 274, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174580,10 +174721,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 280, - "startColumn": 9, - "endLine": 280, - "endColumn": 19, + "startLine": 281, + "startColumn": 11, + "endLine": 281, + "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -174626,10 +174767,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 313, - "startColumn": 9, - "endLine": 313, - "endColumn": 20, + "startLine": 314, + "startColumn": 11, + "endLine": 314, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174650,10 +174791,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 316, - "startColumn": 9, - "endLine": 316, - "endColumn": 19, + "startLine": 317, + "startColumn": 11, + "endLine": 317, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174817,10 +174958,10 @@ }, "propertyPath": "Properties.ResourceArn", "category": "Best Practice", - "startLine": 105, - "startColumn": 9, - "endLine": 105, - "endColumn": 21, + "startLine": 106, + "startColumn": 11, + "endLine": 106, + "endColumn": 20, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-wafv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174841,10 +174982,10 @@ }, "propertyPath": "Properties.WebACLArn", "category": "Best Practice", - "startLine": 124, - "startColumn": 9, - "endLine": 124, - "endColumn": 19, + "startLine": 125, + "startColumn": 11, + "endLine": 125, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-wafv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -174944,13 +175085,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 176, - "startColumn": 7, - "endLine": 176, - "endColumn": 17, + "startLine": 178, + "startColumn": 9, + "endLine": 178, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -175010,9 +175151,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 190, - "startColumn": 9, - "endLine": 190, + "startLine": 191, + "startColumn": 11, + "endLine": 191, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175055,10 +175196,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 197, - "startColumn": 9, - "endLine": 197, - "endColumn": 19, + "startLine": 198, + "startColumn": 11, + "endLine": 198, + "endColumn": 27, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -175101,10 +175242,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 209, - "startColumn": 9, - "endLine": 209, - "endColumn": 18, + "startLine": 210, + "startColumn": 11, + "endLine": 210, + "endColumn": 27, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175125,10 +175266,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 212, - "startColumn": 9, - "endLine": 212, - "endColumn": 18, + "startLine": 213, + "startColumn": 11, + "endLine": 213, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175149,10 +175290,10 @@ }, "propertyPath": "Properties.Region", "category": "Best Practice", - "startLine": 218, - "startColumn": 9, - "endLine": 218, - "endColumn": 16, + "startLine": 219, + "startColumn": 11, + "endLine": 219, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175292,13 +175433,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 117, - "startColumn": 7, - "endLine": 117, - "endColumn": 17, + "startLine": 119, + "startColumn": 9, + "endLine": 119, + "endColumn": 46, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -175336,9 +175477,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 131, - "startColumn": 9, - "endLine": 131, + "startLine": 132, + "startColumn": 11, + "endLine": 132, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175381,10 +175522,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 138, - "startColumn": 9, - "endLine": 138, - "endColumn": 19, + "startLine": 139, + "startColumn": 11, + "endLine": 139, + "endColumn": 27, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -175427,10 +175568,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 150, - "startColumn": 9, - "endLine": 150, - "endColumn": 18, + "startLine": 151, + "startColumn": 11, + "endLine": 151, + "endColumn": 27, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175451,10 +175592,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 153, - "startColumn": 9, - "endLine": 153, - "endColumn": 18, + "startLine": 154, + "startColumn": 11, + "endLine": 154, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175475,10 +175616,10 @@ }, "propertyPath": "Properties.Region", "category": "Best Practice", - "startLine": 159, - "startColumn": 9, - "endLine": 159, - "endColumn": 16, + "startLine": 160, + "startColumn": 11, + "endLine": 160, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175621,13 +175762,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 147, - "startColumn": 7, - "endLine": 147, - "endColumn": 17, + "startLine": 149, + "startColumn": 9, + "endLine": 149, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -175641,13 +175782,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 337, - "startColumn": 7, - "endLine": 337, - "endColumn": 17, + "startLine": 339, + "startColumn": 9, + "endLine": 339, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -175740,9 +175881,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 161, - "startColumn": 9, - "endLine": 161, + "startLine": 162, + "startColumn": 11, + "endLine": 162, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175785,10 +175926,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 168, - "startColumn": 9, - "endLine": 168, - "endColumn": 19, + "startLine": 169, + "startColumn": 11, + "endLine": 169, + "endColumn": 27, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -175831,10 +175972,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 180, - "startColumn": 9, - "endLine": 180, - "endColumn": 18, + "startLine": 181, + "startColumn": 11, + "endLine": 181, + "endColumn": 27, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175855,10 +175996,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 183, - "startColumn": 9, - "endLine": 183, - "endColumn": 18, + "startLine": 184, + "startColumn": 11, + "endLine": 184, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175879,10 +176020,10 @@ }, "propertyPath": "Properties.Region", "category": "Best Practice", - "startLine": 189, - "startColumn": 9, - "endLine": 189, - "endColumn": 16, + "startLine": 190, + "startColumn": 11, + "endLine": 190, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -175903,10 +176044,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 353, - "startColumn": 9, - "endLine": 353, - "endColumn": 24, + "startLine": 354, + "startColumn": 11, + "endLine": 354, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -176128,13 +176269,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 140, - "startColumn": 7, - "endLine": 140, - "endColumn": 17, + "startLine": 142, + "startColumn": 9, + "endLine": 142, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -176148,13 +176289,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 314, - "startColumn": 7, - "endLine": 314, - "endColumn": 17, + "startLine": 316, + "startColumn": 9, + "endLine": 316, + "endColumn": 57, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -176192,9 +176333,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 154, - "startColumn": 9, - "endLine": 154, + "startLine": 155, + "startColumn": 11, + "endLine": 155, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176237,10 +176378,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 161, - "startColumn": 9, - "endLine": 161, - "endColumn": 19, + "startLine": 162, + "startColumn": 11, + "endLine": 162, + "endColumn": 27, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -176283,10 +176424,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 173, - "startColumn": 9, - "endLine": 173, - "endColumn": 18, + "startLine": 174, + "startColumn": 11, + "endLine": 174, + "endColumn": 27, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176307,10 +176448,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 176, - "startColumn": 9, - "endLine": 176, - "endColumn": 18, + "startLine": 177, + "startColumn": 11, + "endLine": 177, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176331,10 +176472,10 @@ }, "propertyPath": "Properties.Region", "category": "Best Practice", - "startLine": 182, - "startColumn": 9, - "endLine": 182, - "endColumn": 16, + "startLine": 183, + "startColumn": 11, + "endLine": 183, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176377,9 +176518,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 328, - "startColumn": 9, - "endLine": 328, + "startLine": 329, + "startColumn": 11, + "endLine": 329, "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176422,10 +176563,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 335, - "startColumn": 9, - "endLine": 335, - "endColumn": 19, + "startLine": 336, + "startColumn": 11, + "endLine": 336, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -176468,10 +176609,10 @@ }, "propertyPath": "Properties.TopicArn", "category": "Best Practice", - "startLine": 347, - "startColumn": 9, - "endLine": 347, - "endColumn": 18, + "startLine": 348, + "startColumn": 11, + "endLine": 348, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176492,10 +176633,10 @@ }, "propertyPath": "Properties.Endpoint", "category": "Best Practice", - "startLine": 350, - "startColumn": 9, - "endLine": 350, - "endColumn": 18, + "startLine": 351, + "startColumn": 11, + "endLine": 351, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176636,10 +176777,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 75, - "startColumn": 9, - "endLine": 75, - "endColumn": 19, + "startLine": 76, + "startColumn": 11, + "endLine": 76, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176660,10 +176801,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 94, - "startColumn": 9, - "endLine": 94, - "endColumn": 19, + "startLine": 95, + "startColumn": 11, + "endLine": 95, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176730,10 +176871,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 120, - "startColumn": 9, - "endLine": 120, - "endColumn": 20, + "startLine": 121, + "startColumn": 11, + "endLine": 121, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176754,10 +176895,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 126, - "startColumn": 9, - "endLine": 126, - "endColumn": 19, + "startLine": 127, + "startColumn": 11, + "endLine": 127, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176778,10 +176919,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 215, - "startColumn": 9, - "endLine": 215, - "endColumn": 18, + "startLine": 216, + "startColumn": 11, + "endLine": 216, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176825,10 +176966,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 222, - "startColumn": 9, - "endLine": 222, - "endColumn": 19, + "startLine": 223, + "startColumn": 11, + "endLine": 223, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176872,10 +177013,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 234, - "startColumn": 9, - "endLine": 234, - "endColumn": 20, + "startLine": 235, + "startColumn": 11, + "endLine": 235, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176896,10 +177037,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 237, - "startColumn": 9, - "endLine": 237, - "endColumn": 19, + "startLine": 238, + "startColumn": 11, + "endLine": 238, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176920,10 +177061,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 326, - "startColumn": 9, - "endLine": 326, - "endColumn": 19, + "startLine": 327, + "startColumn": 11, + "endLine": 327, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -176990,10 +177131,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 349, - "startColumn": 9, - "endLine": 349, - "endColumn": 19, + "startLine": 350, + "startColumn": 11, + "endLine": 350, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177201,13 +177342,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 55, - "startColumn": 4, - "endLine": 55, - "endColumn": 14, + "startLine": 56, + "startColumn": 5, + "endLine": 56, + "endColumn": 38, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -177223,10 +177364,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 133, - "startColumn": 5, - "endLine": 133, - "endColumn": 15, + "startLine": 134, + "startColumn": 6, + "endLine": 134, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177247,10 +177388,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 153, - "startColumn": 5, - "endLine": 153, - "endColumn": 15, + "startLine": 154, + "startColumn": 6, + "endLine": 154, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177294,10 +177435,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 168, - "startColumn": 5, - "endLine": 168, - "endColumn": 14, + "startLine": 169, + "startColumn": 6, + "endLine": 169, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177341,10 +177482,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 175, - "startColumn": 5, - "endLine": 175, - "endColumn": 15, + "startLine": 176, + "startColumn": 6, + "endLine": 176, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177388,10 +177529,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 215, - "startColumn": 5, - "endLine": 215, - "endColumn": 16, + "startLine": 216, + "startColumn": 6, + "endLine": 216, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177412,10 +177553,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 218, - "startColumn": 5, - "endLine": 218, - "endColumn": 15, + "startLine": 219, + "startColumn": 6, + "endLine": 219, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177458,10 +177599,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 230, - "startColumn": 5, - "endLine": 230, - "endColumn": 18, + "startLine": 231, + "startColumn": 6, + "endLine": 231, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -177503,9 +177644,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 237, - "startColumn": 5, - "endLine": 237, + "startLine": 238, + "startColumn": 6, + "endLine": 238, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177548,10 +177689,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 274, - "startColumn": 5, - "endLine": 274, - "endColumn": 18, + "startLine": 275, + "startColumn": 6, + "endLine": 275, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -177593,9 +177734,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 281, - "startColumn": 5, - "endLine": 281, + "startLine": 282, + "startColumn": 6, + "endLine": 282, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177639,10 +177780,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 358, - "startColumn": 5, - "endLine": 358, - "endColumn": 16, + "startLine": 359, + "startColumn": 6, + "endLine": 359, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177663,10 +177804,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 361, - "startColumn": 5, - "endLine": 361, - "endColumn": 15, + "startLine": 362, + "startColumn": 6, + "endLine": 362, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -177874,13 +178015,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 79, - "startColumn": 4, - "endLine": 79, - "endColumn": 14, + "startLine": 81, + "startColumn": 5, + "endLine": 81, + "endColumn": 44, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -177894,13 +178035,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 142, - "startColumn": 4, - "endLine": 142, - "endColumn": 14, + "startLine": 143, + "startColumn": 5, + "endLine": 143, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -177914,13 +178055,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 252, - "startColumn": 4, - "endLine": 252, - "endColumn": 14, + "startLine": 253, + "startColumn": 5, + "endLine": 253, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -177958,10 +178099,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 182, - "startColumn": 5, - "endLine": 182, - "endColumn": 18, + "startLine": 183, + "startColumn": 6, + "endLine": 183, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178003,10 +178144,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 189, - "startColumn": 5, - "endLine": 189, - "endColumn": 15, + "startLine": 190, + "startColumn": 6, + "endLine": 190, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178048,10 +178189,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 292, - "startColumn": 5, - "endLine": 292, - "endColumn": 18, + "startLine": 293, + "startColumn": 6, + "endLine": 293, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178093,10 +178234,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 299, - "startColumn": 5, - "endLine": 299, - "endColumn": 15, + "startLine": 300, + "startColumn": 6, + "endLine": 300, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178116,10 +178257,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 551, - "startColumn": 5, - "endLine": 551, - "endColumn": 15, + "startLine": 552, + "startColumn": 6, + "endLine": 552, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178140,10 +178281,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 570, - "startColumn": 5, - "endLine": 570, - "endColumn": 15, + "startLine": 571, + "startColumn": 6, + "endLine": 571, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178187,10 +178328,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 585, - "startColumn": 5, - "endLine": 585, - "endColumn": 14, + "startLine": 586, + "startColumn": 6, + "endLine": 586, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178234,10 +178375,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 592, - "startColumn": 5, - "endLine": 592, - "endColumn": 15, + "startLine": 593, + "startColumn": 6, + "endLine": 593, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178280,10 +178421,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 604, - "startColumn": 5, - "endLine": 604, - "endColumn": 18, + "startLine": 605, + "startColumn": 6, + "endLine": 605, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178325,9 +178466,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 611, - "startColumn": 5, - "endLine": 611, + "startLine": 612, + "startColumn": 6, + "endLine": 612, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178370,10 +178511,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 648, - "startColumn": 5, - "endLine": 648, - "endColumn": 18, + "startLine": 649, + "startColumn": 6, + "endLine": 649, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -178415,9 +178556,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 655, - "startColumn": 5, - "endLine": 655, + "startLine": 656, + "startColumn": 6, + "endLine": 656, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178461,10 +178602,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 716, - "startColumn": 5, - "endLine": 716, - "endColumn": 16, + "startLine": 717, + "startColumn": 6, + "endLine": 717, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178485,10 +178626,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 719, - "startColumn": 5, - "endLine": 719, - "endColumn": 15, + "startLine": 720, + "startColumn": 6, + "endLine": 720, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178847,13 +178988,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 344, - "startColumn": 4, - "endLine": 344, - "endColumn": 14, + "startLine": 346, + "startColumn": 5, + "endLine": 346, + "endColumn": 41, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -178888,10 +179029,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 113, - "startColumn": 5, - "endLine": 113, - "endColumn": 15, + "startLine": 114, + "startColumn": 6, + "endLine": 114, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178912,10 +179053,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 133, - "startColumn": 5, - "endLine": 133, - "endColumn": 15, + "startLine": 134, + "startColumn": 6, + "endLine": 134, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -178982,10 +179123,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 153, - "startColumn": 5, - "endLine": 153, - "endColumn": 16, + "startLine": 154, + "startColumn": 6, + "endLine": 154, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179006,10 +179147,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 159, - "startColumn": 5, - "endLine": 159, - "endColumn": 15, + "startLine": 160, + "startColumn": 6, + "endLine": 160, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179030,10 +179171,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 170, - "startColumn": 5, - "endLine": 170, - "endColumn": 14, + "startLine": 171, + "startColumn": 6, + "endLine": 171, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179077,10 +179218,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 177, - "startColumn": 5, - "endLine": 177, - "endColumn": 15, + "startLine": 178, + "startColumn": 6, + "endLine": 178, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179124,10 +179265,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 246, - "startColumn": 5, - "endLine": 246, - "endColumn": 16, + "startLine": 247, + "startColumn": 6, + "endLine": 247, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179148,10 +179289,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 15, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -179172,10 +179313,10 @@ }, "propertyPath": "Properties.EventSourceArn", "category": "Best Practice", - "startLine": 358, - "startColumn": 5, - "endLine": 358, - "endColumn": 20, + "startLine": 359, + "startColumn": 6, + "endLine": 359, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -179419,13 +179560,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 172, - "startColumn": 4, - "endLine": 172, - "endColumn": 14, + "startLine": 173, + "startColumn": 5, + "endLine": 173, + "endColumn": 65, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -179439,13 +179580,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 511, - "startColumn": 4, - "endLine": 511, - "endColumn": 14, + "startLine": 513, + "startColumn": 5, + "endLine": 513, + "endColumn": 82, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -179461,10 +179602,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 6, - "startColumn": 5, - "endLine": 6, - "endColumn": 16, + "startLine": 7, + "startColumn": 6, + "endLine": 7, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -179483,10 +179624,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 41, - "startColumn": 5, - "endLine": 41, - "endColumn": 12, + "startLine": 42, + "startColumn": 6, + "endLine": 42, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -179506,10 +179647,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 184, - "startColumn": 5, - "endLine": 184, - "endColumn": 16, + "startLine": 185, + "startColumn": 6, + "endLine": 185, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -179528,10 +179669,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 215, - "startColumn": 5, - "endLine": 215, - "endColumn": 12, + "startLine": 216, + "startColumn": 6, + "endLine": 216, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -180284,10 +180425,10 @@ }, "propertyPath": "Properties.DestinationLocationArn", "category": "Best Practice", - "startLine": 37, - "startColumn": 5, - "endLine": 37, - "endColumn": 28, + "startLine": 38, + "startColumn": 6, + "endLine": 38, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-datasync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180308,10 +180449,10 @@ }, "propertyPath": "Properties.SourceLocationArn", "category": "Best Practice", - "startLine": 43, - "startColumn": 5, - "endLine": 43, - "endColumn": 23, + "startLine": 44, + "startColumn": 6, + "endLine": 44, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-datasync.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180453,10 +180594,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 20, - "startColumn": 5, - "endLine": 20, - "endColumn": 11, + "startLine": 21, + "startColumn": 6, + "endLine": 21, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -180499,10 +180640,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 33, - "startColumn": 5, - "endLine": 33, - "endColumn": 13, + "startLine": 34, + "startColumn": 6, + "endLine": 34, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180546,10 +180687,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 40, - "startColumn": 5, - "endLine": 40, - "endColumn": 27, + "startLine": 41, + "startColumn": 6, + "endLine": 41, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180593,10 +180734,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 24, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180617,10 +180758,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 97, - "startColumn": 5, - "endLine": 97, - "endColumn": 13, + "startLine": 98, + "startColumn": 6, + "endLine": 98, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180709,10 +180850,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 116, - "startColumn": 5, - "endLine": 116, - "endColumn": 14, + "startLine": 117, + "startColumn": 6, + "endLine": 117, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180732,10 +180873,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 130, - "startColumn": 5, - "endLine": 130, - "endColumn": 29, + "startLine": 131, + "startColumn": 6, + "endLine": 131, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -180821,10 +180962,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 186, - "startColumn": 5, - "endLine": 186, - "endColumn": 11, + "startLine": 187, + "startColumn": 6, + "endLine": 187, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -180867,10 +181008,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 199, - "startColumn": 5, - "endLine": 199, - "endColumn": 13, + "startLine": 200, + "startColumn": 6, + "endLine": 200, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -180914,10 +181055,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 206, - "startColumn": 5, - "endLine": 206, - "endColumn": 27, + "startLine": 207, + "startColumn": 6, + "endLine": 207, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181005,10 +181146,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 239, - "startColumn": 5, - "endLine": 239, - "endColumn": 11, + "startLine": 240, + "startColumn": 6, + "endLine": 240, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181074,10 +181215,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 290, - "startColumn": 5, - "endLine": 290, - "endColumn": 21, + "startLine": 291, + "startColumn": 6, + "endLine": 291, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181164,10 +181305,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 312, - "startColumn": 5, - "endLine": 312, - "endColumn": 11, + "startLine": 313, + "startColumn": 6, + "endLine": 313, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181351,10 +181492,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181395,10 +181536,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181418,10 +181559,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181442,10 +181583,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181469,10 +181610,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181519,10 +181660,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181543,10 +181684,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181566,10 +181707,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181589,10 +181730,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181633,10 +181774,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181656,10 +181797,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181680,10 +181821,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181707,10 +181848,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181757,10 +181898,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181781,10 +181922,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 234, - "startColumn": 5, - "endLine": 234, - "endColumn": 22, + "startLine": 235, + "startColumn": 6, + "endLine": 235, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181825,10 +181966,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 11, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -181848,10 +181989,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 275, - "startColumn": 5, - "endLine": 275, - "endColumn": 11, + "startLine": 276, + "startColumn": 6, + "endLine": 276, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181872,10 +182013,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 286, - "startColumn": 5, - "endLine": 286, - "endColumn": 18, + "startLine": 287, + "startColumn": 6, + "endLine": 287, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181899,10 +182040,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 289, - "startColumn": 5, - "endLine": 289, - "endColumn": 14, + "startLine": 290, + "startColumn": 6, + "endLine": 290, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181949,10 +182090,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 304, - "startColumn": 5, - "endLine": 304, - "endColumn": 18, + "startLine": 305, + "startColumn": 6, + "endLine": 305, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -181973,10 +182114,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 315, - "startColumn": 5, - "endLine": 315, - "endColumn": 22, + "startLine": 316, + "startColumn": 6, + "endLine": 316, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182017,10 +182158,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 339, - "startColumn": 5, - "endLine": 339, - "endColumn": 11, + "startLine": 340, + "startColumn": 6, + "endLine": 340, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182040,10 +182181,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 356, - "startColumn": 5, - "endLine": 356, - "endColumn": 11, + "startLine": 357, + "startColumn": 6, + "endLine": 357, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182064,10 +182205,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 367, - "startColumn": 5, - "endLine": 367, - "endColumn": 18, + "startLine": 368, + "startColumn": 6, + "endLine": 368, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182091,10 +182232,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 370, - "startColumn": 5, - "endLine": 370, - "endColumn": 14, + "startLine": 371, + "startColumn": 6, + "endLine": 371, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182141,10 +182282,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 385, - "startColumn": 5, - "endLine": 385, - "endColumn": 18, + "startLine": 386, + "startColumn": 6, + "endLine": 386, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182165,10 +182306,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 413, - "startColumn": 5, - "endLine": 413, - "endColumn": 11, + "startLine": 414, + "startColumn": 6, + "endLine": 414, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182314,10 +182455,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 11, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182337,10 +182478,10 @@ }, "propertyPath": "Properties.SecretId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182360,10 +182501,10 @@ }, "propertyPath": "Properties.DBSubnetGroupName", "category": "Best Practice", - "startLine": 97, - "startColumn": 5, - "endLine": 97, - "endColumn": 23, + "startLine": 98, + "startColumn": 6, + "endLine": 98, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182407,10 +182548,10 @@ }, "propertyPath": "Properties.MasterUsername", "category": "Best Practice", - "startLine": 114, - "startColumn": 5, - "endLine": 114, - "endColumn": 20, + "startLine": 115, + "startColumn": 6, + "endLine": 115, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -182643,10 +182784,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 33, - "startColumn": 5, - "endLine": 33, - "endColumn": 11, + "startLine": 34, + "startColumn": 6, + "endLine": 34, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182750,13 +182891,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 125, - "startColumn": 4, - "endLine": 125, - "endColumn": 14, + "startLine": 127, + "startColumn": 5, + "endLine": 127, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -182770,13 +182911,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 248, - "startColumn": 4, - "endLine": 248, - "endColumn": 14, + "startLine": 250, + "startColumn": 5, + "endLine": 250, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -182836,10 +182977,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 293, - "startColumn": 5, - "endLine": 293, - "endColumn": 18, + "startLine": 294, + "startColumn": 6, + "endLine": 294, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182881,10 +183022,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 15, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182926,10 +183067,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 315, - "startColumn": 5, - "endLine": 315, - "endColumn": 18, + "startLine": 316, + "startColumn": 6, + "endLine": 316, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -182971,10 +183112,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 322, - "startColumn": 5, - "endLine": 322, - "endColumn": 15, + "startLine": 323, + "startColumn": 6, + "endLine": 323, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183151,13 +183292,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 925, - "startColumn": 4, - "endLine": 925, - "endColumn": 14, + "startLine": 927, + "startColumn": 5, + "endLine": 927, + "endColumn": 60, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -183257,10 +183398,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183301,10 +183442,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183324,10 +183465,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183348,10 +183489,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183375,10 +183516,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183425,10 +183566,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183449,10 +183590,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183472,10 +183613,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183495,10 +183636,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183539,10 +183680,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183562,10 +183703,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183586,10 +183727,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183613,10 +183754,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183663,10 +183804,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183687,10 +183828,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183710,10 +183851,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183733,10 +183874,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183777,10 +183918,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183800,10 +183941,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183824,10 +183965,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183851,10 +183992,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183901,10 +184042,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -183925,10 +184066,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183969,10 +184110,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -183992,10 +184133,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184016,10 +184157,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184043,10 +184184,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184093,10 +184234,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184117,10 +184258,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184144,10 +184285,10 @@ }, "propertyPath": "Properties.ServiceName", "category": "Best Practice", - "startLine": 474, - "startColumn": 5, - "endLine": 474, - "endColumn": 17, + "startLine": 475, + "startColumn": 6, + "endLine": 475, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184188,10 +184329,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 493, - "startColumn": 5, - "endLine": 493, - "endColumn": 11, + "startLine": 494, + "startColumn": 6, + "endLine": 494, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184233,10 +184374,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 527, - "startColumn": 5, - "endLine": 527, - "endColumn": 11, + "startLine": 528, + "startColumn": 6, + "endLine": 528, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184256,10 +184397,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 605, - "startColumn": 5, - "endLine": 605, - "endColumn": 22, + "startLine": 606, + "startColumn": 6, + "endLine": 606, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184279,10 +184420,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 616, - "startColumn": 5, - "endLine": 616, - "endColumn": 13, + "startLine": 617, + "startColumn": 6, + "endLine": 617, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184348,10 +184489,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 628, - "startColumn": 5, - "endLine": 628, - "endColumn": 14, + "startLine": 629, + "startColumn": 6, + "endLine": 629, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184372,10 +184513,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 637, - "startColumn": 5, - "endLine": 637, - "endColumn": 14, + "startLine": 638, + "startColumn": 6, + "endLine": 638, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184439,10 +184580,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 684, - "startColumn": 5, - "endLine": 684, - "endColumn": 11, + "startLine": 685, + "startColumn": 6, + "endLine": 685, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184462,10 +184603,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 734, - "startColumn": 5, - "endLine": 734, - "endColumn": 22, + "startLine": 735, + "startColumn": 6, + "endLine": 735, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184508,10 +184649,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 755, - "startColumn": 5, - "endLine": 755, - "endColumn": 13, + "startLine": 756, + "startColumn": 6, + "endLine": 756, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184600,10 +184741,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 768, - "startColumn": 5, - "endLine": 768, - "endColumn": 14, + "startLine": 769, + "startColumn": 6, + "endLine": 769, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184624,10 +184765,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 777, - "startColumn": 5, - "endLine": 777, - "endColumn": 14, + "startLine": 778, + "startColumn": 6, + "endLine": 778, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184669,10 +184810,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 829, - "startColumn": 5, - "endLine": 829, - "endColumn": 18, + "startLine": 830, + "startColumn": 6, + "endLine": 830, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184714,10 +184855,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 836, - "startColumn": 5, - "endLine": 836, - "endColumn": 15, + "startLine": 837, + "startColumn": 6, + "endLine": 837, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -184760,10 +184901,10 @@ }, "propertyPath": "Properties.BackupPlanId", "category": "Best Practice", - "startLine": 1011, - "startColumn": 5, - "endLine": 1011, - "endColumn": 18, + "startLine": 1012, + "startColumn": 6, + "endLine": 1012, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -184934,13 +185075,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 589, - "startColumn": 4, - "endLine": 589, - "endColumn": 14, + "startLine": 590, + "startColumn": 5, + "endLine": 590, + "endColumn": 66, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -185000,10 +185141,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185044,10 +185185,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185067,10 +185208,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185091,10 +185232,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185118,10 +185259,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185168,10 +185309,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185192,10 +185333,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185215,10 +185356,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185238,10 +185379,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185282,10 +185423,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185305,10 +185446,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185329,10 +185470,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185356,10 +185497,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185406,10 +185547,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185430,10 +185571,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185453,10 +185594,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185476,10 +185617,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185520,10 +185661,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185543,10 +185684,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185567,10 +185708,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185594,10 +185735,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185644,10 +185785,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185668,10 +185809,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185712,10 +185853,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -185735,10 +185876,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185759,10 +185900,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185786,10 +185927,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185836,10 +185977,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185860,10 +186001,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -185985,13 +186126,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 163, - "startColumn": 4, - "endLine": 163, - "endColumn": 14, + "startLine": 165, + "startColumn": 5, + "endLine": 165, + "endColumn": 85, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -186197,10 +186338,10 @@ }, "propertyPath": "Properties.Vpc", "category": "Best Practice", - "startLine": 30, - "startColumn": 5, - "endLine": 30, - "endColumn": 9, + "startLine": 31, + "startColumn": 6, + "endLine": 31, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -186220,10 +186361,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 41, - "startColumn": 5, - "endLine": 41, - "endColumn": 18, + "startLine": 42, + "startColumn": 6, + "endLine": 42, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -186266,10 +186407,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 238, - "startColumn": 5, - "endLine": 238, - "endColumn": 11, + "startLine": 239, + "startColumn": 6, + "endLine": 239, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -186312,10 +186453,10 @@ }, "propertyPath": "Properties.GroupId", "category": "Best Practice", - "startLine": 251, - "startColumn": 5, - "endLine": 251, - "endColumn": 13, + "startLine": 252, + "startColumn": 6, + "endLine": 252, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -186359,10 +186500,10 @@ }, "propertyPath": "Properties.SourceSecurityGroupId", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 27, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -186452,10 +186593,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 303, - "startColumn": 5, - "endLine": 303, - "endColumn": 22, + "startLine": 304, + "startColumn": 6, + "endLine": 304, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -186568,9 +186709,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 315, - "startColumn": 5, - "endLine": 315, + "startLine": 316, + "startColumn": 6, + "endLine": 316, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -186638,10 +186779,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 367, - "startColumn": 5, - "endLine": 367, - "endColumn": 22, + "startLine": 368, + "startColumn": 6, + "endLine": 368, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -186754,9 +186895,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 379, - "startColumn": 5, - "endLine": 379, + "startLine": 380, + "startColumn": 6, + "endLine": 380, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -186778,10 +186919,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 401, - "startColumn": 5, - "endLine": 401, - "endColumn": 13, + "startLine": 402, + "startColumn": 6, + "endLine": 402, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -186845,10 +186986,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 473, - "startColumn": 5, - "endLine": 473, - "endColumn": 13, + "startLine": 474, + "startColumn": 6, + "endLine": 474, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -186934,10 +187075,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 550, - "startColumn": 5, - "endLine": 550, - "endColumn": 11, + "startLine": 551, + "startColumn": 6, + "endLine": 551, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187045,10 +187186,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 581, - "startColumn": 5, - "endLine": 581, - "endColumn": 11, + "startLine": 582, + "startColumn": 6, + "endLine": 582, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187114,10 +187255,10 @@ }, "propertyPath": "Properties.LoadBalancerArn", "category": "Best Practice", - "startLine": 636, - "startColumn": 5, - "endLine": 636, - "endColumn": 21, + "startLine": 637, + "startColumn": 6, + "endLine": 637, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187138,10 +187279,10 @@ }, "propertyPath": "Properties.ListenerArn", "category": "Best Practice", - "startLine": 667, - "startColumn": 5, - "endLine": 667, - "endColumn": 17, + "startLine": 668, + "startColumn": 6, + "endLine": 668, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticloadbalancingv2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187602,10 +187743,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187646,10 +187787,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187669,10 +187810,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187693,10 +187834,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187720,10 +187861,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187770,10 +187911,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187794,10 +187935,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 108, - "startColumn": 5, - "endLine": 108, - "endColumn": 22, + "startLine": 109, + "startColumn": 6, + "endLine": 109, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187838,10 +187979,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 132, - "startColumn": 5, - "endLine": 132, - "endColumn": 11, + "startLine": 133, + "startColumn": 6, + "endLine": 133, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -187861,10 +188002,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 149, - "startColumn": 5, - "endLine": 149, - "endColumn": 11, + "startLine": 150, + "startColumn": 6, + "endLine": 150, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187885,10 +188026,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 160, - "startColumn": 5, - "endLine": 160, - "endColumn": 18, + "startLine": 161, + "startColumn": 6, + "endLine": 161, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187912,10 +188053,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 163, - "startColumn": 5, - "endLine": 163, - "endColumn": 14, + "startLine": 164, + "startColumn": 6, + "endLine": 164, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187962,10 +188103,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 178, - "startColumn": 5, - "endLine": 178, - "endColumn": 18, + "startLine": 179, + "startColumn": 6, + "endLine": 179, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -187986,10 +188127,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 209, - "startColumn": 5, - "endLine": 209, - "endColumn": 11, + "startLine": 210, + "startColumn": 6, + "endLine": 210, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -188101,10 +188242,10 @@ }, "propertyPath": "Properties.LogUri", "category": "Best Practice", - "startLine": 366, - "startColumn": 5, - "endLine": 366, - "endColumn": 12, + "startLine": 367, + "startColumn": 6, + "endLine": 367, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -188167,10 +188308,10 @@ }, "propertyPath": "Properties.ServiceRole", "category": "Best Practice", - "startLine": 380, - "startColumn": 5, - "endLine": 380, - "endColumn": 17, + "startLine": 381, + "startColumn": 6, + "endLine": 381, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -188336,13 +188477,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 87, - "startColumn": 4, - "endLine": 87, - "endColumn": 14, + "startLine": 89, + "startColumn": 5, + "endLine": 89, + "endColumn": 35, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -188356,13 +188497,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 204, - "startColumn": 4, - "endLine": 204, - "endColumn": 14, + "startLine": 206, + "startColumn": 5, + "endLine": 206, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -188376,13 +188517,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 324, - "startColumn": 4, - "endLine": 324, - "endColumn": 14, + "startLine": 326, + "startColumn": 5, + "endLine": 326, + "endColumn": 56, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -188478,10 +188619,10 @@ }, "propertyPath": "Properties.ServiceToken", "category": "Best Practice", - "startLine": 338, - "startColumn": 5, - "endLine": 338, - "endColumn": 18, + "startLine": 339, + "startColumn": 6, + "endLine": 339, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -188545,9 +188686,9 @@ }, "propertyPath": "Properties.Principal", "category": "Best Practice", - "startLine": 417, - "startColumn": 5, - "endLine": 417, + "startLine": 418, + "startColumn": 6, + "endLine": 418, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -188568,9 +188709,9 @@ }, "propertyPath": "Properties.Principal", "category": "Best Practice", - "startLine": 447, - "startColumn": 5, - "endLine": 447, + "startLine": 448, + "startColumn": 6, + "endLine": 448, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -188877,13 +189018,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 53, - "startColumn": 4, - "endLine": 53, - "endColumn": 14, + "startLine": 54, + "startColumn": 5, + "endLine": 54, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -188921,10 +189062,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 85, - "startColumn": 5, - "endLine": 85, - "endColumn": 18, + "startLine": 86, + "startColumn": 6, + "endLine": 86, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -188966,10 +189107,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 92, - "startColumn": 5, - "endLine": 92, - "endColumn": 15, + "startLine": 93, + "startColumn": 6, + "endLine": 93, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -189067,13 +189208,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 63, - "startColumn": 4, - "endLine": 63, - "endColumn": 14, + "startLine": 64, + "startColumn": 5, + "endLine": 64, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189214,13 +189355,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 85, - "startColumn": 4, - "endLine": 85, - "endColumn": 14, + "startLine": 86, + "startColumn": 5, + "endLine": 86, + "endColumn": 39, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189409,13 +189550,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 55, - "startColumn": 4, - "endLine": 55, - "endColumn": 14, + "startLine": 56, + "startColumn": 5, + "endLine": 56, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189429,13 +189570,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 117, - "startColumn": 4, - "endLine": 117, - "endColumn": 14, + "startLine": 118, + "startColumn": 5, + "endLine": 118, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189449,13 +189590,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 258, - "startColumn": 4, - "endLine": 258, - "endColumn": 14, + "startLine": 260, + "startColumn": 5, + "endLine": 260, + "endColumn": 30, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189632,13 +189773,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 144, - "startColumn": 4, - "endLine": 144, - "endColumn": 14, + "startLine": 146, + "startColumn": 5, + "endLine": 146, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -189713,10 +189854,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 223, - "startColumn": 5, - "endLine": 223, - "endColumn": 15, + "startLine": 224, + "startColumn": 6, + "endLine": 224, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -189737,10 +189878,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 243, - "startColumn": 5, - "endLine": 243, - "endColumn": 15, + "startLine": 244, + "startColumn": 6, + "endLine": 244, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -189784,10 +189925,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 258, - "startColumn": 5, - "endLine": 258, - "endColumn": 14, + "startLine": 259, + "startColumn": 6, + "endLine": 259, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -189831,10 +189972,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 265, - "startColumn": 5, - "endLine": 265, - "endColumn": 15, + "startLine": 266, + "startColumn": 6, + "endLine": 266, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -189877,10 +190018,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 18, + "startLine": 278, + "startColumn": 6, + "endLine": 278, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -189922,9 +190063,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 284, - "startColumn": 5, - "endLine": 284, + "startLine": 285, + "startColumn": 6, + "endLine": 285, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -189967,10 +190108,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 313, - "startColumn": 5, - "endLine": 313, - "endColumn": 18, + "startLine": 314, + "startColumn": 6, + "endLine": 314, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -190012,9 +190153,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 320, - "startColumn": 5, - "endLine": 320, + "startLine": 321, + "startColumn": 6, + "endLine": 321, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190058,10 +190199,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 369, - "startColumn": 5, - "endLine": 369, - "endColumn": 16, + "startLine": 370, + "startColumn": 6, + "endLine": 370, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190082,10 +190223,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 372, - "startColumn": 5, - "endLine": 372, - "endColumn": 15, + "startLine": 373, + "startColumn": 6, + "endLine": 373, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190128,10 +190269,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 384, - "startColumn": 5, - "endLine": 384, - "endColumn": 18, + "startLine": 385, + "startColumn": 6, + "endLine": 385, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -190173,9 +190314,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 391, - "startColumn": 5, - "endLine": 391, + "startLine": 392, + "startColumn": 6, + "endLine": 392, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190218,10 +190359,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 420, - "startColumn": 5, - "endLine": 420, - "endColumn": 18, + "startLine": 421, + "startColumn": 6, + "endLine": 421, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -190263,9 +190404,9 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, + "startLine": 428, + "startColumn": 6, + "endLine": 428, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190309,10 +190450,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 476, - "startColumn": 5, - "endLine": 476, - "endColumn": 16, + "startLine": 477, + "startColumn": 6, + "endLine": 477, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190333,10 +190474,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 482, - "startColumn": 5, - "endLine": 482, - "endColumn": 15, + "startLine": 483, + "startColumn": 6, + "endLine": 483, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190380,10 +190521,10 @@ }, "propertyPath": "Properties.DomainName", "category": "Best Practice", - "startLine": 508, - "startColumn": 5, - "endLine": 508, - "endColumn": 16, + "startLine": 509, + "startColumn": 6, + "endLine": 509, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190654,10 +190795,10 @@ }, "propertyPath": "Properties.ExecutionRoleArn", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 22, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -190770,9 +190911,9 @@ }, "propertyPath": "Properties.TaskRoleArn", "category": "Best Practice", - "startLine": 60, - "startColumn": 5, - "endLine": 60, + "startLine": 61, + "startColumn": 6, + "endLine": 61, "endColumn": 17, "documentationUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -190794,10 +190935,10 @@ }, "propertyPath": "Properties.Cluster", "category": "Best Practice", - "startLine": 138, - "startColumn": 5, - "endLine": 138, - "endColumn": 13, + "startLine": 139, + "startColumn": 6, + "endLine": 139, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191021,13 +191162,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 271, - "startColumn": 4, - "endLine": 271, - "endColumn": 14, + "startLine": 272, + "startColumn": 5, + "endLine": 272, + "endColumn": 66, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -191087,10 +191228,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191131,10 +191272,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191154,10 +191295,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191178,10 +191319,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191205,10 +191346,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191232,10 +191373,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 90, - "startColumn": 5, - "endLine": 90, - "endColumn": 22, + "startLine": 91, + "startColumn": 6, + "endLine": 91, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191276,10 +191417,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 114, - "startColumn": 5, - "endLine": 114, - "endColumn": 11, + "startLine": 115, + "startColumn": 6, + "endLine": 115, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191299,10 +191440,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 131, - "startColumn": 5, - "endLine": 131, - "endColumn": 11, + "startLine": 132, + "startColumn": 6, + "endLine": 132, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191323,10 +191464,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 142, - "startColumn": 5, - "endLine": 142, - "endColumn": 18, + "startLine": 143, + "startColumn": 6, + "endLine": 143, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191350,10 +191491,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 145, - "startColumn": 5, - "endLine": 145, - "endColumn": 14, + "startLine": 146, + "startColumn": 6, + "endLine": 146, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -191377,10 +191518,10 @@ }, "propertyPath": "Properties.FirewallRuleGroupId", "category": "Best Practice", - "startLine": 316, - "startColumn": 5, - "endLine": 316, - "endColumn": 25, + "startLine": 317, + "startColumn": 6, + "endLine": 317, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191400,10 +191541,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 323, - "startColumn": 5, - "endLine": 323, - "endColumn": 11, + "startLine": 324, + "startColumn": 6, + "endLine": 324, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191445,10 +191586,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 396, - "startColumn": 5, - "endLine": 396, - "endColumn": 11, + "startLine": 397, + "startColumn": 6, + "endLine": 397, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191536,10 +191677,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 460, - "startColumn": 5, - "endLine": 460, - "endColumn": 11, + "startLine": 461, + "startColumn": 6, + "endLine": 461, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191826,13 +191967,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 312, - "startColumn": 4, - "endLine": 312, - "endColumn": 14, + "startLine": 314, + "startColumn": 5, + "endLine": 314, + "endColumn": 36, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -191846,13 +191987,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 428, - "startColumn": 4, - "endLine": 428, - "endColumn": 14, + "startLine": 430, + "startColumn": 5, + "endLine": 430, + "endColumn": 76, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -191866,13 +192007,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 516, - "startColumn": 4, - "endLine": 516, - "endColumn": 14, + "startLine": 518, + "startColumn": 5, + "endLine": 518, + "endColumn": 69, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -191910,10 +192051,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 104, - "startColumn": 5, - "endLine": 104, - "endColumn": 18, + "startLine": 105, + "startColumn": 6, + "endLine": 105, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191955,10 +192096,10 @@ }, "propertyPath": "Properties.SourceAccount", "category": "Best Practice", - "startLine": 111, - "startColumn": 5, - "endLine": 111, - "endColumn": 19, + "startLine": 112, + "startColumn": 6, + "endLine": 112, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -191977,10 +192118,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 114, - "startColumn": 5, - "endLine": 114, - "endColumn": 15, + "startLine": 115, + "startColumn": 6, + "endLine": 115, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192246,11 +192387,12 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucketeer" }, + "propertyPath": "Type", "category": "Schema", - "startLine": 11, - "startColumn": 3, - "endLine": 11, - "endColumn": 20, + "startLine": 12, + "startColumn": 4, + "endLine": 12, + "endColumn": 9, "ruleDescription": "AWS resource type must be recognized and available in the configured region", "phase": "SCHEMA", "context": { @@ -192269,6 +192411,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucketeer" }, + "propertyPath": "Transform", "category": "Resource", "startLine": 78, "startColumn": 4, @@ -192307,13 +192450,13 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucketeer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 68, - "startColumn": 4, - "endLine": 68, - "endColumn": 14, + "startLine": 69, + "startColumn": 5, + "endLine": 69, + "endColumn": 19, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -192327,13 +192470,13 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucketeer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 68, - "startColumn": 4, - "endLine": 68, - "endColumn": 14, + "startLine": 69, + "startColumn": 5, + "endLine": 69, + "endColumn": 19, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -192347,13 +192490,13 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucketeer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 68, - "startColumn": 4, - "endLine": 68, - "endColumn": 14, + "startLine": 69, + "startColumn": 5, + "endLine": 69, + "endColumn": 19, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -192432,10 +192575,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 101, - "startColumn": 5, - "endLine": 101, - "endColumn": 22, + "startLine": 102, + "startColumn": 6, + "endLine": 102, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192476,10 +192619,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 125, - "startColumn": 5, - "endLine": 125, - "endColumn": 11, + "startLine": 126, + "startColumn": 6, + "endLine": 126, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192499,10 +192642,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 142, - "startColumn": 5, - "endLine": 142, - "endColumn": 11, + "startLine": 143, + "startColumn": 6, + "endLine": 143, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192523,10 +192666,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 153, - "startColumn": 5, - "endLine": 153, - "endColumn": 18, + "startLine": 154, + "startColumn": 6, + "endLine": 154, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192550,10 +192693,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 156, - "startColumn": 5, - "endLine": 156, - "endColumn": 14, + "startLine": 157, + "startColumn": 6, + "endLine": 157, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192600,10 +192743,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 171, - "startColumn": 5, - "endLine": 171, - "endColumn": 18, + "startLine": 172, + "startColumn": 6, + "endLine": 172, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192624,10 +192767,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 200, - "startColumn": 5, - "endLine": 200, - "endColumn": 18, + "startLine": 201, + "startColumn": 6, + "endLine": 201, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192647,10 +192790,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 206, - "startColumn": 5, - "endLine": 206, - "endColumn": 14, + "startLine": 207, + "startColumn": 6, + "endLine": 207, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192670,10 +192813,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 227, - "startColumn": 5, - "endLine": 227, - "endColumn": 22, + "startLine": 228, + "startColumn": 6, + "endLine": 228, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192714,10 +192857,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 251, - "startColumn": 5, - "endLine": 251, - "endColumn": 11, + "startLine": 252, + "startColumn": 6, + "endLine": 252, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192737,10 +192880,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 268, - "startColumn": 5, - "endLine": 268, - "endColumn": 11, + "startLine": 269, + "startColumn": 6, + "endLine": 269, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192761,10 +192904,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 279, - "startColumn": 5, - "endLine": 279, - "endColumn": 18, + "startLine": 280, + "startColumn": 6, + "endLine": 280, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192788,10 +192931,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 282, - "startColumn": 5, - "endLine": 282, - "endColumn": 14, + "startLine": 283, + "startColumn": 6, + "endLine": 283, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192838,10 +192981,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 297, - "startColumn": 5, - "endLine": 297, - "endColumn": 18, + "startLine": 298, + "startColumn": 6, + "endLine": 298, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192862,10 +193005,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 325, - "startColumn": 5, - "endLine": 325, - "endColumn": 11, + "startLine": 326, + "startColumn": 6, + "endLine": 326, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192911,10 +193054,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 350, - "startColumn": 5, - "endLine": 350, - "endColumn": 11, + "startLine": 351, + "startColumn": 6, + "endLine": 351, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -192934,10 +193077,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 400, - "startColumn": 5, - "endLine": 400, - "endColumn": 24, + "startLine": 401, + "startColumn": 6, + "endLine": 401, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -192958,10 +193101,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 403, - "startColumn": 5, - "endLine": 403, - "endColumn": 13, + "startLine": 404, + "startColumn": 6, + "endLine": 404, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193027,10 +193170,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 415, - "startColumn": 5, - "endLine": 415, - "endColumn": 14, + "startLine": 416, + "startColumn": 6, + "endLine": 416, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193050,10 +193193,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 432, - "startColumn": 5, - "endLine": 432, - "endColumn": 29, + "startLine": 433, + "startColumn": 6, + "endLine": 433, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193179,10 +193322,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 24, - "startColumn": 5, - "endLine": 24, - "endColumn": 22, + "startLine": 25, + "startColumn": 6, + "endLine": 25, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193223,10 +193366,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 48, - "startColumn": 5, - "endLine": 48, - "endColumn": 11, + "startLine": 49, + "startColumn": 6, + "endLine": 49, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193246,10 +193389,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 65, - "startColumn": 5, - "endLine": 65, - "endColumn": 11, + "startLine": 66, + "startColumn": 6, + "endLine": 66, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193270,10 +193413,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 76, - "startColumn": 5, - "endLine": 76, - "endColumn": 18, + "startLine": 77, + "startColumn": 6, + "endLine": 77, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193297,10 +193440,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 79, - "startColumn": 5, - "endLine": 79, - "endColumn": 14, + "startLine": 80, + "startColumn": 6, + "endLine": 80, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193347,10 +193490,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 94, - "startColumn": 5, - "endLine": 94, - "endColumn": 18, + "startLine": 95, + "startColumn": 6, + "endLine": 95, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193371,10 +193514,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 18, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193394,10 +193537,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 14, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193417,10 +193560,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 150, - "startColumn": 5, - "endLine": 150, - "endColumn": 22, + "startLine": 151, + "startColumn": 6, + "endLine": 151, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193461,10 +193604,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 174, - "startColumn": 5, - "endLine": 174, - "endColumn": 11, + "startLine": 175, + "startColumn": 6, + "endLine": 175, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193484,10 +193627,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193508,10 +193651,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 18, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193535,10 +193678,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 205, - "startColumn": 5, - "endLine": 205, - "endColumn": 14, + "startLine": 206, + "startColumn": 6, + "endLine": 206, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193585,10 +193728,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 220, - "startColumn": 5, - "endLine": 220, - "endColumn": 18, + "startLine": 221, + "startColumn": 6, + "endLine": 221, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193609,10 +193752,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 249, - "startColumn": 5, - "endLine": 249, - "endColumn": 18, + "startLine": 250, + "startColumn": 6, + "endLine": 250, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193632,10 +193775,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 255, - "startColumn": 5, - "endLine": 255, - "endColumn": 14, + "startLine": 256, + "startColumn": 6, + "endLine": 256, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193655,10 +193798,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 276, - "startColumn": 5, - "endLine": 276, - "endColumn": 22, + "startLine": 277, + "startColumn": 6, + "endLine": 277, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193699,10 +193842,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 300, - "startColumn": 5, - "endLine": 300, - "endColumn": 11, + "startLine": 301, + "startColumn": 6, + "endLine": 301, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193722,10 +193865,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 317, - "startColumn": 5, - "endLine": 317, - "endColumn": 11, + "startLine": 318, + "startColumn": 6, + "endLine": 318, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193746,10 +193889,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 328, - "startColumn": 5, - "endLine": 328, - "endColumn": 18, + "startLine": 329, + "startColumn": 6, + "endLine": 329, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193773,10 +193916,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 331, - "startColumn": 5, - "endLine": 331, - "endColumn": 14, + "startLine": 332, + "startColumn": 6, + "endLine": 332, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193823,10 +193966,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 18, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193847,10 +193990,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 357, - "startColumn": 5, - "endLine": 357, - "endColumn": 22, + "startLine": 358, + "startColumn": 6, + "endLine": 358, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193891,10 +194034,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 381, - "startColumn": 5, - "endLine": 381, - "endColumn": 11, + "startLine": 382, + "startColumn": 6, + "endLine": 382, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -193914,10 +194057,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 398, - "startColumn": 5, - "endLine": 398, - "endColumn": 11, + "startLine": 399, + "startColumn": 6, + "endLine": 399, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193938,10 +194081,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 409, - "startColumn": 5, - "endLine": 409, - "endColumn": 18, + "startLine": 410, + "startColumn": 6, + "endLine": 410, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -193965,10 +194108,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 412, - "startColumn": 5, - "endLine": 412, - "endColumn": 14, + "startLine": 413, + "startColumn": 6, + "endLine": 413, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -194015,10 +194158,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 18, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -194039,10 +194182,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 455, - "startColumn": 5, - "endLine": 455, - "endColumn": 11, + "startLine": 456, + "startColumn": 6, + "endLine": 456, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -194089,10 +194232,10 @@ }, "propertyPath": "Properties.DestinationArn", "category": "Best Practice", - "startLine": 478, - "startColumn": 5, - "endLine": 478, - "endColumn": 20, + "startLine": 479, + "startColumn": 6, + "endLine": 479, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194134,10 +194277,10 @@ }, "propertyPath": "Properties.ResolverQueryLogConfigId", "category": "Best Practice", - "startLine": 493, - "startColumn": 5, - "endLine": 493, - "endColumn": 30, + "startLine": 494, + "startColumn": 6, + "endLine": 494, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194157,10 +194300,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 496, - "startColumn": 5, - "endLine": 496, - "endColumn": 16, + "startLine": 497, + "startColumn": 6, + "endLine": 497, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194246,10 +194389,10 @@ }, "propertyPath": "Properties.FirewallRuleGroupId", "category": "Best Practice", - "startLine": 558, - "startColumn": 5, - "endLine": 558, - "endColumn": 25, + "startLine": 559, + "startColumn": 6, + "endLine": 559, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194269,10 +194412,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 563, - "startColumn": 5, - "endLine": 563, - "endColumn": 11, + "startLine": 564, + "startColumn": 6, + "endLine": 564, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194453,13 +194596,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 157, - "startColumn": 4, - "endLine": 157, - "endColumn": 14, + "startLine": 159, + "startColumn": 5, + "endLine": 159, + "endColumn": 56, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -194498,10 +194641,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 32, - "startColumn": 5, - "endLine": 32, - "endColumn": 12, + "startLine": 33, + "startColumn": 6, + "endLine": 33, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194543,10 +194686,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 172, - "startColumn": 5, - "endLine": 172, - "endColumn": 18, + "startLine": 173, + "startColumn": 6, + "endLine": 173, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194566,10 +194709,10 @@ }, "propertyPath": "Properties.Principal", "category": "Best Practice", - "startLine": 178, - "startColumn": 5, - "endLine": 178, - "endColumn": 15, + "startLine": 179, + "startColumn": 6, + "endLine": 179, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194588,10 +194731,10 @@ }, "propertyPath": "Properties.SourceAccount", "category": "Best Practice", - "startLine": 181, - "startColumn": 5, - "endLine": 181, - "endColumn": 19, + "startLine": 182, + "startColumn": 6, + "endLine": 182, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194610,10 +194753,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 192, - "startColumn": 5, - "endLine": 192, - "endColumn": 12, + "startLine": 193, + "startColumn": 6, + "endLine": 193, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-s3", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -194778,13 +194921,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 316, - "startColumn": 4, - "endLine": 316, - "endColumn": 14, + "startLine": 317, + "startColumn": 5, + "endLine": 317, + "endColumn": 66, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -194913,10 +195056,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 89, - "startColumn": 5, - "endLine": 89, - "endColumn": 22, + "startLine": 90, + "startColumn": 6, + "endLine": 90, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194957,10 +195100,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 113, - "startColumn": 5, - "endLine": 113, - "endColumn": 11, + "startLine": 114, + "startColumn": 6, + "endLine": 114, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -194980,10 +195123,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 130, - "startColumn": 5, - "endLine": 130, - "endColumn": 11, + "startLine": 131, + "startColumn": 6, + "endLine": 131, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195004,10 +195147,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 141, - "startColumn": 5, - "endLine": 141, - "endColumn": 18, + "startLine": 142, + "startColumn": 6, + "endLine": 142, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195031,10 +195174,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 144, - "startColumn": 5, - "endLine": 144, - "endColumn": 14, + "startLine": 145, + "startColumn": 6, + "endLine": 145, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195081,10 +195224,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 159, - "startColumn": 5, - "endLine": 159, - "endColumn": 18, + "startLine": 160, + "startColumn": 6, + "endLine": 160, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195105,10 +195248,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 190, - "startColumn": 5, - "endLine": 190, - "endColumn": 11, + "startLine": 191, + "startColumn": 6, + "endLine": 191, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195154,10 +195297,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 380, - "startColumn": 5, - "endLine": 380, - "endColumn": 11, + "startLine": 381, + "startColumn": 6, + "endLine": 381, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -195177,10 +195320,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 404, - "startColumn": 5, - "endLine": 404, - "endColumn": 22, + "startLine": 405, + "startColumn": 6, + "endLine": 405, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195200,10 +195343,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 415, - "startColumn": 5, - "endLine": 415, - "endColumn": 13, + "startLine": 416, + "startColumn": 6, + "endLine": 416, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195269,10 +195412,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 427, - "startColumn": 5, - "endLine": 427, - "endColumn": 14, + "startLine": 428, + "startColumn": 6, + "endLine": 428, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195293,10 +195436,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 440, - "startColumn": 5, - "endLine": 440, - "endColumn": 14, + "startLine": 441, + "startColumn": 6, + "endLine": 441, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195443,13 +195586,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 235, - "startColumn": 4, - "endLine": 235, - "endColumn": 14, + "startLine": 236, + "startColumn": 5, + "endLine": 236, + "endColumn": 65, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -195463,13 +195606,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 404, - "startColumn": 4, - "endLine": 404, - "endColumn": 14, + "startLine": 406, + "startColumn": 5, + "endLine": 406, + "endColumn": 82, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -195485,10 +195628,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 35, - "startColumn": 5, - "endLine": 35, - "endColumn": 12, + "startLine": 36, + "startColumn": 6, + "endLine": 36, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -195652,13 +195795,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 109, - "startColumn": 4, - "endLine": 109, - "endColumn": 14, + "startLine": 111, + "startColumn": 5, + "endLine": 111, + "endColumn": 32, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -195720,10 +195863,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 138, - "startColumn": 5, - "endLine": 138, - "endColumn": 15, + "startLine": 139, + "startColumn": 6, + "endLine": 139, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195744,10 +195887,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 157, - "startColumn": 5, - "endLine": 157, - "endColumn": 15, + "startLine": 158, + "startColumn": 6, + "endLine": 158, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195791,10 +195934,10 @@ }, "propertyPath": "Properties.ParentId", "category": "Best Practice", - "startLine": 169, - "startColumn": 5, - "endLine": 169, - "endColumn": 14, + "startLine": 170, + "startColumn": 6, + "endLine": 170, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195838,10 +195981,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 176, - "startColumn": 5, - "endLine": 176, - "endColumn": 15, + "startLine": 177, + "startColumn": 6, + "endLine": 177, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195885,10 +196028,10 @@ }, "propertyPath": "Properties.ResourceId", "category": "Best Practice", - "startLine": 318, - "startColumn": 5, - "endLine": 318, - "endColumn": 16, + "startLine": 319, + "startColumn": 6, + "endLine": 319, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -195909,10 +196052,10 @@ }, "propertyPath": "Properties.RestApiId", "category": "Best Practice", - "startLine": 321, - "startColumn": 5, - "endLine": 321, - "endColumn": 15, + "startLine": 322, + "startColumn": 6, + "endLine": 322, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -196117,13 +196260,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 53, - "startColumn": 4, - "endLine": 53, - "endColumn": 14, + "startLine": 54, + "startColumn": 5, + "endLine": 54, + "endColumn": 36, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -196137,13 +196280,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 110, - "startColumn": 4, - "endLine": 110, - "endColumn": 14, + "startLine": 111, + "startColumn": 5, + "endLine": 111, + "endColumn": 37, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -196157,13 +196300,13 @@ "entityType": "Resource", "resourceType": "AWS::StepFunctions::StateMachine" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 259, - "startColumn": 4, - "endLine": 259, - "endColumn": 14, + "startLine": 261, + "startColumn": 5, + "endLine": 261, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -202417,9 +202560,9 @@ "propertyPath": "Properties.ImageId", "category": "Best Practice", "startLine": 16, - "startColumn": 9, + "startColumn": 22, "endLine": 16, - "endColumn": 17, + "endColumn": 26, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -202463,9 +202606,9 @@ "propertyPath": "Properties.ImageId", "category": "Best Practice", "startLine": 23, - "startColumn": 9, + "startColumn": 22, "endLine": 23, - "endColumn": 17, + "endColumn": 26, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -202720,7 +202863,7 @@ "startLine": 15, "startColumn": 11, "endLine": 15, - "endColumn": 12, + "endColumn": 21, "ruleDescription": "Availability zone properties should not be hardcoded", "phase": "LINT" }, @@ -202970,9 +203113,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 34, - "startColumn": 9, - "endLine": 34, + "startLine": 35, + "startColumn": 11, + "endLine": 35, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -203056,7 +203199,7 @@ "startLine": 20, "startColumn": 11, "endLine": 20, - "endColumn": 12, + "endColumn": 15, "ruleDescription": "Validate security group format", "phase": "SCHEMA", "context": { @@ -203392,12 +203535,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.Role.Fn::Join", + "propertyPath": "Properties.Role.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 11, - "startColumn": 11, - "endLine": 11, - "endColumn": 20, + "startLine": 12, + "startColumn": 13, + "endLine": 12, + "endColumn": 14, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -204507,11 +204650,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Runtime", "category": "Resource", - "startLine": 3, - "startColumn": 5, - "endLine": 3, - "endColumn": 16, + "startLine": 9, + "startColumn": 9, + "endLine": 9, + "endColumn": 17, "ruleDescription": "Lambda ZipFile requires nodejs or python runtime", "phase": "LINT" }, @@ -205135,7 +205279,6 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Policy" }, - "propertyPath": "Resources/ClusterCreationRoleDefaultPolicyE8BDFC7B", "category": "Reference", "startLine": 688, "startColumn": 3, @@ -205154,7 +205297,6 @@ "entityType": "Resource", "resourceType": "AWS::SSM::Parameter" }, - "propertyPath": "Resources/ClusterKubectlReadyBarrier200052AF", "category": "Reference", "startLine": 880, "startColumn": 3, @@ -205173,13 +205315,13 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-Cluster" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.2", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 849, - "startColumn": 4, - "endLine": 849, - "endColumn": 14, + "startLine": 852, + "startColumn": 5, + "endLine": 852, + "endColumn": 33, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205193,13 +205335,13 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-Cluster" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.7", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 849, - "startColumn": 4, - "endLine": 849, - "endColumn": 14, + "startLine": 857, + "startColumn": 5, + "endLine": 857, + "endColumn": 41, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205213,13 +205355,13 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-Cluster" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.11", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 849, - "startColumn": 4, - "endLine": 849, - "endColumn": 14, + "startLine": 861, + "startColumn": 5, + "endLine": 861, + "endColumn": 41, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205233,13 +205375,13 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-Cluster" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.17", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 849, - "startColumn": 4, - "endLine": 849, - "endColumn": 14, + "startLine": 867, + "startColumn": 5, + "endLine": 867, + "endColumn": 40, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205253,13 +205395,13 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-Cluster" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.23", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 849, - "startColumn": 4, - "endLine": 849, - "endColumn": 14, + "startLine": 873, + "startColumn": 5, + "endLine": 873, + "endColumn": 40, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205273,13 +205415,13 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1099, - "startColumn": 4, - "endLine": 1099, - "endColumn": 14, + "startLine": 1101, + "startColumn": 5, + "endLine": 1101, + "endColumn": 39, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -205293,12 +205435,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.0.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.0.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 489, - "startColumn": 7, - "endLine": 489, - "endColumn": 16, + "startLine": 490, + "startColumn": 8, + "endLine": 490, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205312,12 +205454,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.1.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 501, - "startColumn": 7, - "endLine": 501, - "endColumn": 16, + "startLine": 502, + "startColumn": 8, + "endLine": 502, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205331,12 +205473,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.2.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.2.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 513, - "startColumn": 7, - "endLine": 513, - "endColumn": 16, + "startLine": 514, + "startColumn": 8, + "endLine": 514, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205350,12 +205492,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.3.Fn::If.1.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.3.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 528, - "startColumn": 9, - "endLine": 528, - "endColumn": 18, + "startLine": 529, + "startColumn": 10, + "endLine": 529, + "endColumn": 11, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205369,12 +205511,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.0.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.0.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 7, - "endLine": 911, - "endColumn": 16, + "startLine": 912, + "startColumn": 8, + "endLine": 912, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205388,12 +205530,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.1.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 923, - "startColumn": 7, - "endLine": 923, - "endColumn": 16, + "startLine": 924, + "startColumn": 8, + "endLine": 924, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205407,12 +205549,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Role" }, - "propertyPath": "Properties.ManagedPolicyArns.2.Fn::Join", + "propertyPath": "Properties.ManagedPolicyArns.2.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 935, - "startColumn": 7, - "endLine": 935, - "endColumn": 16, + "startLine": 936, + "startColumn": 8, + "endLine": 936, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205426,12 +205568,12 @@ "entityType": "Resource", "resourceType": "Custom::AWSCDK-EKS-KubernetesResource" }, - "propertyPath": "Properties.Manifest.Fn::Join", + "propertyPath": "Properties.Manifest.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1001, - "startColumn": 6, - "endLine": 1001, - "endColumn": 15, + "startLine": 1002, + "startColumn": 7, + "endLine": 1002, + "endColumn": 8, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205445,12 +205587,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1037, - "startColumn": 6, - "endLine": 1037, - "endColumn": 15, + "startLine": 1038, + "startColumn": 7, + "endLine": 1038, + "endColumn": 8, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205464,12 +205606,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1083, - "startColumn": 6, - "endLine": 1083, - "endColumn": 15, + "startLine": 1084, + "startColumn": 7, + "endLine": 1084, + "endColumn": 8, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -205529,10 +205671,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 21, - "startColumn": 5, - "endLine": 21, - "endColumn": 22, + "startLine": 22, + "startColumn": 6, + "endLine": 22, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205573,10 +205715,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 49, - "startColumn": 5, - "endLine": 49, - "endColumn": 11, + "startLine": 50, + "startColumn": 6, + "endLine": 50, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205596,10 +205738,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 67, - "startColumn": 5, - "endLine": 67, - "endColumn": 11, + "startLine": 68, + "startColumn": 6, + "endLine": 68, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205620,10 +205762,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 75, - "startColumn": 5, - "endLine": 75, - "endColumn": 18, + "startLine": 76, + "startColumn": 6, + "endLine": 76, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205647,10 +205789,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 78, - "startColumn": 5, - "endLine": 78, - "endColumn": 14, + "startLine": 79, + "startColumn": 6, + "endLine": 79, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205697,10 +205839,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 90, - "startColumn": 5, - "endLine": 90, - "endColumn": 18, + "startLine": 91, + "startColumn": 6, + "endLine": 91, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205721,10 +205863,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 117, - "startColumn": 5, - "endLine": 117, - "endColumn": 18, + "startLine": 118, + "startColumn": 6, + "endLine": 118, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205744,10 +205886,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 123, - "startColumn": 5, - "endLine": 123, - "endColumn": 14, + "startLine": 124, + "startColumn": 6, + "endLine": 124, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205767,10 +205909,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 145, - "startColumn": 5, - "endLine": 145, - "endColumn": 22, + "startLine": 146, + "startColumn": 6, + "endLine": 146, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205811,10 +205953,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 173, - "startColumn": 5, - "endLine": 173, - "endColumn": 11, + "startLine": 174, + "startColumn": 6, + "endLine": 174, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205834,10 +205976,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 191, - "startColumn": 5, - "endLine": 191, - "endColumn": 11, + "startLine": 192, + "startColumn": 6, + "endLine": 192, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205858,10 +206000,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 199, - "startColumn": 5, - "endLine": 199, - "endColumn": 18, + "startLine": 200, + "startColumn": 6, + "endLine": 200, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205885,10 +206027,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 202, - "startColumn": 5, - "endLine": 202, - "endColumn": 14, + "startLine": 203, + "startColumn": 6, + "endLine": 203, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205935,10 +206077,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 214, - "startColumn": 5, - "endLine": 214, - "endColumn": 18, + "startLine": 215, + "startColumn": 6, + "endLine": 215, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -205959,10 +206101,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 241, - "startColumn": 5, - "endLine": 241, - "endColumn": 18, + "startLine": 242, + "startColumn": 6, + "endLine": 242, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -205982,10 +206124,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 247, - "startColumn": 5, - "endLine": 247, - "endColumn": 14, + "startLine": 248, + "startColumn": 6, + "endLine": 248, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206005,10 +206147,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 269, - "startColumn": 5, - "endLine": 269, - "endColumn": 22, + "startLine": 270, + "startColumn": 6, + "endLine": 270, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206049,10 +206191,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 297, - "startColumn": 5, - "endLine": 297, - "endColumn": 11, + "startLine": 298, + "startColumn": 6, + "endLine": 298, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206072,10 +206214,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 315, - "startColumn": 5, - "endLine": 315, - "endColumn": 11, + "startLine": 316, + "startColumn": 6, + "endLine": 316, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206096,10 +206238,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 323, - "startColumn": 5, - "endLine": 323, - "endColumn": 18, + "startLine": 324, + "startColumn": 6, + "endLine": 324, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206123,10 +206265,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 326, - "startColumn": 5, - "endLine": 326, - "endColumn": 14, + "startLine": 327, + "startColumn": 6, + "endLine": 327, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206173,10 +206315,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 338, - "startColumn": 5, - "endLine": 338, - "endColumn": 18, + "startLine": 339, + "startColumn": 6, + "endLine": 339, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206197,10 +206339,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 346, - "startColumn": 5, - "endLine": 346, - "endColumn": 22, + "startLine": 347, + "startColumn": 6, + "endLine": 347, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206241,10 +206383,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 374, - "startColumn": 5, - "endLine": 374, - "endColumn": 11, + "startLine": 375, + "startColumn": 6, + "endLine": 375, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206264,10 +206406,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 392, - "startColumn": 5, - "endLine": 392, - "endColumn": 11, + "startLine": 393, + "startColumn": 6, + "endLine": 393, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206288,10 +206430,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 400, - "startColumn": 5, - "endLine": 400, - "endColumn": 18, + "startLine": 401, + "startColumn": 6, + "endLine": 401, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206315,10 +206457,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 403, - "startColumn": 5, - "endLine": 403, - "endColumn": 14, + "startLine": 404, + "startColumn": 6, + "endLine": 404, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206365,10 +206507,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 415, - "startColumn": 5, - "endLine": 415, - "endColumn": 18, + "startLine": 416, + "startColumn": 6, + "endLine": 416, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206389,10 +206531,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 437, - "startColumn": 5, - "endLine": 437, - "endColumn": 11, + "startLine": 438, + "startColumn": 6, + "endLine": 438, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206507,10 +206649,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 604, - "startColumn": 5, - "endLine": 604, - "endColumn": 11, + "startLine": 605, + "startColumn": 6, + "endLine": 605, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -206553,10 +206695,10 @@ }, "propertyPath": "Properties.ClusterName", "category": "Best Practice", - "startLine": 958, - "startColumn": 5, - "endLine": 958, - "endColumn": 17, + "startLine": 959, + "startColumn": 6, + "endLine": 959, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -206600,10 +206742,10 @@ }, "propertyPath": "Properties.NodeRole", "category": "Best Practice", - "startLine": 965, - "startColumn": 5, - "endLine": 965, - "endColumn": 14, + "startLine": 966, + "startColumn": 6, + "endLine": 966, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -207073,10 +207215,10 @@ }, "propertyPath": "Properties.TopicName", "category": "Best Practice", - "startLine": 6, - "startColumn": 9, - "endLine": 6, - "endColumn": 19, + "startLine": 7, + "startColumn": 11, + "endLine": 7, + "endColumn": 30, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -207656,9 +207798,9 @@ "propertyPath": "Properties.FunctionName", "category": "Best Practice", "startLine": 19, - "startColumn": 9, + "startColumn": 27, "endLine": 19, - "endColumn": 22, + "endColumn": 31, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -207701,9 +207843,9 @@ "propertyPath": "Properties.SourceAccount", "category": "Best Practice", "startLine": 21, - "startColumn": 9, + "startColumn": 28, "endLine": 21, - "endColumn": 23, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -207823,11 +207965,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, + "propertyPath": "Properties.Runtime", "category": "Resource", - "startLine": 16, - "startColumn": 5, - "endLine": 16, - "endColumn": 20, + "startLine": 22, + "startColumn": 9, + "endLine": 22, + "endColumn": 17, "ruleDescription": "Lambda ZipFile requires nodejs or python runtime", "phase": "LINT" }, @@ -208439,12 +208582,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SubnetRouteTableAssociation" }, - "propertyPath": "Properties.SubnetId.Fn::Join", + "propertyPath": "Properties.SubnetId.Fn::Join.0", "category": "Intrinsic Function", "startLine": 10, - "startColumn": 7, + "startColumn": 24, "endLine": 10, - "endColumn": 15, + "endColumn": 26, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -208458,12 +208601,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::SubnetRouteTableAssociation" }, - "propertyPath": "Properties.SubnetId.Fn::Join", + "propertyPath": "Properties.SubnetId.Fn::Join.0", "category": "Intrinsic Function", "startLine": 15, - "startColumn": 7, + "startColumn": 24, "endLine": 15, - "endColumn": 15, + "endColumn": 26, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -209236,7 +209379,7 @@ "fatal": 0, "errors": 0, "warnings": 1, - "informational": 2, + "informational": 13, "debug": 0 }, "suppressed": 0, @@ -209262,6 +209405,215 @@ "ruleDescription": "Check if Conditions are Used", "phase": "LINT" }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithGetAtt contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithGetAtt", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 36, + "startColumn": 7, + "endLine": 36, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithJoin contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithJoin", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 47, + "startColumn": 7, + "endLine": 47, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithSelect contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithSelect", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 56, + "startColumn": 7, + "endLine": 56, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithIf contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithIf", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 65, + "startColumn": 7, + "endLine": 65, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithFindInMap contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithFindInMap", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 75, + "startColumn": 7, + "endLine": 75, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithBase64 contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithBase64", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 85, + "startColumn": 7, + "endLine": 85, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithSplit contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithSplit", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 92, + "startColumn": 7, + "endLine": 92, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithImport contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithImport", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 101, + "startColumn": 7, + "endLine": 101, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithGetAZs contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithGetAZs", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 108, + "startColumn": 7, + "endLine": 108, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource WithCidr contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "WithCidr", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 115, + "startColumn": 7, + "endLine": 115, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, + { + "ruleId": "I3042", + "severity": "INFO", + "message": "ARN in Resource SubBlock contains hardcoded Partition in ARN or incorrectly placed Pseudo Parameters", + "source": "CFN_LINT", + "entity": { + "logicalId": "SubBlock", + "entityType": "Resource", + "resourceType": "Custom::IntrinsicTest" + }, + "propertyPath": "Properties.ServiceToken.Fn::Sub", + "category": "Best Practice", + "startLine": 125, + "startColumn": 7, + "endLine": 125, + "endColumn": 19, + "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", + "phase": "LINT" + }, { "ruleId": "I9001", "severity": "INFO", @@ -209297,10 +209649,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 27, - "startColumn": 7, - "endLine": 27, - "endColumn": 17, + "startLine": 28, + "startColumn": 9, + "endLine": 28, + "endColumn": 16, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -209906,7 +210258,7 @@ "startLine": 44, "startColumn": 19, "endLine": 44, - "endColumn": 20, + "endColumn": 29, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -209925,7 +210277,7 @@ "startLine": 74, "startColumn": 13, "endLine": 74, - "endColumn": 14, + "endColumn": 22, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -210190,10 +210542,10 @@ }, "propertyPath": "Properties.BlockDeviceMappings", "category": "Best Practice", - "startLine": 36, - "startColumn": 7, - "endLine": 36, - "endColumn": 26, + "startLine": 37, + "startColumn": 9, + "endLine": 37, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -210238,10 +210590,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 68, - "startColumn": 7, - "endLine": 68, - "endColumn": 19, + "startLine": 69, + "startColumn": 9, + "endLine": 69, + "endColumn": 15, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -217180,10 +217532,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 21, - "startColumn": 7, - "endLine": 21, - "endColumn": 23, + "startLine": 22, + "startColumn": 9, + "endLine": 22, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -217568,10 +217920,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 34, - "startColumn": 7, - "endLine": 34, - "endColumn": 15, + "startLine": 35, + "startColumn": 9, + "endLine": 35, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -217661,10 +218013,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 59, - "startColumn": 7, - "endLine": 59, - "endColumn": 15, + "startLine": 60, + "startColumn": 9, + "endLine": 60, + "endColumn": 21, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -217685,9 +218037,9 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 72, - "startColumn": 7, - "endLine": 72, + "startLine": 73, + "startColumn": 9, + "endLine": 73, "endColumn": 16, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -217826,12 +218178,13 @@ "entityType": "Resource", "resourceType": "AWS::ApiGateway::Method" }, + "propertyPath": "Properties.Integration.Uri.Fn::Join.1.3.Fn::GetAtt.0", "suggestedFix": "Check that the GetAtt target resource exists in the template", "category": "Intrinsic Function", - "startLine": 86, - "startColumn": 3, - "endLine": 86, - "endColumn": 18, + "startLine": 100, + "startColumn": 23, + "endLine": 100, + "endColumn": 41, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-apigateway.git", "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA" @@ -217967,12 +218320,12 @@ "entityType": "Resource", "resourceType": "AWS::ApiGateway::Method" }, - "propertyPath": "Properties.Integration.Uri.Fn::Join", + "propertyPath": "Properties.Integration.Uri.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 95, - "startColumn": 11, - "endLine": 95, - "endColumn": 19, + "startLine": 96, + "startColumn": 13, + "endLine": 96, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -217986,12 +218339,12 @@ "entityType": "Resource", "resourceType": "AWS::ApiGateway::Method" }, - "propertyPath": "Properties.Integration.RequestTemplates.application/json.Fn::Join", + "propertyPath": "Properties.Integration.RequestTemplates.application/json.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 107, - "startColumn": 13, - "endLine": 107, - "endColumn": 21, + "startLine": 108, + "startColumn": 15, + "endLine": 108, + "endColumn": 17, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -218348,10 +218701,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 18, - "startColumn": 7, - "endLine": 18, - "endColumn": 14, + "startLine": 19, + "startColumn": 9, + "endLine": 19, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -218372,10 +218725,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 26, - "startColumn": 7, - "endLine": 26, - "endColumn": 14, + "startLine": 27, + "startColumn": 9, + "endLine": 27, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -218966,7 +219319,7 @@ "startLine": 15, "startColumn": 7, "endLine": 15, - "endColumn": 40, + "endColumn": 42, "ruleDescription": "Mappings are appropriately configured", "phase": "LINT" }, @@ -219016,12 +219369,12 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Cluster" }, - "propertyPath": "Properties.ClusterName.Fn::FindInMap.1.Fn::Join", + "propertyPath": "Properties.ClusterName.Fn::FindInMap.1.Fn::Join.0", "category": "Intrinsic Function", "startLine": 52, - "startColumn": 11, + "startColumn": 13, "endLine": 52, - "endColumn": 19, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -219035,12 +219388,12 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Cluster" }, - "propertyPath": "Properties.ClusterName.Fn::FindInMap.2.Fn::Join", + "propertyPath": "Properties.ClusterName.Fn::FindInMap.2.Fn::Join.0", "category": "Intrinsic Function", "startLine": 56, - "startColumn": 11, + "startColumn": 13, "endLine": 56, - "endColumn": 19, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -219739,10 +220092,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 113, - "startColumn": 7, - "endLine": 113, - "endColumn": 15, + "startLine": 114, + "startColumn": 9, + "endLine": 114, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -219762,10 +220115,10 @@ }, "propertyPath": "Properties.AvailabilityZones", "category": "Best Practice", - "startLine": 124, - "startColumn": 7, - "endLine": 124, - "endColumn": 24, + "startLine": 125, + "startColumn": 9, + "endLine": 125, + "endColumn": 19, "documentationUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -220364,12 +220717,12 @@ "entityType": "Resource", "resourceType": "AWS::IAM::Policy" }, - "propertyPath": "Properties.PolicyDocument.Statement.0.Resource.Fn::Join", + "propertyPath": "Properties.PolicyDocument.Statement.0.Resource.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 48, - "startColumn": 15, - "endLine": 48, - "endColumn": 23, + "startLine": 49, + "startColumn": 19, + "endLine": 49, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -221085,12 +221438,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.SnapStart", + "propertyPath": "Properties.SnapStart.ApplyOn", "suggestedFix": "Add an AWS::Lambda::Version resource that references this function", "category": "Best Practice", - "startLine": 13, - "startColumn": 7, - "endLine": 13, + "startLine": 14, + "startColumn": 9, + "endLine": 14, "endColumn": 16, "ruleDescription": "Validate that SnapStart is properly configured", "phase": "LINT" @@ -221190,7 +221543,7 @@ "startLine": 9, "startColumn": 7, "endLine": 9, - "endColumn": 14, + "endColumn": 11, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -223155,10 +223508,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 22, - "startColumn": 7, - "endLine": 22, - "endColumn": 15, + "startLine": 23, + "startColumn": 9, + "endLine": 23, + "endColumn": 21, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -223462,10 +223815,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 25, - "startColumn": 7, - "endLine": 25, - "endColumn": 15, + "startLine": 26, + "startColumn": 9, + "endLine": 26, + "endColumn": 21, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -223797,10 +224150,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 57, - "startColumn": 7, - "endLine": 57, - "endColumn": 16, + "startLine": 58, + "startColumn": 9, + "endLine": 58, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -224047,10 +224400,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 31, - "startColumn": 9, - "endLine": 31, - "endColumn": 21, + "startLine": 32, + "startColumn": 11, + "endLine": 32, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224074,10 +224427,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 33, - "startColumn": 9, - "endLine": 33, - "endColumn": 17, + "startLine": 34, + "startColumn": 11, + "endLine": 34, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224101,10 +224454,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 40, - "startColumn": 9, - "endLine": 40, - "endColumn": 21, + "startLine": 41, + "startColumn": 11, + "endLine": 41, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224128,10 +224481,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 42, - "startColumn": 9, - "endLine": 42, - "endColumn": 17, + "startLine": 43, + "startColumn": 11, + "endLine": 43, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224155,10 +224508,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 48, - "startColumn": 9, - "endLine": 48, - "endColumn": 21, + "startLine": 49, + "startColumn": 11, + "endLine": 49, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224182,9 +224535,9 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 50, - "startColumn": 9, - "endLine": 50, + "startLine": 51, + "startColumn": 11, + "endLine": 51, "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -224209,10 +224562,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 56, - "startColumn": 9, - "endLine": 56, - "endColumn": 21, + "startLine": 57, + "startColumn": 11, + "endLine": 57, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224236,10 +224589,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 58, - "startColumn": 9, - "endLine": 58, - "endColumn": 17, + "startLine": 59, + "startColumn": 11, + "endLine": 59, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -224285,10 +224638,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 69, - "startColumn": 9, - "endLine": 69, - "endColumn": 21, + "startLine": 70, + "startColumn": 11, + "endLine": 70, + "endColumn": 14, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -226203,10 +226556,10 @@ }, "propertyPath": "Properties.KeySchema", "category": "Best Practice", - "startLine": 23, - "startColumn": 7, - "endLine": 23, - "endColumn": 16, + "startLine": 24, + "startColumn": 9, + "endLine": 24, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -226226,10 +226579,10 @@ }, "propertyPath": "Properties.KeySchema", "category": "Best Practice", - "startLine": 37, - "startColumn": 7, - "endLine": 37, - "endColumn": 16, + "startLine": 38, + "startColumn": 9, + "endLine": 38, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -226465,7 +226818,7 @@ "startLine": 121, "startColumn": 9, "endLine": 121, - "endColumn": 10, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticache", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -226488,7 +226841,7 @@ "startLine": 138, "startColumn": 9, "endLine": 138, - "endColumn": 10, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticache", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -226511,7 +226864,7 @@ "startLine": 155, "startColumn": 9, "endLine": 155, - "endColumn": 10, + "endColumn": 16, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-elasticache", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -227667,7 +228020,7 @@ "startLine": 29, "startColumn": 19, "endLine": 29, - "endColumn": 20, + "endColumn": 40, "ruleDescription": "Validate identity based IAM policies", "phase": "LINT" }, @@ -227771,9 +228124,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 73, - "startColumn": 7, - "endLine": 73, + "startLine": 74, + "startColumn": 9, + "endLine": 74, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -228878,6 +229231,84 @@ }, "diagnostics": [] }, + "good/resources/properties/custom_with_service_token.yaml": { + "filePath": "good/resources/properties/custom_with_service_token.yaml", + "status": "OK", + "version": "1.8.0", + "metadata": { + "resourcesScanned": 2, + "counts": { + "fatal": 0, + "errors": 0, + "warnings": 2, + "informational": 1, + "debug": 0 + }, + "suppressed": 0, + "strict": false, + "severityLevel": "DEBUG" + }, + "diagnostics": [ + { + "ruleId": "W9013", + "severity": "WARN", + "message": "Hardcoded account ID in ARN - use AWS::AccountId pseudo-parameter", + "source": "ENGINE", + "entity": { + "logicalId": "CustomPrefixValid", + "entityType": "Resource", + "resourceType": "Custom::MyHandler" + }, + "category": "Security", + "startLine": 2, + "startColumn": 3, + "endLine": 2, + "endColumn": 20, + "ruleDescription": "Hardcoded account ID in ARN", + "phase": "LINT" + }, + { + "ruleId": "W9013", + "severity": "WARN", + "message": "Hardcoded account ID in ARN - use AWS::AccountId pseudo-parameter", + "source": "ENGINE", + "entity": { + "logicalId": "CloudFormationCustomValid", + "entityType": "Resource", + "resourceType": "AWS::CloudFormation::CustomResource" + }, + "category": "Security", + "startLine": 8, + "startColumn": 3, + "endLine": 8, + "endColumn": 28, + "ruleDescription": "Hardcoded account ID in ARN", + "phase": "LINT" + }, + { + "ruleId": "I9001", + "severity": "INFO", + "message": "Property 'ServiceToken' is create-only; updating it will cause resource replacement", + "source": "ENGINE", + "entity": { + "logicalId": "CloudFormationCustomValid", + "entityType": "Resource", + "resourceType": "AWS::CloudFormation::CustomResource" + }, + "propertyPath": "Properties.ServiceToken", + "category": "Best Practice", + "startLine": 11, + "startColumn": 7, + "endLine": 11, + "endColumn": 19, + "ruleDescription": "Create-only property updated triggers resource replacement", + "phase": "SCHEMA", + "context": { + "lifecycle": "create-only" + } + } + ] + }, "good/resources/properties/exclusive.yaml": { "filePath": "good/resources/properties/exclusive.yaml", "status": "OK", @@ -229169,7 +229600,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, - "propertyPath": "Properties.NotificationConfiguration.TopicConfigurations.0.Topic", + "propertyPath": "Properties.NotificationConfiguration.TopicConfigurations.0.Topic.Fn::Sub", "category": "Best Practice", "startLine": 12, "startColumn": 11, @@ -229216,7 +229647,7 @@ "startLine": 12, "startColumn": 11, "endLine": 12, - "endColumn": 18, + "endColumn": 16, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -229235,7 +229666,7 @@ "startLine": 24, "startColumn": 13, "endLine": 24, - "endColumn": 20, + "endColumn": 21, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -229686,7 +230117,7 @@ "entityType": "Resource", "resourceType": "AWS::IAM::User" }, - "propertyPath": "Properties.LoginProfile.Password", + "propertyPath": "Properties.LoginProfile.Password.Fn::Sub", "category": "Best Practice", "startLine": 47, "startColumn": 9, @@ -231263,6 +231694,147 @@ } ] }, + "good/resources/sqs/standard_queue_name.yaml": { + "filePath": "good/resources/sqs/standard_queue_name.yaml", + "status": "OK", + "version": "1.8.0", + "metadata": { + "resourcesScanned": 1, + "counts": { + "fatal": 0, + "errors": 0, + "warnings": 0, + "informational": 6, + "debug": 0 + }, + "suppressed": 0, + "strict": false, + "severityLevel": "DEBUG" + }, + "diagnostics": [ + { + "ruleId": "I3011", + "severity": "INFO", + "message": "'DeletionPolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "category": "Best Practice", + "startLine": 3, + "startColumn": 3, + "endLine": 3, + "endColumn": 16, + "ruleDescription": "Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy", + "phase": "LINT" + }, + { + "ruleId": "I3011", + "severity": "INFO", + "message": "'UpdateReplacePolicy' is a required property (The default action when replacing/removing a resource is to delete it. Set explicit values for stateful resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "category": "Best Practice", + "startLine": 3, + "startColumn": 3, + "endLine": 3, + "endColumn": 16, + "ruleDescription": "Check stateful resources have a set UpdateReplacePolicy/DeletionPolicy", + "phase": "LINT" + }, + { + "ruleId": "I3013", + "severity": "INFO", + "message": "'MessageRetentionPeriod' is a required property (The default retention period will delete the data after a pre-defined time. Set an explicit values to avoid data loss on resource)", + "source": "CFN_LINT", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties", + "category": "Best Practice", + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 15, + "ruleDescription": "Check resources with auto expiring content have explicit retention period", + "phase": "LINT" + }, + { + "ruleId": "I9001", + "severity": "INFO", + "message": "Property 'QueueName' is create-only; updating it will cause resource replacement", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.QueueName", + "category": "Best Practice", + "startLine": 6, + "startColumn": 7, + "endLine": 6, + "endColumn": 16, + "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sqs.git", + "ruleDescription": "Create-only property updated triggers resource replacement", + "phase": "SCHEMA", + "context": { + "lifecycle": "create-only" + } + }, + { + "ruleId": "I9001", + "severity": "INFO", + "message": "Property 'FifoQueue' is create-only; updating it will cause resource replacement", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.FifoQueue", + "category": "Best Practice", + "startLine": 7, + "startColumn": 7, + "endLine": 7, + "endColumn": 16, + "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sqs.git", + "ruleDescription": "Create-only property updated triggers resource replacement", + "phase": "SCHEMA", + "context": { + "lifecycle": "create-only" + } + }, + { + "ruleId": "I9040", + "severity": "INFO", + "message": "Resource 'StandardQueue' of type 'AWS::SQS::Queue' supports Tags but none are configured", + "source": "ENGINE", + "entity": { + "logicalId": "StandardQueue", + "entityType": "Resource", + "resourceType": "AWS::SQS::Queue" + }, + "propertyPath": "Properties.Tags", + "suggestedFix": "Add Tags to improve resource organization and cost tracking", + "category": "Best Practice", + "startLine": 5, + "startColumn": 5, + "endLine": 5, + "endColumn": 15, + "ruleDescription": "Resource should have Tags", + "phase": "LINT" + } + ] + }, "good/resources/update_policy_supported.yaml": { "filePath": "good/resources/update_policy_supported.yaml", "status": "OK", @@ -233482,7 +234054,7 @@ "startLine": 19, "startColumn": 46, "endLine": 19, - "endColumn": 47, + "endColumn": 54, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -234726,9 +235298,9 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 16, - "startColumn": 9, - "endLine": 16, + "startLine": 17, + "startColumn": 11, + "endLine": 17, "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -234749,9 +235321,9 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 24, - "startColumn": 9, - "endLine": 24, + "startLine": 25, + "startColumn": 11, + "endLine": 25, "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -234773,9 +235345,9 @@ "propertyPath": "Properties.BucketName", "category": "Best Practice", "startLine": 38, - "startColumn": 9, + "startColumn": 25, "endLine": 38, - "endColumn": 20, + "endColumn": 33, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -234796,9 +235368,9 @@ "propertyPath": "Properties.BucketName", "category": "Best Practice", "startLine": 44, - "startColumn": 9, + "startColumn": 25, "endLine": 44, - "endColumn": 20, + "endColumn": 29, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -236837,10 +237409,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Schema", - "startLine": 6, - "startColumn": 7, - "endLine": 6, - "endColumn": 23, + "startLine": 7, + "startColumn": 9, + "endLine": 7, + "endColumn": 19, "ruleDescription": "Mutually exclusive properties", "phase": "SCHEMA", "context": { @@ -236881,10 +237453,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 6, - "startColumn": 7, - "endLine": 6, - "endColumn": 23, + "startLine": 7, + "startColumn": 9, + "endLine": 7, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -238331,11 +238903,12 @@ "entityType": "Resource", "resourceType": "AWS::ECS::Service" }, + "propertyPath": "Properties", "category": "Resource", - "startLine": 32, - "startColumn": 3, - "endLine": 32, - "endColumn": 21, + "startLine": 34, + "startColumn": 5, + "endLine": 34, + "endColumn": 15, "ruleDescription": "Validate ECS service requires NetworkConfiguration", "phase": "LINT" }, @@ -238759,7 +239332,7 @@ "startLine": 61, "startColumn": 16, "endLine": 61, - "endColumn": 23, + "endColumn": 84, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -238778,7 +239351,7 @@ "startLine": 97, "startColumn": 7, "endLine": 97, - "endColumn": 14, + "endColumn": 11, "ruleDescription": "ARNs should use correctly placed Pseudo Parameters", "phase": "LINT" }, @@ -239657,7 +240230,7 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::CustomResource" }, - "propertyPath": "Properties.KmsKeyId", + "propertyPath": "Properties.KmsKeyId.Fn::GetAtt.1", "suggestedFix": "Check the resource type documentation for valid GetAtt attributes", "category": "Intrinsic Function", "startLine": 12, @@ -240339,7 +240912,7 @@ "startLine": 44, "startColumn": 21, "endLine": 44, - "endColumn": 22, + "endColumn": 44, "ruleDescription": "Check if GetAtt matches destination format", "phase": "LINT" }, @@ -240358,7 +240931,7 @@ "startLine": 40, "startColumn": 13, "endLine": 40, - "endColumn": 14, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Validate security group format", "phase": "SCHEMA", @@ -240902,12 +241475,12 @@ "logicalId": "SubWithGetAtt", "entityType": "Output" }, - "propertyPath": "Outputs/SubWithGetAtt/Value.Fn::GetAtt", + "propertyPath": "Outputs/SubWithGetAtt/Value.Fn::Sub.1.InstanceCount.Fn::GetAtt", "category": "Structure", - "startLine": 84, - "startColumn": 3, - "endLine": 84, - "endColumn": 16, + "startLine": 85, + "startColumn": 57, + "endLine": 85, + "endColumn": 69, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -240922,10 +241495,10 @@ }, "propertyPath": "Outputs/Ipv4NetmaskLength/Value.Fn::GetAtt", "category": "Structure", - "startLine": 86, - "startColumn": 3, - "endLine": 86, - "endColumn": 20, + "startLine": 87, + "startColumn": 5, + "endLine": 87, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -240940,10 +241513,10 @@ }, "propertyPath": "Outputs/String/Value.Fn::Sub", "category": "Structure", - "startLine": 88, - "startColumn": 3, - "endLine": 88, - "endColumn": 9, + "startLine": 89, + "startColumn": 5, + "endLine": 89, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -240958,10 +241531,10 @@ }, "propertyPath": "Outputs/JoinWithGetAtt/Value.Fn::Join.1.0.Fn::GetAtt", "category": "Structure", - "startLine": 92, - "startColumn": 3, - "endLine": 92, - "endColumn": 17, + "startLine": 93, + "startColumn": 33, + "endLine": 93, + "endColumn": 66, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -240976,10 +241549,10 @@ }, "propertyPath": "Outputs/BooleanGetAtt/Value.Fn::GetAtt", "category": "Structure", - "startLine": 96, - "startColumn": 3, - "endLine": 96, - "endColumn": 16, + "startLine": 97, + "startColumn": 5, + "endLine": 97, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -241012,12 +241585,12 @@ "logicalId": "Join", "entityType": "Output" }, - "propertyPath": "Outputs/Join/Value.Fn::Join", + "propertyPath": "Outputs/Join/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 90, - "startColumn": 3, - "endLine": 90, - "endColumn": 7, + "startLine": 91, + "startColumn": 20, + "endLine": 91, + "endColumn": 22, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -241030,12 +241603,12 @@ "logicalId": "JoinWithGetAtt", "entityType": "Output" }, - "propertyPath": "Outputs/JoinWithGetAtt/Value.Fn::Join", + "propertyPath": "Outputs/JoinWithGetAtt/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 92, - "startColumn": 3, - "endLine": 92, - "endColumn": 17, + "startLine": 93, + "startColumn": 20, + "endLine": 93, + "endColumn": 22, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -242644,7 +243217,7 @@ "ruleId": "W2509", "severity": "WARN", "message": "Parameter 'DBPassword' appears to be a password but does not have NoEcho set to true", - "source": "ENGINE", + "source": "CFN_LINT", "entity": { "logicalId": "DBPassword", "entityType": "Parameter" @@ -243616,10 +244189,10 @@ }, "propertyPath": "Outputs/ComplexOutput/Value.Fn::Sub", "category": "Structure", - "startLine": 944, - "startColumn": 5, - "endLine": 944, - "endColumn": 19, + "startLine": 947, + "startColumn": 9, + "endLine": 947, + "endColumn": 17, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -243673,10 +244246,10 @@ }, "propertyPath": "Properties.MasterUserPassword", "category": "Security", - "startLine": 665, - "startColumn": 9, - "endLine": 665, - "endColumn": 28, + "startLine": 666, + "startColumn": 11, + "endLine": 666, + "endColumn": 15, "ruleDescription": "Instead of REFing a parameter for a secret use a dynamic reference", "phase": "LINT" }, @@ -243691,10 +244264,10 @@ }, "propertyPath": "Outputs/ConditionalOutput/Value.Fn::If.2", "category": "Best Practice", - "startLine": 997, - "startColumn": 5, - "endLine": 997, - "endColumn": 23, + "startLine": 1015, + "startColumn": 11, + "endLine": 1015, + "endColumn": 12, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -243789,10 +244362,10 @@ }, "propertyPath": "Properties.AllocatedStorage", "category": "Best Practice", - "startLine": 649, - "startColumn": 9, - "endLine": 649, - "endColumn": 26, + "startLine": 650, + "startColumn": 11, + "endLine": 650, + "endColumn": 18, "conditionScenario": { "IsProduction": true }, @@ -243816,10 +244389,10 @@ "propertyPath": "Properties.StorageEncrypted", "suggestedFix": "Set StorageEncrypted to true", "category": "Security", - "startLine": 657, - "startColumn": 9, - "endLine": 657, - "endColumn": 26, + "startLine": 658, + "startColumn": 11, + "endLine": 658, + "endColumn": 18, "ruleDescription": "RDS instance should have StorageEncrypted", "phase": "LINT" }, @@ -243835,10 +244408,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 363, - "startColumn": 9, - "endLine": 363, - "endColumn": 19, + "startLine": 364, + "startColumn": 11, + "endLine": 364, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -243857,9 +244430,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 391, - "startColumn": 9, - "endLine": 391, + "startLine": 392, + "startColumn": 11, + "endLine": 392, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -243880,10 +244453,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 394, - "startColumn": 9, - "endLine": 394, - "endColumn": 19, + "startLine": 395, + "startColumn": 11, + "endLine": 395, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -243902,10 +244475,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 402, - "startColumn": 9, - "endLine": 402, - "endColumn": 26, + "startLine": 403, + "startColumn": 11, + "endLine": 403, + "endColumn": 22, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -243947,9 +244520,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 445, - "startColumn": 9, - "endLine": 445, + "startLine": 446, + "startColumn": 11, + "endLine": 446, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -243992,9 +244565,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 493, - "startColumn": 9, - "endLine": 493, + "startLine": 494, + "startColumn": 11, + "endLine": 494, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244015,10 +244588,10 @@ }, "propertyPath": "Properties.LaunchTemplateName", "category": "Best Practice", - "startLine": 509, - "startColumn": 9, - "endLine": 509, - "endColumn": 28, + "startLine": 510, + "startColumn": 11, + "endLine": 510, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -244038,10 +244611,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 566, - "startColumn": 9, - "endLine": 566, - "endColumn": 30, + "startLine": 567, + "startColumn": 11, + "endLine": 567, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -244105,10 +244678,10 @@ }, "propertyPath": "Properties.DBInstanceIdentifier", "category": "Best Practice", - "startLine": 635, - "startColumn": 9, - "endLine": 635, - "endColumn": 30, + "startLine": 636, + "startColumn": 11, + "endLine": 636, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244152,10 +244725,10 @@ }, "propertyPath": "Properties.StorageEncrypted", "category": "Best Practice", - "startLine": 657, - "startColumn": 9, - "endLine": 657, - "endColumn": 26, + "startLine": 658, + "startColumn": 11, + "endLine": 658, + "endColumn": 18, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244199,10 +244772,10 @@ }, "propertyPath": "Properties.BackupRetentionPeriod", "category": "Best Practice", - "startLine": 673, - "startColumn": 9, - "endLine": 673, - "endColumn": 31, + "startLine": 674, + "startColumn": 11, + "endLine": 674, + "endColumn": 18, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244223,10 +244796,10 @@ }, "propertyPath": "Properties.MultiAZ", "category": "Best Practice", - "startLine": 680, - "startColumn": 9, - "endLine": 680, - "endColumn": 17, + "startLine": 681, + "startColumn": 11, + "endLine": 681, + "endColumn": 21, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244269,9 +244842,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 718, - "startColumn": 9, - "endLine": 718, + "startLine": 719, + "startColumn": 11, + "endLine": 719, "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244292,10 +244865,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 736, - "startColumn": 9, - "endLine": 736, - "endColumn": 22, + "startLine": 737, + "startColumn": 11, + "endLine": 737, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -244315,10 +244888,10 @@ }, "propertyPath": "Properties.RoleName", "category": "Best Practice", - "startLine": 803, - "startColumn": 9, - "endLine": 803, - "endColumn": 18, + "startLine": 804, + "startColumn": 11, + "endLine": 804, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-iam.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -244339,9 +244912,9 @@ }, "propertyPath": "Properties.AlarmName", "category": "Best Practice", - "startLine": 847, - "startColumn": 9, - "endLine": 847, + "startLine": 848, + "startColumn": 11, + "endLine": 848, "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-cloudwatch.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -244363,9 +244936,9 @@ }, "propertyPath": "Properties.TopicName", "category": "Best Practice", - "startLine": 878, - "startColumn": 9, - "endLine": 878, + "startLine": 879, + "startColumn": 11, + "endLine": 879, "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -244535,10 +245108,10 @@ }, "propertyPath": "Outputs/ComplexOutput/Value.Fn::Sub", "category": "Structure", - "startLine": 422, - "startColumn": 3, - "endLine": 422, - "endColumn": 16, + "startLine": 424, + "startColumn": 5, + "endLine": 424, + "endColumn": 10, "ruleDescription": "Output value must be a string", "phase": "SCHEMA" }, @@ -244610,10 +245183,10 @@ }, "propertyPath": "Outputs/ConditionalOutput/Value.Fn::If.2", "category": "Best Practice", - "startLine": 443, - "startColumn": 3, - "endLine": 443, - "endColumn": 20, + "startLine": 451, + "startColumn": 14, + "endLine": 451, + "endColumn": 26, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -245632,10 +246205,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 58, - "startColumn": 9, - "endLine": 58, - "endColumn": 20, + "startLine": 59, + "startColumn": 11, + "endLine": 59, + "endColumn": 18, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -245746,10 +246319,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 105, - "startColumn": 9, - "endLine": 105, - "endColumn": 22, + "startLine": 106, + "startColumn": 11, + "endLine": 106, + "endColumn": 18, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -245993,7 +246566,7 @@ "startLine": 57, "startColumn": 54, "endLine": 57, - "endColumn": 55, + "endColumn": 67, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -246012,7 +246585,7 @@ "startLine": 62, "startColumn": 43, "endLine": 62, - "endColumn": 44, + "endColumn": 52, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -246031,7 +246604,7 @@ "startLine": 69, "startColumn": 13, "endLine": 69, - "endColumn": 14, + "endColumn": 18, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -246050,7 +246623,7 @@ "startLine": 76, "startColumn": 15, "endLine": 76, - "endColumn": 16, + "endColumn": 20, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -246384,10 +246957,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 149, - "startColumn": 7, - "endLine": 149, - "endColumn": 13, + "startLine": 150, + "startColumn": 9, + "endLine": 150, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -246594,10 +247167,10 @@ }, "propertyPath": "Metadata.Test", "category": "Intrinsic Function", - "startLine": 19, - "startColumn": 9, - "endLine": 19, - "endColumn": 14, + "startLine": 20, + "startColumn": 11, + "endLine": 20, + "endColumn": 19, "ruleDescription": "Sub variables must resolve", "phase": "SCHEMA" }, @@ -246613,10 +247186,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Intrinsic Function", - "startLine": 27, - "startColumn": 9, - "endLine": 27, - "endColumn": 20, + "startLine": 28, + "startColumn": 11, + "endLine": 28, + "endColumn": 19, "ruleDescription": "Sub variables must resolve", "phase": "SCHEMA", "context": { @@ -246636,10 +247209,10 @@ "propertyPath": "Metadata.TestObj", "suggestedFix": "Check that the Ref target exists as a resource, parameter, or pseudo-parameter", "category": "Intrinsic Function", - "startLine": 22, - "startColumn": 9, - "endLine": 22, - "endColumn": 17, + "startLine": 23, + "startColumn": 11, + "endLine": 23, + "endColumn": 15, "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA" }, @@ -246656,9 +247229,9 @@ "propertyPath": "Properties.Tags.0.Value", "suggestedFix": "Check that the Ref target exists as a resource, parameter, or pseudo-parameter", "category": "Intrinsic Function", - "startLine": 33, - "startColumn": 13, - "endLine": 33, + "startLine": 34, + "startColumn": 15, + "endLine": 34, "endColumn": 19, "ruleDescription": "Ref/GetAtt target must exist", "phase": "SCHEMA" @@ -246675,10 +247248,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 27, - "startColumn": 9, - "endLine": 27, - "endColumn": 20, + "startLine": 28, + "startColumn": 11, + "endLine": 28, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -246938,6 +247511,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Conditions", "category": "Resource", "startLine": 31, "startColumn": 7, @@ -247012,10 +247586,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 33, - "startColumn": 9, - "endLine": 33, - "endColumn": 20, + "startLine": 34, + "startColumn": 11, + "endLine": 34, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247034,9 +247608,9 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 41, - "startColumn": 9, - "endLine": 41, + "startLine": 42, + "startColumn": 11, + "endLine": 42, "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -247056,9 +247630,9 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 49, - "startColumn": 9, - "endLine": 49, + "startLine": 50, + "startColumn": 11, + "endLine": 50, "endColumn": 20, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -247078,10 +247652,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 57, - "startColumn": 9, - "endLine": 57, - "endColumn": 20, + "startLine": 58, + "startColumn": 11, + "endLine": 58, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247100,10 +247674,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 65, - "startColumn": 9, - "endLine": 65, - "endColumn": 20, + "startLine": 66, + "startColumn": 11, + "endLine": 66, + "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247240,6 +247814,7 @@ "entityType": "Resource", "resourceType": "AWS::S3::Bucket" }, + "propertyPath": "Conditions", "category": "Resource", "startLine": 27, "startColumn": 5, @@ -247336,10 +247911,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 35, - "startColumn": 7, - "endLine": 35, - "endColumn": 17, + "startLine": 36, + "startColumn": 9, + "endLine": 36, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247424,10 +247999,10 @@ }, "propertyPath": "Properties.BucketName", "category": "Best Practice", - "startLine": 58, - "startColumn": 7, - "endLine": 58, - "endColumn": 17, + "startLine": 59, + "startColumn": 9, + "endLine": 59, + "endColumn": 16, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247706,11 +248281,12 @@ "entityType": "Resource", "resourceType": "AWS::Serverless::Function" }, + "propertyPath": "Type", "category": "Structure", - "startLine": 2, - "startColumn": 3, - "endLine": 2, - "endColumn": 13, + "startLine": 3, + "startColumn": 5, + "endLine": 3, + "endColumn": 9, "ruleDescription": "Check if Serverless Resources have Serverless Transform", "phase": "LINT" }, @@ -247724,11 +248300,12 @@ "entityType": "Resource", "resourceType": "AWS::Serverless::Api" }, + "propertyPath": "Type", "category": "Structure", - "startLine": 6, - "startColumn": 3, - "endLine": 6, - "endColumn": 8, + "startLine": 7, + "startColumn": 5, + "endLine": 7, + "endColumn": 9, "ruleDescription": "Check if Serverless Resources have Serverless Transform", "phase": "LINT" }, @@ -247928,10 +248505,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 193, - "startColumn": 17, - "endLine": 193, - "endColumn": 30, + "startLine": 194, + "startColumn": 21, + "endLine": 194, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -247973,10 +248550,10 @@ }, "propertyPath": "Properties.SourceArn", "category": "Best Practice", - "startLine": 197, - "startColumn": 17, - "endLine": 197, - "endColumn": 27, + "startLine": 198, + "startColumn": 21, + "endLine": 198, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -248521,12 +249098,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.01-get-cloudwatch-agent.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.01-get-cloudwatch-agent.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 647, - "startColumn": 37, - "endLine": 647, - "endColumn": 46, + "startLine": 648, + "startColumn": 41, + "endLine": 648, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248540,12 +249117,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.02-extract-cloudwatch-agent.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.02-extract-cloudwatch-agent.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 662, - "startColumn": 37, - "endLine": 662, - "endColumn": 46, + "startLine": 663, + "startColumn": 41, + "endLine": 663, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248559,12 +249136,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.10-install-cloudwatch-agent.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.cw-agent-install.commands.10-install-cloudwatch-agent.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 673, - "startColumn": 37, - "endLine": 673, - "endColumn": 46, + "startLine": 674, + "startColumn": 41, + "endLine": 674, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248578,12 +249155,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.4.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 816, - "startColumn": 57, - "endLine": 816, - "endColumn": 66, + "startLine": 817, + "startColumn": 61, + "endLine": 817, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248597,12 +249174,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.5.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.finalize.commands.10-signal-success.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 833, - "startColumn": 57, - "endLine": 833, - "endColumn": 66, + "startLine": 834, + "startColumn": 61, + "endLine": 834, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248616,12 +249193,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.make-app.commands.05-get-appscript.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 869, - "startColumn": 37, - "endLine": 869, - "endColumn": 46, + "startLine": 870, + "startColumn": 41, + "endLine": 870, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248635,12 +249212,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.make-app.commands.10-make-app.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 887, - "startColumn": 37, - "endLine": 887, - "endColumn": 46, + "startLine": 888, + "startColumn": 41, + "endLine": 888, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248654,12 +249231,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 25, - "endLine": 911, - "endColumn": 31, + "startLine": 933, + "startColumn": 61, + "endLine": 933, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248673,12 +249250,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/cfn-hup.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 25, - "endLine": 911, - "endColumn": 31, + "startLine": 951, + "startColumn": 61, + "endLine": 951, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248692,12 +249269,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.7.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 25, - "endLine": 911, - "endColumn": 31, + "startLine": 994, + "startColumn": 61, + "endLine": 994, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248711,12 +249288,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.1.8.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 25, - "endLine": 911, - "endColumn": 31, + "startLine": 1011, + "startColumn": 61, + "endLine": 1011, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248730,12 +249307,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/scripts/watchmaker-install.sh.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.setup.files./etc/cfn/scripts/watchmaker-install.sh.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 911, - "startColumn": 25, - "endLine": 911, - "endColumn": 31, + "startLine": 1039, + "startColumn": 41, + "endLine": 1039, + "endColumn": 42, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248749,12 +249326,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.3.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1101, - "startColumn": 57, - "endLine": 1101, - "endColumn": 66, + "startLine": 1102, + "startColumn": 61, + "endLine": 1102, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248768,12 +249345,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1119, - "startColumn": 57, - "endLine": 1119, - "endColumn": 66, + "startLine": 1120, + "startColumn": 61, + "endLine": 1120, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248787,12 +249364,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1137, - "startColumn": 57, - "endLine": 1137, - "endColumn": 66, + "startLine": 1138, + "startColumn": 61, + "endLine": 1138, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248806,12 +249383,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1155, - "startColumn": 57, - "endLine": 1155, - "endColumn": 66, + "startLine": 1156, + "startColumn": 61, + "endLine": 1156, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248825,12 +249402,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1173, - "startColumn": 57, - "endLine": 1173, - "endColumn": 66, + "startLine": 1174, + "startColumn": 61, + "endLine": 1174, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248844,12 +249421,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-launch.commands.10-watchmaker-launch.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1191, - "startColumn": 57, - "endLine": 1191, - "endColumn": 66, + "startLine": 1192, + "startColumn": 61, + "endLine": 1192, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248863,12 +249440,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.4.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1226, - "startColumn": 57, - "endLine": 1226, - "endColumn": 66, + "startLine": 1227, + "startColumn": 61, + "endLine": 1227, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248882,12 +249459,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.5.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1244, - "startColumn": 57, - "endLine": 1244, - "endColumn": 66, + "startLine": 1245, + "startColumn": 61, + "endLine": 1245, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248901,12 +249478,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.6.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1262, - "startColumn": 57, - "endLine": 1262, - "endColumn": 66, + "startLine": 1263, + "startColumn": 61, + "endLine": 1263, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248920,12 +249497,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.7.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1280, - "startColumn": 57, - "endLine": 1280, - "endColumn": 66, + "startLine": 1281, + "startColumn": 61, + "endLine": 1281, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248939,12 +249516,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.8.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1298, - "startColumn": 57, - "endLine": 1298, - "endColumn": 66, + "startLine": 1299, + "startColumn": 61, + "endLine": 1299, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248958,12 +249535,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.watchmaker-update.commands.10-watchmaker-update.command.Fn::Join.1.9.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1316, - "startColumn": 57, - "endLine": 1316, - "endColumn": 66, + "startLine": 1317, + "startColumn": 61, + "endLine": 1317, + "endColumn": 62, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248977,12 +249554,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.Tags.0.Value.Fn::Join", + "propertyPath": "Properties.Tags.0.Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1440, - "startColumn": 29, - "endLine": 1440, - "endColumn": 38, + "startLine": 1441, + "startColumn": 33, + "endLine": 1441, + "endColumn": 34, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -248996,12 +249573,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.88.Fn::If.1.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.88.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1596, - "startColumn": 45, - "endLine": 1596, - "endColumn": 54, + "startLine": 1597, + "startColumn": 49, + "endLine": 1597, + "endColumn": 50, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -249015,12 +249592,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.89.Fn::If.1.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.89.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1613, - "startColumn": 45, - "endLine": 1613, - "endColumn": 54, + "startLine": 1614, + "startColumn": 49, + "endLine": 1614, + "endColumn": 50, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -249034,12 +249611,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.98.Fn::If.1.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.98.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1642, - "startColumn": 45, - "endLine": 1642, - "endColumn": 54, + "startLine": 1643, + "startColumn": 49, + "endLine": 1643, + "endColumn": 50, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -249053,12 +249630,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.99.Fn::If.1.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.99.Fn::If.1.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1659, - "startColumn": 45, - "endLine": 1659, - "endColumn": 54, + "startLine": 1660, + "startColumn": 49, + "endLine": 1660, + "endColumn": 50, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -249072,12 +249649,12 @@ "entityType": "Resource", "resourceType": "AWS::Logs::LogGroup" }, - "propertyPath": "Properties.LogGroupName.Fn::Join", + "propertyPath": "Properties.LogGroupName.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1691, - "startColumn": 21, - "endLine": 1691, - "endColumn": 30, + "startLine": 1692, + "startColumn": 25, + "endLine": 1692, + "endColumn": 26, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -249152,9 +249729,9 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1398, - "startColumn": 17, - "endLine": 1398, + "startLine": 1399, + "startColumn": 21, + "endLine": 1399, "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -249176,10 +249753,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 1401, - "startColumn": 17, - "endLine": 1401, - "endColumn": 30, + "startLine": 1402, + "startColumn": 21, + "endLine": 1402, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -249200,9 +249777,9 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 1404, - "startColumn": 17, - "endLine": 1404, + "startLine": 1405, + "startColumn": 21, + "endLine": 1405, "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -249247,10 +249824,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 1451, - "startColumn": 17, - "endLine": 1451, - "endColumn": 26, + "startLine": 1452, + "startColumn": 21, + "endLine": 1452, + "endColumn": 32, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -249271,9 +249848,9 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 1690, - "startColumn": 17, - "endLine": 1690, + "startLine": 1691, + "startColumn": 21, + "endLine": 1691, "endColumn": 30, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -249732,13 +250309,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 121, - "startColumn": 7, - "endLine": 121, - "endColumn": 16, + "startLine": 122, + "startColumn": 11, + "endLine": 122, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249772,13 +250349,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 227, - "startColumn": 7, - "endLine": 227, - "endColumn": 16, + "startLine": 228, + "startColumn": 11, + "endLine": 228, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249812,13 +250389,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 421, - "startColumn": 7, - "endLine": 421, - "endColumn": 16, + "startLine": 422, + "startColumn": 11, + "endLine": 422, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249852,13 +250429,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 497, - "startColumn": 7, - "endLine": 497, - "endColumn": 16, + "startLine": 498, + "startColumn": 11, + "endLine": 498, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249892,13 +250469,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 565, - "startColumn": 7, - "endLine": 565, - "endColumn": 16, + "startLine": 566, + "startColumn": 11, + "endLine": 566, + "endColumn": 50, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249912,13 +250489,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 584, - "startColumn": 7, - "endLine": 584, - "endColumn": 16, + "startLine": 585, + "startColumn": 11, + "endLine": 585, + "endColumn": 36, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249932,13 +250509,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 606, - "startColumn": 7, - "endLine": 606, - "endColumn": 16, + "startLine": 607, + "startColumn": 11, + "endLine": 607, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -249972,13 +250549,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 699, - "startColumn": 7, - "endLine": 699, - "endColumn": 16, + "startLine": 700, + "startColumn": 11, + "endLine": 700, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250012,13 +250589,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 773, - "startColumn": 7, - "endLine": 773, - "endColumn": 16, + "startLine": 774, + "startColumn": 11, + "endLine": 774, + "endColumn": 51, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250032,13 +250609,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 795, - "startColumn": 7, - "endLine": 795, - "endColumn": 16, + "startLine": 796, + "startColumn": 11, + "endLine": 796, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250072,13 +250649,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 863, - "startColumn": 7, - "endLine": 863, - "endColumn": 16, + "startLine": 864, + "startColumn": 11, + "endLine": 864, + "endColumn": 55, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250092,13 +250669,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 886, - "startColumn": 7, - "endLine": 886, - "endColumn": 16, + "startLine": 887, + "startColumn": 11, + "endLine": 887, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250132,13 +250709,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 979, - "startColumn": 7, - "endLine": 979, - "endColumn": 16, + "startLine": 980, + "startColumn": 11, + "endLine": 980, + "endColumn": 44, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250152,13 +250729,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 999, - "startColumn": 7, - "endLine": 999, - "endColumn": 16, + "startLine": 1000, + "startColumn": 11, + "endLine": 1000, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250192,13 +250769,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1095, - "startColumn": 7, - "endLine": 1095, - "endColumn": 16, + "startLine": 1096, + "startColumn": 11, + "endLine": 1096, + "endColumn": 50, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250212,13 +250789,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1116, - "startColumn": 7, - "endLine": 1116, - "endColumn": 16, + "startLine": 1117, + "startColumn": 11, + "endLine": 1117, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250252,13 +250829,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1193, - "startColumn": 7, - "endLine": 1193, - "endColumn": 16, + "startLine": 1194, + "startColumn": 11, + "endLine": 1194, + "endColumn": 56, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250272,13 +250849,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1213, - "startColumn": 7, - "endLine": 1213, - "endColumn": 16, + "startLine": 1214, + "startColumn": 11, + "endLine": 1214, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250312,13 +250889,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1275, - "startColumn": 7, - "endLine": 1275, - "endColumn": 16, + "startLine": 1276, + "startColumn": 11, + "endLine": 1276, + "endColumn": 41, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250332,13 +250909,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1298, - "startColumn": 7, - "endLine": 1298, - "endColumn": 16, + "startLine": 1299, + "startColumn": 11, + "endLine": 1299, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250372,13 +250949,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1372, - "startColumn": 7, - "endLine": 1372, - "endColumn": 16, + "startLine": 1373, + "startColumn": 11, + "endLine": 1373, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250392,13 +250969,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1394, - "startColumn": 7, - "endLine": 1394, - "endColumn": 16, + "startLine": 1395, + "startColumn": 11, + "endLine": 1395, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250432,13 +251009,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1499, - "startColumn": 7, - "endLine": 1499, - "endColumn": 16, + "startLine": 1500, + "startColumn": 11, + "endLine": 1500, + "endColumn": 27, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250472,13 +251049,13 @@ "entityType": "Resource", "resourceType": "AWS::Config::ConfigRule" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1564, - "startColumn": 7, - "endLine": 1564, - "endColumn": 16, + "startLine": 1565, + "startColumn": 11, + "endLine": 1565, + "endColumn": 47, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250532,13 +251109,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1647, - "startColumn": 7, - "endLine": 1647, - "endColumn": 16, + "startLine": 1649, + "startColumn": 11, + "endLine": 1649, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250552,13 +251129,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1681, - "startColumn": 7, - "endLine": 1681, - "endColumn": 16, + "startLine": 1683, + "startColumn": 11, + "endLine": 1683, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250572,13 +251149,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1718, - "startColumn": 7, - "endLine": 1718, - "endColumn": 16, + "startLine": 1720, + "startColumn": 11, + "endLine": 1720, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250592,13 +251169,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1757, - "startColumn": 7, - "endLine": 1757, - "endColumn": 16, + "startLine": 1759, + "startColumn": 11, + "endLine": 1759, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250612,13 +251189,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1794, - "startColumn": 7, - "endLine": 1794, - "endColumn": 16, + "startLine": 1796, + "startColumn": 11, + "endLine": 1796, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250652,13 +251229,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1856, - "startColumn": 7, - "endLine": 1856, - "endColumn": 16, + "startLine": 1857, + "startColumn": 11, + "endLine": 1857, + "endColumn": 34, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250672,13 +251249,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1856, - "startColumn": 7, - "endLine": 1856, - "endColumn": 16, + "startLine": 1858, + "startColumn": 11, + "endLine": 1858, + "endColumn": 38, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250692,13 +251269,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Permission" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1894, - "startColumn": 7, - "endLine": 1894, - "endColumn": 16, + "startLine": 1895, + "startColumn": 11, + "endLine": 1895, + "endColumn": 42, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250712,13 +251289,13 @@ "entityType": "Resource", "resourceType": "AWS::Logs::MetricFilter" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 2183, - "startColumn": 7, - "endLine": 2183, - "endColumn": 16, + "startLine": 2185, + "startColumn": 11, + "endLine": 2185, + "endColumn": 48, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -250752,13 +251329,13 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Permission" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 2339, - "startColumn": 7, - "endLine": 2339, - "endColumn": 16, + "startLine": 2340, + "startColumn": 11, + "endLine": 2340, + "endColumn": 45, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -254311,10 +254888,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 230, - "startColumn": 5, - "endLine": 230, - "endColumn": 18, + "startLine": 231, + "startColumn": 6, + "endLine": 231, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -254401,10 +254978,10 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 322, - "startColumn": 5, - "endLine": 322, - "endColumn": 18, + "startLine": 323, + "startColumn": 6, + "endLine": 323, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -254815,10 +255392,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 13, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -254868,12 +255445,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.Tags.0.Value.Fn::Join", + "propertyPath": "Properties.Tags.0.Value.Fn::Join.0", "category": "Intrinsic Function", "startLine": 106, - "startColumn": 7, + "startColumn": 20, "endLine": 106, - "endColumn": 16, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -254887,12 +255464,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 113, - "startColumn": 7, - "endLine": 113, - "endColumn": 16, + "startLine": 114, + "startColumn": 8, + "endLine": 114, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -254908,10 +255485,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 78, - "startColumn": 5, - "endLine": 78, - "endColumn": 14, + "startLine": 79, + "startColumn": 6, + "endLine": 79, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/networkinterface", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -254931,10 +255508,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 96, - "startColumn": 5, - "endLine": 96, - "endColumn": 18, + "startLine": 97, + "startColumn": 6, + "endLine": 97, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -254954,10 +255531,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 100, - "startColumn": 5, - "endLine": 100, - "endColumn": 13, + "startLine": 101, + "startColumn": 6, + "endLine": 101, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -254977,10 +255554,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 111, - "startColumn": 5, - "endLine": 111, - "endColumn": 14, + "startLine": 112, + "startColumn": 6, + "endLine": 112, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -255000,10 +255577,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 129, - "startColumn": 5, - "endLine": 129, - "endColumn": 13, + "startLine": 130, + "startColumn": 6, + "endLine": 130, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -255046,10 +255623,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 143, - "startColumn": 5, - "endLine": 143, - "endColumn": 18, + "startLine": 144, + "startColumn": 6, + "endLine": 144, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -255073,10 +255650,10 @@ }, "propertyPath": "Properties.NetworkInterfaceId", "category": "Best Practice", - "startLine": 149, - "startColumn": 5, - "endLine": 149, - "endColumn": 24, + "startLine": 150, + "startColumn": 6, + "endLine": 150, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -255123,10 +255700,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 158, - "startColumn": 5, - "endLine": 158, - "endColumn": 18, + "startLine": 159, + "startColumn": 6, + "endLine": 159, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -255195,10 +255772,10 @@ }, "propertyPath": "Properties.MasterUserPassword", "category": "Security", - "startLine": 1016, - "startColumn": 7, - "endLine": 1016, - "endColumn": 25, + "startLine": 1017, + "startColumn": 9, + "endLine": 1017, + "endColumn": 12, "ruleDescription": "Instead of REFing a parameter for a secret use a dynamic reference", "phase": "LINT" }, @@ -255215,10 +255792,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 378, - "startColumn": 7, - "endLine": 378, - "endColumn": 14, + "startLine": 379, + "startColumn": 9, + "endLine": 379, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -255235,10 +255812,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 510, - "startColumn": 7, - "endLine": 510, - "endColumn": 14, + "startLine": 511, + "startColumn": 9, + "endLine": 511, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -255255,10 +255832,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 800, - "startColumn": 7, - "endLine": 800, - "endColumn": 14, + "startLine": 801, + "startColumn": 9, + "endLine": 801, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -255368,12 +255945,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 417, - "startColumn": 5, - "endLine": 417, + "startLine": 418, + "startColumn": 7, + "endLine": 418, "endColumn": 14, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" @@ -255448,13 +256025,13 @@ "entityType": "Resource", "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 723, - "startColumn": 5, - "endLine": 723, - "endColumn": 14, + "startLine": 724, + "startColumn": 7, + "endLine": 724, + "endColumn": 23, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -255468,13 +256045,13 @@ "entityType": "Resource", "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 723, - "startColumn": 5, - "endLine": 723, - "endColumn": 14, + "startLine": 725, + "startColumn": 7, + "endLine": 725, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -255488,13 +256065,13 @@ "entityType": "Resource", "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 759, - "startColumn": 5, - "endLine": 759, - "endColumn": 14, + "startLine": 760, + "startColumn": 7, + "endLine": 760, + "endColumn": 23, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -255508,13 +256085,13 @@ "entityType": "Resource", "resourceType": "AWS::ElasticLoadBalancing::LoadBalancer" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 759, - "startColumn": 5, - "endLine": 759, - "endColumn": 14, + "startLine": 761, + "startColumn": 7, + "endLine": 761, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -255528,13 +256105,13 @@ "entityType": "Resource", "resourceType": "AWS::RDS::DBInstance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1003, - "startColumn": 5, - "endLine": 1003, - "endColumn": 14, + "startLine": 1004, + "startColumn": 7, + "endLine": 1004, + "endColumn": 21, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -255548,13 +256125,13 @@ "entityType": "Resource", "resourceType": "AWS::RDS::DBInstance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 1003, - "startColumn": 5, - "endLine": 1003, - "endColumn": 14, + "startLine": 1005, + "startColumn": 7, + "endLine": 1005, + "endColumn": 24, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -256777,12 +257354,12 @@ "logicalId": "LandingPageURL", "entityType": "Output" }, - "propertyPath": "Outputs/LandingPageURL/Value.Fn::Join", + "propertyPath": "Outputs/LandingPageURL/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 92, - "startColumn": 3, - "endLine": 92, - "endColumn": 17, + "startLine": 96, + "startColumn": 9, + "endLine": 96, + "endColumn": 11, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256795,12 +257372,12 @@ "logicalId": "WebsiteURL", "entityType": "Output" }, - "propertyPath": "Outputs/WebsiteURL/Value.Fn::Join", + "propertyPath": "Outputs/WebsiteURL/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 105, - "startColumn": 3, - "endLine": 105, - "endColumn": 13, + "startLine": 109, + "startColumn": 9, + "endLine": 109, + "endColumn": 11, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256814,12 +257391,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.copy_landing_content.sources./var/www/html.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.copy_landing_content.sources./var/www/html.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 236, - "startColumn": 15, - "endLine": 236, - "endColumn": 23, + "startLine": 237, + "startColumn": 17, + "endLine": 237, + "endColumn": 19, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256833,12 +257410,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 244, - "startColumn": 17, - "endLine": 244, - "endColumn": 25, + "startLine": 245, + "startColumn": 19, + "endLine": 245, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256852,12 +257429,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 255, - "startColumn": 17, - "endLine": 255, - "endColumn": 25, + "startLine": 256, + "startColumn": 19, + "endLine": 256, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256871,12 +257448,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/cfn-hup.conf.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/cfn-hup.conf.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 261, - "startColumn": 11, - "endLine": 261, - "endColumn": 16, + "startLine": 265, + "startColumn": 19, + "endLine": 265, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256890,12 +257467,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.install_cfn.files./etc/cfn/hooks.d/cfn-auto-reloader.conf.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 261, - "startColumn": 11, - "endLine": 261, - "endColumn": 16, + "startLine": 285, + "startColumn": 19, + "endLine": 285, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256909,12 +257486,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.install_wordpress.files./tmp/create-wp-config.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 324, - "startColumn": 17, - "endLine": 324, - "endColumn": 25, + "startLine": 325, + "startColumn": 19, + "endLine": 325, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256928,12 +257505,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 388, - "startColumn": 11, - "endLine": 388, - "endColumn": 19, + "startLine": 389, + "startColumn": 13, + "endLine": 389, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256947,12 +257524,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 430, - "startColumn": 17, - "endLine": 430, - "endColumn": 25, + "startLine": 431, + "startColumn": 19, + "endLine": 431, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256966,12 +257543,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 441, - "startColumn": 17, - "endLine": 441, - "endColumn": 25, + "startLine": 442, + "startColumn": 19, + "endLine": 442, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -256985,12 +257562,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.nginx.files./tmp/nginx/default.conf.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.nginx.files./tmp/nginx/default.conf.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 447, - "startColumn": 11, - "endLine": 447, - "endColumn": 16, + "startLine": 451, + "startColumn": 19, + "endLine": 451, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -257004,12 +257581,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 520, - "startColumn": 11, - "endLine": 520, - "endColumn": 19, + "startLine": 521, + "startColumn": 13, + "endLine": 521, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -257023,12 +257600,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.44.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.1.44.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 923, - "startColumn": 15, - "endLine": 923, - "endColumn": 23, + "startLine": 924, + "startColumn": 17, + "endLine": 924, + "endColumn": 19, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -257080,10 +257657,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 378, - "startColumn": 7, - "endLine": 378, - "endColumn": 14, + "startLine": 379, + "startColumn": 9, + "endLine": 379, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257103,10 +257680,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 380, - "startColumn": 7, - "endLine": 380, - "endColumn": 19, + "startLine": 381, + "startColumn": 9, + "endLine": 381, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257127,10 +257704,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 382, - "startColumn": 7, - "endLine": 382, - "endColumn": 14, + "startLine": 383, + "startColumn": 9, + "endLine": 383, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257173,10 +257750,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 386, - "startColumn": 7, - "endLine": 386, - "endColumn": 15, + "startLine": 387, + "startColumn": 9, + "endLine": 387, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257219,10 +257796,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 510, - "startColumn": 7, - "endLine": 510, - "endColumn": 14, + "startLine": 511, + "startColumn": 9, + "endLine": 511, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257242,10 +257819,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 512, - "startColumn": 7, - "endLine": 512, - "endColumn": 19, + "startLine": 513, + "startColumn": 9, + "endLine": 513, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257266,10 +257843,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 514, - "startColumn": 7, - "endLine": 514, - "endColumn": 14, + "startLine": 515, + "startColumn": 9, + "endLine": 515, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257312,10 +257889,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 518, - "startColumn": 7, - "endLine": 518, - "endColumn": 15, + "startLine": 519, + "startColumn": 9, + "endLine": 519, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257335,10 +257912,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 563, - "startColumn": 7, - "endLine": 563, - "endColumn": 27, + "startLine": 564, + "startColumn": 9, + "endLine": 564, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257359,10 +257936,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 571, - "startColumn": 7, - "endLine": 571, - "endColumn": 27, + "startLine": 572, + "startColumn": 9, + "endLine": 572, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257383,10 +257960,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 584, - "startColumn": 7, - "endLine": 584, - "endColumn": 30, + "startLine": 585, + "startColumn": 9, + "endLine": 585, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -257428,10 +258005,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 610, - "startColumn": 7, - "endLine": 610, - "endColumn": 30, + "startLine": 611, + "startColumn": 9, + "endLine": 611, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -257473,10 +258050,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 631, - "startColumn": 7, - "endLine": 631, - "endColumn": 27, + "startLine": 632, + "startColumn": 9, + "endLine": 632, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257497,10 +258074,10 @@ }, "propertyPath": "Properties.AutoScalingGroupName", "category": "Best Practice", - "startLine": 639, - "startColumn": 7, - "endLine": 639, - "endColumn": 27, + "startLine": 640, + "startColumn": 9, + "endLine": 640, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257636,10 +258213,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 800, - "startColumn": 7, - "endLine": 800, - "endColumn": 14, + "startLine": 801, + "startColumn": 9, + "endLine": 801, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257659,10 +258236,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 802, - "startColumn": 7, - "endLine": 802, - "endColumn": 19, + "startLine": 803, + "startColumn": 9, + "endLine": 803, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257706,10 +258283,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 806, - "startColumn": 7, - "endLine": 806, - "endColumn": 15, + "startLine": 807, + "startColumn": 9, + "endLine": 807, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257730,10 +258307,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 811, - "startColumn": 7, - "endLine": 811, - "endColumn": 15, + "startLine": 812, + "startColumn": 9, + "endLine": 812, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257799,10 +258376,10 @@ }, "propertyPath": "Properties.DBName", "category": "Best Practice", - "startLine": 1011, - "startColumn": 7, - "endLine": 1011, - "endColumn": 13, + "startLine": 1012, + "startColumn": 9, + "endLine": 1012, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257823,10 +258400,10 @@ }, "propertyPath": "Properties.DBSubnetGroupName", "category": "Best Practice", - "startLine": 1013, - "startColumn": 7, - "endLine": 1013, - "endColumn": 24, + "startLine": 1014, + "startColumn": 9, + "endLine": 1014, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257870,10 +258447,10 @@ }, "propertyPath": "Properties.MasterUsername", "category": "Best Practice", - "startLine": 1018, - "startColumn": 7, - "endLine": 1018, - "endColumn": 21, + "startLine": 1019, + "startColumn": 9, + "endLine": 1019, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-rpdk.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -257963,10 +258540,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 1029, - "startColumn": 7, - "endLine": 1029, - "endColumn": 13, + "startLine": 1030, + "startColumn": 9, + "endLine": 1030, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -258008,9 +258585,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1089, - "startColumn": 7, - "endLine": 1089, + "startLine": 1090, + "startColumn": 9, + "endLine": 1090, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258053,9 +258630,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1117, - "startColumn": 7, - "endLine": 1117, + "startLine": 1118, + "startColumn": 9, + "endLine": 1118, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258098,9 +258675,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1135, - "startColumn": 7, - "endLine": 1135, + "startLine": 1136, + "startColumn": 9, + "endLine": 1136, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258143,9 +258720,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1146, - "startColumn": 7, - "endLine": 1146, + "startLine": 1147, + "startColumn": 9, + "endLine": 1147, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258188,9 +258765,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1174, - "startColumn": 7, - "endLine": 1174, + "startLine": 1175, + "startColumn": 9, + "endLine": 1175, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258211,10 +258788,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 1200, - "startColumn": 7, - "endLine": 1200, - "endColumn": 13, + "startLine": 1201, + "startColumn": 9, + "endLine": 1201, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -258618,9 +259195,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 166, - "startColumn": 7, - "endLine": 166, + "startLine": 167, + "startColumn": 9, + "endLine": 167, "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258685,9 +259262,9 @@ }, "propertyPath": "Properties.FunctionName", "category": "Best Practice", - "startLine": 175, - "startColumn": 7, - "endLine": 175, + "startLine": 176, + "startColumn": 9, + "endLine": 176, "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -258948,13 +259525,13 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Add a Condition to 'ApplicationTemplate' that implies 'EulaAccepted'", "category": "Reference", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, @@ -258968,53 +259545,53 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Add a Condition to 'ConfigRulesTemplate' that implies 'EulaAccepted'", "category": "Reference", - "startLine": 388, - "startColumn": 5, - "endLine": 388, - "endColumn": 14, + "startLine": 389, + "startColumn": 7, + "endLine": 389, + "endColumn": 18, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, { "ruleId": "E3005", "severity": "ERROR", - "message": "'LoggingTemplate' will not exist when condition 'EulaAccepted' is False", + "message": "'ProductionVpcTemplate' will not exist when condition 'EulaAccepted' is False", "source": "CFN_LINT", "entity": { "logicalId": "ConfigRulesTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Add a Condition to 'ConfigRulesTemplate' that implies 'EulaAccepted'", "category": "Reference", - "startLine": 388, - "startColumn": 5, - "endLine": 388, - "endColumn": 14, + "startLine": 390, + "startColumn": 7, + "endLine": 390, + "endColumn": 28, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, { "ruleId": "E3005", "severity": "ERROR", - "message": "'ProductionVpcTemplate' will not exist when condition 'EulaAccepted' is False", + "message": "'LoggingTemplate' will not exist when condition 'EulaAccepted' is False", "source": "CFN_LINT", "entity": { "logicalId": "ConfigRulesTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.3", "suggestedFix": "Add a Condition to 'ConfigRulesTemplate' that implies 'EulaAccepted'", "category": "Reference", - "startLine": 388, - "startColumn": 5, - "endLine": 388, - "endColumn": 14, + "startLine": 392, + "startColumn": 7, + "endLine": 392, + "endColumn": 22, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, @@ -259051,10 +259628,10 @@ "propertyPath": "Properties.Parameters.pAppPrivateSubnetA", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 292, - "startColumn": 9, - "endLine": 292, - "endColumn": 27, + "startLine": 293, + "startColumn": 11, + "endLine": 293, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259071,10 +259648,10 @@ "propertyPath": "Properties.Parameters.pAppPrivateSubnetB", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 296, - "startColumn": 9, - "endLine": 296, - "endColumn": 27, + "startLine": 297, + "startColumn": 11, + "endLine": 297, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259091,10 +259668,10 @@ "propertyPath": "Properties.Parameters.pDBPrivateSubnetA", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 310, - "startColumn": 9, - "endLine": 310, - "endColumn": 26, + "startLine": 311, + "startColumn": 11, + "endLine": 311, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259111,10 +259688,10 @@ "propertyPath": "Properties.Parameters.pDBPrivateSubnetB", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 314, - "startColumn": 9, - "endLine": 314, - "endColumn": 26, + "startLine": 315, + "startColumn": 11, + "endLine": 315, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259131,10 +259708,10 @@ "propertyPath": "Properties.Parameters.pDMZSubnetA", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 319, - "startColumn": 9, - "endLine": 319, - "endColumn": 20, + "startLine": 320, + "startColumn": 11, + "endLine": 320, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259151,10 +259728,10 @@ "propertyPath": "Properties.Parameters.pDMZSubnetB", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 323, - "startColumn": 9, - "endLine": 323, - "endColumn": 20, + "startLine": 324, + "startColumn": 11, + "endLine": 324, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259171,10 +259748,10 @@ "propertyPath": "Properties.Parameters.pProductionVPC", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 344, - "startColumn": 9, - "endLine": 344, - "endColumn": 23, + "startLine": 345, + "startColumn": 11, + "endLine": 345, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259191,10 +259768,10 @@ "propertyPath": "Properties.Parameters.pSecurityAlarmTopic", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 352, - "startColumn": 9, - "endLine": 352, - "endColumn": 28, + "startLine": 353, + "startColumn": 11, + "endLine": 353, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259211,10 +259788,10 @@ "propertyPath": "Properties.Parameters.pProductionVPC", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 489, - "startColumn": 9, - "endLine": 489, - "endColumn": 23, + "startLine": 490, + "startColumn": 11, + "endLine": 490, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259231,10 +259808,10 @@ "propertyPath": "Properties.Parameters.pRouteTableProdPrivate", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 497, - "startColumn": 9, - "endLine": 497, - "endColumn": 31, + "startLine": 498, + "startColumn": 11, + "endLine": 498, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259251,10 +259828,10 @@ "propertyPath": "Properties.Parameters.pRouteTableProdPublic", "suggestedFix": "Add a Condition to the referencing resource that implies the target's condition", "category": "Best Practice", - "startLine": 501, - "startColumn": 9, - "endLine": 501, - "endColumn": 30, + "startLine": 502, + "startColumn": 11, + "endLine": 502, + "endColumn": 21, "ruleDescription": "Ref/GetAtt to resource that is available when conditions are applied", "phase": "LINT" }, @@ -259376,180 +259953,180 @@ { "ruleId": "W3005", "severity": "WARN", - "message": "'ManagementVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDeepSecurityAgentDownload'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pAppPrivateSubnetA'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ManagementVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDeepSecurityHeartbeat'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pAppPrivateSubnetB'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pAppPrivateSubnetA'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDBPrivateSubnetA'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pAppPrivateSubnetB'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDBPrivateSubnetB'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDBPrivateSubnetA'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDMZSubnetA'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDBPrivateSubnetB'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDMZSubnetB'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDMZSubnetA'", + "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pProductionVPC'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 278, + "startColumn": 7, + "endLine": 278, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDMZSubnetB'", + "message": "'ManagementVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDeepSecurityAgentDownload'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 279, + "startColumn": 7, + "endLine": 279, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, { "ruleId": "W3005", "severity": "WARN", - "message": "'ProductionVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pProductionVPC'", + "message": "'ManagementVpcTemplate' dependency already enforced by a 'GetAtt' at 'Properties.Parameters.pDeepSecurityHeartbeat'", "source": "CFN_LINT", "entity": { "logicalId": "ApplicationTemplate", "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.1", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 277, - "startColumn": 5, - "endLine": 277, - "endColumn": 14, + "startLine": 279, + "startColumn": 7, + "endLine": 279, + "endColumn": 28, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -261235,10 +261812,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 63, - "startColumn": 7, - "endLine": 63, - "endColumn": 13, + "startLine": 64, + "startColumn": 9, + "endLine": 64, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -261258,10 +261835,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 135, - "startColumn": 7, - "endLine": 135, - "endColumn": 19, + "startLine": 136, + "startColumn": 9, + "endLine": 136, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261353,10 +261930,10 @@ }, "propertyPath": "Properties.Bucket", "category": "Best Practice", - "startLine": 234, - "startColumn": 7, - "endLine": 234, - "endColumn": 13, + "startLine": 235, + "startColumn": 9, + "endLine": 235, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -261399,10 +261976,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 383, - "startColumn": 7, - "endLine": 383, - "endColumn": 19, + "startLine": 384, + "startColumn": 9, + "endLine": 384, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261472,10 +262049,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 424, - "startColumn": 7, - "endLine": 424, - "endColumn": 19, + "startLine": 425, + "startColumn": 9, + "endLine": 425, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261499,10 +262076,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 435, - "startColumn": 7, - "endLine": 435, - "endColumn": 19, + "startLine": 436, + "startColumn": 9, + "endLine": 436, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261549,10 +262126,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 463, - "startColumn": 7, - "endLine": 463, - "endColumn": 19, + "startLine": 464, + "startColumn": 9, + "endLine": 464, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261622,10 +262199,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 514, - "startColumn": 7, - "endLine": 514, - "endColumn": 19, + "startLine": 515, + "startColumn": 9, + "endLine": 515, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261672,10 +262249,10 @@ }, "propertyPath": "Properties.LogGroupName", "category": "Best Practice", - "startLine": 539, - "startColumn": 7, - "endLine": 539, - "endColumn": 19, + "startLine": 540, + "startColumn": 9, + "endLine": 540, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-logs.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -261997,13 +262574,13 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Add a Condition to 'rDeepSecurityInfrastructureTemplate' that implies 'cCreatePeeringProduction'", "category": "Reference", - "startLine": 333, - "startColumn": 5, - "endLine": 333, - "endColumn": 14, + "startLine": 334, + "startColumn": 7, + "endLine": 334, + "endColumn": 24, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, @@ -262020,10 +262597,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 512, - "startColumn": 7, - "endLine": 512, - "endColumn": 14, + "startLine": 513, + "startColumn": 9, + "endLine": 513, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -262040,10 +262617,10 @@ "propertyPath": "Properties.DestinationCidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 628, - "startColumn": 7, - "endLine": 628, - "endColumn": 27, + "startLine": 629, + "startColumn": 9, + "endLine": 629, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -262060,10 +262637,10 @@ "propertyPath": "Properties.DestinationCidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 638, - "startColumn": 7, - "endLine": 638, - "endColumn": 27, + "startLine": 639, + "startColumn": 9, + "endLine": 639, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -262175,13 +262752,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 479, - "startColumn": 5, - "endLine": 479, - "endColumn": 14, + "startLine": 480, + "startColumn": 7, + "endLine": 480, + "endColumn": 42, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -262195,13 +262772,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 479, - "startColumn": 5, - "endLine": 479, - "endColumn": 14, + "startLine": 480, + "startColumn": 7, + "endLine": 480, + "endColumn": 42, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -262536,12 +263113,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::DHCPOptions" }, - "propertyPath": "Properties.DomainName.Fn::Join", + "propertyPath": "Properties.DomainName.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 322, - "startColumn": 9, - "endLine": 322, - "endColumn": 17, + "startLine": 323, + "startColumn": 11, + "endLine": 323, + "endColumn": 13, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262555,12 +263132,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.Parameters.CfnUrlPrefix.Fn::Join", + "propertyPath": "Properties.Parameters.CfnUrlPrefix.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 343, - "startColumn": 11, - "endLine": 343, - "endColumn": 19, + "startLine": 344, + "startColumn": 13, + "endLine": 344, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262574,12 +263151,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 388, - "startColumn": 9, - "endLine": 388, - "endColumn": 17, + "startLine": 389, + "startColumn": 11, + "endLine": 389, + "endColumn": 13, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262593,12 +263170,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 491, - "startColumn": 17, - "endLine": 491, - "endColumn": 25, + "startLine": 492, + "startColumn": 19, + "endLine": 492, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262612,12 +263189,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 504, - "startColumn": 17, - "endLine": 504, - "endColumn": 25, + "startLine": 505, + "startColumn": 19, + "endLine": 505, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262631,12 +263208,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 527, - "startColumn": 11, - "endLine": 527, - "endColumn": 19, + "startLine": 528, + "startColumn": 13, + "endLine": 528, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262650,12 +263227,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 579, - "startColumn": 9, - "endLine": 579, - "endColumn": 17, + "startLine": 580, + "startColumn": 11, + "endLine": 580, + "endColumn": 13, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -262743,9 +263320,9 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 305, - "startColumn": 7, - "endLine": 305, + "startLine": 306, + "startColumn": 9, + "endLine": 306, "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -262770,10 +263347,10 @@ }, "propertyPath": "Properties.NetworkInterfaceId", "category": "Best Practice", - "startLine": 309, - "startColumn": 7, - "endLine": 309, - "endColumn": 25, + "startLine": 310, + "startColumn": 9, + "endLine": 310, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -262797,10 +263374,10 @@ }, "propertyPath": "Properties.DhcpOptionsId", "category": "Best Practice", - "startLine": 314, - "startColumn": 7, - "endLine": 314, - "endColumn": 20, + "startLine": 315, + "startColumn": 9, + "endLine": 315, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -262824,9 +263401,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 316, - "startColumn": 7, - "endLine": 316, + "startLine": 317, + "startColumn": 9, + "endLine": 317, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -262851,9 +263428,9 @@ }, "propertyPath": "Properties.DomainName", "category": "Best Practice", - "startLine": 321, - "startColumn": 7, - "endLine": 321, + "startLine": 322, + "startColumn": 9, + "endLine": 322, "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -262895,10 +263472,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 410, - "startColumn": 7, - "endLine": 410, - "endColumn": 15, + "startLine": 411, + "startColumn": 9, + "endLine": 411, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/networkinterface", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -262919,9 +263496,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 421, - "startColumn": 7, - "endLine": 421, + "startLine": 422, + "startColumn": 9, + "endLine": 422, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -262946,10 +263523,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 432, - "startColumn": 7, - "endLine": 432, - "endColumn": 23, + "startLine": 433, + "startColumn": 9, + "endLine": 433, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -262968,10 +263545,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 434, - "startColumn": 7, - "endLine": 434, - "endColumn": 16, + "startLine": 435, + "startColumn": 9, + "endLine": 435, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -262990,9 +263567,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 439, - "startColumn": 7, - "endLine": 439, + "startLine": 440, + "startColumn": 9, + "endLine": 440, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263013,10 +263590,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 444, - "startColumn": 7, - "endLine": 444, - "endColumn": 23, + "startLine": 445, + "startColumn": 9, + "endLine": 445, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263035,10 +263612,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 446, - "startColumn": 7, - "endLine": 446, - "endColumn": 16, + "startLine": 447, + "startColumn": 9, + "endLine": 447, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263057,9 +263634,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 451, - "startColumn": 7, - "endLine": 451, + "startLine": 452, + "startColumn": 9, + "endLine": 452, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263080,10 +263657,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 456, - "startColumn": 7, - "endLine": 456, - "endColumn": 23, + "startLine": 457, + "startColumn": 9, + "endLine": 457, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263102,10 +263679,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 458, - "startColumn": 7, - "endLine": 458, - "endColumn": 16, + "startLine": 459, + "startColumn": 9, + "endLine": 459, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263124,9 +263701,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 463, - "startColumn": 7, - "endLine": 463, + "startLine": 464, + "startColumn": 9, + "endLine": 464, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263147,10 +263724,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 468, - "startColumn": 7, - "endLine": 468, - "endColumn": 23, + "startLine": 469, + "startColumn": 9, + "endLine": 469, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263169,10 +263746,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 470, - "startColumn": 7, - "endLine": 470, - "endColumn": 16, + "startLine": 471, + "startColumn": 9, + "endLine": 471, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263191,9 +263768,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 475, - "startColumn": 7, - "endLine": 475, + "startLine": 476, + "startColumn": 9, + "endLine": 476, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263214,10 +263791,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 512, - "startColumn": 7, - "endLine": 512, - "endColumn": 14, + "startLine": 513, + "startColumn": 9, + "endLine": 513, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263237,10 +263814,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 514, - "startColumn": 7, - "endLine": 514, - "endColumn": 19, + "startLine": 515, + "startColumn": 9, + "endLine": 515, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263260,10 +263837,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 516, - "startColumn": 7, - "endLine": 516, - "endColumn": 14, + "startLine": 517, + "startColumn": 9, + "endLine": 517, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263306,10 +263883,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 525, - "startColumn": 7, - "endLine": 525, - "endColumn": 15, + "startLine": 526, + "startColumn": 9, + "endLine": 526, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263329,9 +263906,9 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 549, - "startColumn": 7, - "endLine": 549, + "startLine": 550, + "startColumn": 9, + "endLine": 550, "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263352,10 +263929,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 553, - "startColumn": 7, - "endLine": 553, - "endColumn": 15, + "startLine": 554, + "startColumn": 9, + "endLine": 554, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -263375,10 +263952,10 @@ }, "propertyPath": "Properties.PeerVpcId", "category": "Best Practice", - "startLine": 588, - "startColumn": 7, - "endLine": 588, - "endColumn": 16, + "startLine": 589, + "startColumn": 9, + "endLine": 589, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-ec2-vpcpeering.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263398,9 +263975,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 593, - "startColumn": 7, - "endLine": 593, + "startLine": 594, + "startColumn": 9, + "endLine": 594, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-ec2-vpcpeering.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -263422,10 +263999,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 598, - "startColumn": 7, - "endLine": 598, - "endColumn": 19, + "startLine": 599, + "startColumn": 9, + "endLine": 599, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263449,10 +264026,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 600, - "startColumn": 7, - "endLine": 600, - "endColumn": 15, + "startLine": 601, + "startColumn": 9, + "endLine": 601, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263476,10 +264053,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 605, - "startColumn": 7, - "endLine": 605, - "endColumn": 19, + "startLine": 606, + "startColumn": 9, + "endLine": 606, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263503,10 +264080,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 607, - "startColumn": 7, - "endLine": 607, - "endColumn": 15, + "startLine": 608, + "startColumn": 9, + "endLine": 608, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263530,10 +264107,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 612, - "startColumn": 7, - "endLine": 612, - "endColumn": 19, + "startLine": 613, + "startColumn": 9, + "endLine": 613, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263557,10 +264134,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 614, - "startColumn": 7, - "endLine": 614, - "endColumn": 15, + "startLine": 615, + "startColumn": 9, + "endLine": 615, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263607,10 +264184,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 622, - "startColumn": 7, - "endLine": 622, - "endColumn": 19, + "startLine": 623, + "startColumn": 9, + "endLine": 623, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263631,10 +264208,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 628, - "startColumn": 7, - "endLine": 628, - "endColumn": 27, + "startLine": 629, + "startColumn": 9, + "endLine": 629, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263654,10 +264231,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 630, - "startColumn": 7, - "endLine": 630, - "endColumn": 19, + "startLine": 631, + "startColumn": 9, + "endLine": 631, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263678,10 +264255,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 638, - "startColumn": 7, - "endLine": 638, - "endColumn": 27, + "startLine": 639, + "startColumn": 9, + "endLine": 639, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263701,10 +264278,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 640, - "startColumn": 7, - "endLine": 640, - "endColumn": 19, + "startLine": 641, + "startColumn": 9, + "endLine": 641, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263725,10 +264302,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 648, - "startColumn": 7, - "endLine": 648, - "endColumn": 27, + "startLine": 649, + "startColumn": 9, + "endLine": 649, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263748,10 +264325,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 650, - "startColumn": 7, - "endLine": 650, - "endColumn": 19, + "startLine": 651, + "startColumn": 9, + "endLine": 651, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263771,10 +264348,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 658, - "startColumn": 7, - "endLine": 658, - "endColumn": 27, + "startLine": 659, + "startColumn": 9, + "endLine": 659, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263794,10 +264371,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 660, - "startColumn": 7, - "endLine": 660, - "endColumn": 19, + "startLine": 661, + "startColumn": 9, + "endLine": 661, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263817,9 +264394,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 670, - "startColumn": 7, - "endLine": 670, + "startLine": 671, + "startColumn": 9, + "endLine": 671, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -263841,9 +264418,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 678, - "startColumn": 7, - "endLine": 678, + "startLine": 679, + "startColumn": 9, + "endLine": 679, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -263887,9 +264464,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 698, - "startColumn": 7, - "endLine": 698, + "startLine": 699, + "startColumn": 9, + "endLine": 699, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263932,9 +264509,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 712, - "startColumn": 7, - "endLine": 712, + "startLine": 713, + "startColumn": 9, + "endLine": 713, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -263977,9 +264554,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 727, - "startColumn": 7, - "endLine": 727, + "startLine": 728, + "startColumn": 9, + "endLine": 728, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -264022,9 +264599,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 747, - "startColumn": 7, - "endLine": 747, + "startLine": 748, + "startColumn": 9, + "endLine": 748, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -264045,10 +264622,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 752, - "startColumn": 7, - "endLine": 752, - "endColumn": 16, + "startLine": 753, + "startColumn": 9, + "endLine": 753, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -264089,10 +264666,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 764, - "startColumn": 7, - "endLine": 764, - "endColumn": 19, + "startLine": 765, + "startColumn": 9, + "endLine": 765, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -264116,10 +264693,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 766, - "startColumn": 7, - "endLine": 766, - "endColumn": 15, + "startLine": 767, + "startColumn": 9, + "endLine": 767, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -264273,10 +264850,10 @@ "propertyPath": "Properties.CidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 211, - "startColumn": 7, - "endLine": 211, - "endColumn": 16, + "startLine": 212, + "startColumn": 9, + "endLine": 212, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -264293,10 +264870,10 @@ "propertyPath": "Properties.CidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 226, - "startColumn": 7, - "endLine": 226, - "endColumn": 16, + "startLine": 227, + "startColumn": 9, + "endLine": 227, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -264313,10 +264890,10 @@ "propertyPath": "Properties.CidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 241, - "startColumn": 7, - "endLine": 241, - "endColumn": 16, + "startLine": 242, + "startColumn": 9, + "endLine": 242, + "endColumn": 12, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -265459,12 +266036,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 549, - "startColumn": 9, - "endLine": 549, - "endColumn": 17, + "startLine": 550, + "startColumn": 11, + "endLine": 550, + "endColumn": 13, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -265516,10 +266093,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 180, - "startColumn": 7, - "endLine": 180, - "endColumn": 23, + "startLine": 181, + "startColumn": 9, + "endLine": 181, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265539,10 +266116,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 182, - "startColumn": 7, - "endLine": 182, - "endColumn": 16, + "startLine": 183, + "startColumn": 9, + "endLine": 183, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265561,9 +266138,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 190, - "startColumn": 7, - "endLine": 190, + "startLine": 191, + "startColumn": 9, + "endLine": 191, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265584,10 +266161,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 195, - "startColumn": 7, - "endLine": 195, - "endColumn": 19, + "startLine": 196, + "startColumn": 9, + "endLine": 196, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265611,10 +266188,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 197, - "startColumn": 7, - "endLine": 197, - "endColumn": 15, + "startLine": 198, + "startColumn": 9, + "endLine": 198, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265638,10 +266215,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 202, - "startColumn": 7, - "endLine": 202, - "endColumn": 19, + "startLine": 203, + "startColumn": 9, + "endLine": 203, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265665,10 +266242,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 204, - "startColumn": 7, - "endLine": 204, - "endColumn": 15, + "startLine": 205, + "startColumn": 9, + "endLine": 205, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265692,10 +266269,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 209, - "startColumn": 7, - "endLine": 209, - "endColumn": 23, + "startLine": 210, + "startColumn": 9, + "endLine": 210, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265715,10 +266292,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 211, - "startColumn": 7, - "endLine": 211, - "endColumn": 16, + "startLine": 212, + "startColumn": 9, + "endLine": 212, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265737,9 +266314,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 219, - "startColumn": 7, - "endLine": 219, + "startLine": 220, + "startColumn": 9, + "endLine": 220, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265760,10 +266337,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 224, - "startColumn": 7, - "endLine": 224, - "endColumn": 23, + "startLine": 225, + "startColumn": 9, + "endLine": 225, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265783,10 +266360,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 226, - "startColumn": 7, - "endLine": 226, - "endColumn": 16, + "startLine": 227, + "startColumn": 9, + "endLine": 227, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265805,9 +266382,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 234, - "startColumn": 7, - "endLine": 234, + "startLine": 235, + "startColumn": 9, + "endLine": 235, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265828,10 +266405,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 239, - "startColumn": 7, - "endLine": 239, - "endColumn": 23, + "startLine": 240, + "startColumn": 9, + "endLine": 240, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265851,10 +266428,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 241, - "startColumn": 7, - "endLine": 241, - "endColumn": 16, + "startLine": 242, + "startColumn": 9, + "endLine": 242, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265873,9 +266450,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 249, - "startColumn": 7, - "endLine": 249, + "startLine": 250, + "startColumn": 9, + "endLine": 250, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265896,10 +266473,10 @@ }, "propertyPath": "Properties.DhcpOptionsId", "category": "Best Practice", - "startLine": 254, - "startColumn": 7, - "endLine": 254, - "endColumn": 20, + "startLine": 255, + "startColumn": 9, + "endLine": 255, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -265923,9 +266500,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 256, - "startColumn": 7, - "endLine": 256, + "startLine": 257, + "startColumn": 9, + "endLine": 257, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -265950,10 +266527,10 @@ }, "propertyPath": "Properties.DomainName", "category": "Best Practice", - "startLine": 261, - "startColumn": 7, - "endLine": 261, - "endColumn": 17, + "startLine": 262, + "startColumn": 9, + "endLine": 262, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -265994,10 +266571,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 274, - "startColumn": 7, - "endLine": 274, - "endColumn": 23, + "startLine": 275, + "startColumn": 9, + "endLine": 275, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -266017,10 +266594,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 276, - "startColumn": 7, - "endLine": 276, - "endColumn": 16, + "startLine": 277, + "startColumn": 9, + "endLine": 277, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -266039,9 +266616,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 284, - "startColumn": 7, - "endLine": 284, + "startLine": 285, + "startColumn": 9, + "endLine": 285, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266062,10 +266639,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 289, - "startColumn": 7, - "endLine": 289, - "endColumn": 23, + "startLine": 290, + "startColumn": 9, + "endLine": 290, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -266085,10 +266662,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 291, - "startColumn": 7, - "endLine": 291, - "endColumn": 16, + "startLine": 292, + "startColumn": 9, + "endLine": 292, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -266107,9 +266684,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 299, - "startColumn": 7, - "endLine": 299, + "startLine": 300, + "startColumn": 9, + "endLine": 300, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266130,9 +266707,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 312, - "startColumn": 7, - "endLine": 312, + "startLine": 313, + "startColumn": 9, + "endLine": 313, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -266157,10 +266734,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 326, - "startColumn": 7, - "endLine": 326, - "endColumn": 19, + "startLine": 327, + "startColumn": 9, + "endLine": 327, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266184,10 +266761,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 328, - "startColumn": 7, - "endLine": 328, - "endColumn": 15, + "startLine": 329, + "startColumn": 9, + "endLine": 329, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266211,10 +266788,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 333, - "startColumn": 7, - "endLine": 333, - "endColumn": 19, + "startLine": 334, + "startColumn": 9, + "endLine": 334, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266238,10 +266815,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 335, - "startColumn": 7, - "endLine": 335, - "endColumn": 15, + "startLine": 336, + "startColumn": 9, + "endLine": 336, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266265,10 +266842,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 340, - "startColumn": 7, - "endLine": 340, - "endColumn": 19, + "startLine": 341, + "startColumn": 9, + "endLine": 341, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266292,10 +266869,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 342, - "startColumn": 7, - "endLine": 342, - "endColumn": 15, + "startLine": 343, + "startColumn": 9, + "endLine": 343, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266319,10 +266896,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 347, - "startColumn": 7, - "endLine": 347, - "endColumn": 19, + "startLine": 348, + "startColumn": 9, + "endLine": 348, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266346,10 +266923,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 349, - "startColumn": 7, - "endLine": 349, - "endColumn": 15, + "startLine": 350, + "startColumn": 9, + "endLine": 350, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266373,10 +266950,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 354, - "startColumn": 7, - "endLine": 354, - "endColumn": 19, + "startLine": 355, + "startColumn": 9, + "endLine": 355, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266400,10 +266977,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 356, - "startColumn": 7, - "endLine": 356, - "endColumn": 15, + "startLine": 357, + "startColumn": 9, + "endLine": 357, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266427,10 +267004,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 361, - "startColumn": 7, - "endLine": 361, - "endColumn": 19, + "startLine": 362, + "startColumn": 9, + "endLine": 362, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266454,10 +267031,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 363, - "startColumn": 7, - "endLine": 363, - "endColumn": 15, + "startLine": 364, + "startColumn": 9, + "endLine": 364, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266481,9 +267058,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 368, - "startColumn": 7, - "endLine": 368, + "startLine": 369, + "startColumn": 9, + "endLine": 369, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -266505,9 +267082,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 373, - "startColumn": 7, - "endLine": 373, + "startLine": 374, + "startColumn": 9, + "endLine": 374, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -266552,10 +267129,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 380, - "startColumn": 7, - "endLine": 380, - "endColumn": 19, + "startLine": 381, + "startColumn": 9, + "endLine": 381, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266622,10 +267199,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 393, - "startColumn": 7, - "endLine": 393, - "endColumn": 19, + "startLine": 394, + "startColumn": 9, + "endLine": 394, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266669,10 +267246,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 405, - "startColumn": 7, - "endLine": 405, - "endColumn": 19, + "startLine": 406, + "startColumn": 9, + "endLine": 406, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266716,10 +267293,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 418, - "startColumn": 7, - "endLine": 418, - "endColumn": 19, + "startLine": 419, + "startColumn": 9, + "endLine": 419, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266786,10 +267363,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 431, - "startColumn": 7, - "endLine": 431, - "endColumn": 19, + "startLine": 432, + "startColumn": 9, + "endLine": 432, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266833,10 +267410,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 443, - "startColumn": 7, - "endLine": 443, - "endColumn": 19, + "startLine": 444, + "startColumn": 9, + "endLine": 444, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266903,10 +267480,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 456, - "startColumn": 7, - "endLine": 456, - "endColumn": 19, + "startLine": 457, + "startColumn": 9, + "endLine": 457, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266950,10 +267527,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 468, - "startColumn": 7, - "endLine": 468, - "endColumn": 19, + "startLine": 469, + "startColumn": 9, + "endLine": 469, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -266997,10 +267574,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 481, - "startColumn": 7, - "endLine": 481, - "endColumn": 19, + "startLine": 482, + "startColumn": 9, + "endLine": 482, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267044,10 +267621,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 494, - "startColumn": 7, - "endLine": 494, - "endColumn": 19, + "startLine": 495, + "startColumn": 9, + "endLine": 495, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267091,10 +267668,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 506, - "startColumn": 7, - "endLine": 506, - "endColumn": 19, + "startLine": 507, + "startColumn": 9, + "endLine": 507, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267138,9 +267715,9 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 519, - "startColumn": 7, - "endLine": 519, + "startLine": 520, + "startColumn": 9, + "endLine": 520, "endColumn": 19, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267161,10 +267738,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 523, - "startColumn": 7, - "endLine": 523, - "endColumn": 15, + "startLine": 524, + "startColumn": 9, + "endLine": 524, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -267184,10 +267761,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 557, - "startColumn": 7, - "endLine": 557, - "endColumn": 19, + "startLine": 558, + "startColumn": 9, + "endLine": 558, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267211,10 +267788,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 559, - "startColumn": 7, - "endLine": 559, - "endColumn": 15, + "startLine": 560, + "startColumn": 9, + "endLine": 560, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267238,10 +267815,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 564, - "startColumn": 7, - "endLine": 564, - "endColumn": 19, + "startLine": 565, + "startColumn": 9, + "endLine": 565, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267265,10 +267842,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 566, - "startColumn": 7, - "endLine": 566, - "endColumn": 15, + "startLine": 567, + "startColumn": 9, + "endLine": 567, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267292,10 +267869,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 571, - "startColumn": 7, - "endLine": 571, - "endColumn": 19, + "startLine": 572, + "startColumn": 9, + "endLine": 572, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267319,10 +267896,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 573, - "startColumn": 7, - "endLine": 573, - "endColumn": 15, + "startLine": 574, + "startColumn": 9, + "endLine": 574, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267346,10 +267923,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 578, - "startColumn": 7, - "endLine": 578, - "endColumn": 19, + "startLine": 579, + "startColumn": 9, + "endLine": 579, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267373,10 +267950,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 580, - "startColumn": 7, - "endLine": 580, - "endColumn": 15, + "startLine": 581, + "startColumn": 9, + "endLine": 581, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267423,10 +268000,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 589, - "startColumn": 7, - "endLine": 589, - "endColumn": 19, + "startLine": 590, + "startColumn": 9, + "endLine": 590, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267470,10 +268047,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 598, - "startColumn": 7, - "endLine": 598, - "endColumn": 19, + "startLine": 599, + "startColumn": 9, + "endLine": 599, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267494,9 +268071,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 606, - "startColumn": 7, - "endLine": 606, + "startLine": 607, + "startColumn": 9, + "endLine": 607, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -267518,9 +268095,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 614, - "startColumn": 7, - "endLine": 614, + "startLine": 615, + "startColumn": 9, + "endLine": 615, "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", @@ -267564,9 +268141,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 632, - "startColumn": 7, - "endLine": 632, + "startLine": 633, + "startColumn": 9, + "endLine": 633, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267609,9 +268186,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 650, - "startColumn": 7, - "endLine": 650, + "startLine": 651, + "startColumn": 9, + "endLine": 651, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267654,9 +268231,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 673, - "startColumn": 7, - "endLine": 673, + "startLine": 674, + "startColumn": 9, + "endLine": 674, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -267677,10 +268254,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 678, - "startColumn": 7, - "endLine": 678, - "endColumn": 16, + "startLine": 679, + "startColumn": 9, + "endLine": 679, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -267839,12 +268416,12 @@ "entityType": "Resource", "resourceType": "AWS::Lambda::Function" }, - "propertyPath": "Properties.Code.S3Key", + "propertyPath": "Properties.Code.S3Key.Fn::Sub", "category": "Best Practice", - "startLine": 803, - "startColumn": 9, - "endLine": 803, - "endColumn": 14, + "startLine": 804, + "startColumn": 11, + "endLine": 804, + "endColumn": 18, "ruleDescription": "Sub isn't needed if it doesn't have a variable defined", "phase": "LINT" }, @@ -268061,13 +268638,13 @@ "entityType": "Resource", "resourceType": "Custom::GenerateKeys" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", - "startLine": 774, - "startColumn": 5, - "endLine": 774, - "endColumn": 14, + "startLine": 775, + "startColumn": 7, + "endLine": 775, + "endColumn": 13, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -268586,10 +269163,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Security", - "startLine": 355, - "startColumn": 7, - "endLine": 355, - "endColumn": 14, + "startLine": 356, + "startColumn": 9, + "endLine": 356, + "endColumn": 22, "ruleDescription": "Hardcoded AMI ID", "phase": "LINT" }, @@ -268602,12 +269179,12 @@ "logicalId": "ContainerAccessELBName", "entityType": "Output" }, - "propertyPath": "Outputs/ContainerAccessELBName/Value.Fn::Join", + "propertyPath": "Outputs/ContainerAccessELBName/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 123, - "startColumn": 3, - "endLine": 123, - "endColumn": 25, + "startLine": 127, + "startColumn": 9, + "endLine": 127, + "endColumn": 11, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268620,12 +269197,12 @@ "logicalId": "OpenShiftUI", "entityType": "Output" }, - "propertyPath": "Outputs/OpenShiftUI/Value.Fn::Join", + "propertyPath": "Outputs/OpenShiftUI/Value.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 132, - "startColumn": 3, - "endLine": 132, - "endColumn": 14, + "startLine": 136, + "startColumn": 9, + "endLine": 136, + "endColumn": 11, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268639,12 +269216,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 301, - "startColumn": 11, - "endLine": 301, - "endColumn": 16, + "startLine": 305, + "startColumn": 19, + "endLine": 305, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268658,12 +269235,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.SetPrivateKey.files./root/.ssh/id_rsa.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.SetPrivateKey.files./root/.ssh/id_rsa.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 324, - "startColumn": 11, - "endLine": 324, - "endColumn": 16, + "startLine": 328, + "startColumn": 19, + "endLine": 328, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268677,12 +269254,12 @@ "entityType": "Resource", "resourceType": "Custom::GenerateKeys" }, - "propertyPath": "Properties.ResourceProperties.RequestId.Fn::Join", + "propertyPath": "Properties.ResourceProperties.RequestId.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 780, - "startColumn": 11, - "endLine": 780, - "endColumn": 19, + "startLine": 781, + "startColumn": 13, + "endLine": 781, + "endColumn": 15, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268696,12 +269273,12 @@ "entityType": "Resource", "resourceType": "Custom::GenerateKeys" }, - "propertyPath": "Properties.ResponseURL.Fn::Join", + "propertyPath": "Properties.ResponseURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 786, - "startColumn": 9, - "endLine": 786, - "endColumn": 17, + "startLine": 787, + "startColumn": 11, + "endLine": 787, + "endColumn": 13, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268715,12 +269292,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 869, - "startColumn": 11, - "endLine": 869, - "endColumn": 16, + "startLine": 873, + "startColumn": 19, + "endLine": 873, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268734,12 +269311,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1094, - "startColumn": 11, - "endLine": 1094, - "endColumn": 16, + "startLine": 1098, + "startColumn": 19, + "endLine": 1098, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268753,12 +269330,12 @@ "entityType": "Resource", "resourceType": "AWS::AutoScaling::LaunchConfiguration" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.GetPublicKey.files./root/.ssh/public.key.content.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 1423, - "startColumn": 11, - "endLine": 1423, - "endColumn": 16, + "startLine": 1427, + "startColumn": 19, + "endLine": 1427, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -268793,10 +269370,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 355, - "startColumn": 7, - "endLine": 355, - "endColumn": 14, + "startLine": 356, + "startColumn": 9, + "endLine": 356, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -268816,10 +269393,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 360, - "startColumn": 7, - "endLine": 360, - "endColumn": 19, + "startLine": 361, + "startColumn": 9, + "endLine": 361, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -268840,10 +269417,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 362, - "startColumn": 7, - "endLine": 362, - "endColumn": 14, + "startLine": 363, + "startColumn": 9, + "endLine": 363, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -268887,10 +269464,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 375, - "startColumn": 7, - "endLine": 375, - "endColumn": 15, + "startLine": 376, + "startColumn": 9, + "endLine": 376, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -268980,10 +269557,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 846, - "startColumn": 7, - "endLine": 846, - "endColumn": 30, + "startLine": 847, + "startColumn": 9, + "endLine": 847, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -269048,10 +269625,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 906, - "startColumn": 7, - "endLine": 906, - "endColumn": 25, + "startLine": 907, + "startColumn": 9, + "endLine": 907, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269072,10 +269649,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 908, - "startColumn": 7, - "endLine": 908, - "endColumn": 14, + "startLine": 909, + "startColumn": 9, + "endLine": 909, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269118,10 +269695,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 914, - "startColumn": 7, - "endLine": 914, - "endColumn": 19, + "startLine": 915, + "startColumn": 9, + "endLine": 915, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269142,10 +269719,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 916, - "startColumn": 7, - "endLine": 916, - "endColumn": 14, + "startLine": 917, + "startColumn": 9, + "endLine": 917, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269189,10 +269766,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 920, - "startColumn": 7, - "endLine": 920, - "endColumn": 15, + "startLine": 921, + "startColumn": 9, + "endLine": 921, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269235,9 +269812,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1060, - "startColumn": 7, - "endLine": 1060, + "startLine": 1061, + "startColumn": 9, + "endLine": 1061, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269258,10 +269835,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 1068, - "startColumn": 7, - "endLine": 1068, - "endColumn": 30, + "startLine": 1069, + "startColumn": 9, + "endLine": 1069, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -269326,10 +269903,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 1131, - "startColumn": 7, - "endLine": 1131, - "endColumn": 25, + "startLine": 1132, + "startColumn": 9, + "endLine": 1132, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269350,10 +269927,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1133, - "startColumn": 7, - "endLine": 1133, - "endColumn": 14, + "startLine": 1134, + "startColumn": 9, + "endLine": 1134, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269396,10 +269973,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 1139, - "startColumn": 7, - "endLine": 1139, - "endColumn": 19, + "startLine": 1140, + "startColumn": 9, + "endLine": 1140, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269420,10 +269997,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 1141, - "startColumn": 7, - "endLine": 1141, - "endColumn": 14, + "startLine": 1142, + "startColumn": 9, + "endLine": 1142, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269467,10 +270044,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 1145, - "startColumn": 7, - "endLine": 1145, - "endColumn": 15, + "startLine": 1146, + "startColumn": 9, + "endLine": 1146, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269606,10 +270183,10 @@ }, "propertyPath": "Properties.LaunchConfigurationName", "category": "Best Practice", - "startLine": 1353, - "startColumn": 7, - "endLine": 1353, - "endColumn": 30, + "startLine": 1354, + "startColumn": 9, + "endLine": 1354, + "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -269742,9 +270319,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1411, - "startColumn": 7, - "endLine": 1411, + "startLine": 1412, + "startColumn": 9, + "endLine": 1412, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269788,10 +270365,10 @@ }, "propertyPath": "Properties.IamInstanceProfile", "category": "Best Practice", - "startLine": 1465, - "startColumn": 7, - "endLine": 1465, - "endColumn": 25, + "startLine": 1466, + "startColumn": 9, + "endLine": 1466, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269812,10 +270389,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1467, - "startColumn": 7, - "endLine": 1467, - "endColumn": 14, + "startLine": 1468, + "startColumn": 9, + "endLine": 1468, + "endColumn": 22, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269858,10 +270435,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 1473, - "startColumn": 7, - "endLine": 1473, - "endColumn": 19, + "startLine": 1474, + "startColumn": 9, + "endLine": 1474, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269882,10 +270459,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 1475, - "startColumn": 7, - "endLine": 1475, - "endColumn": 14, + "startLine": 1476, + "startColumn": 9, + "endLine": 1476, + "endColumn": 12, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269929,10 +270506,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 1479, - "startColumn": 7, - "endLine": 1479, - "endColumn": 15, + "startLine": 1480, + "startColumn": 9, + "endLine": 1480, + "endColumn": 19, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-autoscaling.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -269975,9 +270552,9 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1653, - "startColumn": 7, - "endLine": 1653, + "startLine": 1654, + "startColumn": 9, + "endLine": 1654, "endColumn": 12, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -270714,13 +271291,13 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Add a Condition to 'rDeepSecurityInfrastructureTemplate' that implies 'cCreatePeeringProduction'", "category": "Reference", - "startLine": 917, - "startColumn": 4, - "endLine": 917, - "endColumn": 14, + "startLine": 918, + "startColumn": 5, + "endLine": 918, + "endColumn": 23, "ruleDescription": "Check DependsOn values for Resources", "phase": "LINT" }, @@ -270737,10 +271314,10 @@ "propertyPath": "Properties.ImageId", "suggestedFix": "Use parameter type AWS::EC2::Image::Id", "category": "Best Practice", - "startLine": 649, - "startColumn": 5, - "endLine": 649, - "endColumn": 13, + "startLine": 650, + "startColumn": 6, + "endLine": 650, + "endColumn": 10, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -270757,10 +271334,10 @@ "propertyPath": "Properties.DestinationCidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 865, - "startColumn": 5, - "endLine": 865, - "endColumn": 26, + "startLine": 866, + "startColumn": 6, + "endLine": 866, + "endColumn": 10, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -270777,10 +271354,10 @@ "propertyPath": "Properties.DestinationCidrBlock", "suggestedFix": "Validate the parameter value matches CIDR format", "category": "Best Practice", - "startLine": 910, - "startColumn": 5, - "endLine": 910, - "endColumn": 26, + "startLine": 911, + "startColumn": 6, + "endLine": 911, + "endColumn": 10, "ruleDescription": "Validate the values that come from a Ref function", "phase": "LINT" }, @@ -270910,13 +271487,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", "startLine": 637, - "startColumn": 4, + "startColumn": 18, "endLine": 637, - "endColumn": 14, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -270930,13 +271507,13 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "DependsOn", + "propertyPath": "DependsOn.0", "suggestedFix": "Remove the DependsOn entry", "category": "Best Practice", "startLine": 637, - "startColumn": 4, + "startColumn": 18, "endLine": 637, - "endColumn": 14, + "endColumn": 54, "ruleDescription": "Check obsolete DependsOn configuration for Resources", "phase": "LINT" }, @@ -271271,12 +271848,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", "startLine": 382, - "startColumn": 6, + "startColumn": 19, "endLine": 382, - "endColumn": 15, + "endColumn": 20, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271290,12 +271867,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::DHCPOptions" }, - "propertyPath": "Properties.DomainName.Fn::Join", + "propertyPath": "Properties.DomainName.Fn::Join.0", "category": "Intrinsic Function", "startLine": 542, - "startColumn": 6, + "startColumn": 19, "endLine": 542, - "endColumn": 15, + "endColumn": 20, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271309,12 +271886,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join", + "propertyPath": "Properties.UserData.Fn::Base64.Fn::Join.0", "category": "Intrinsic Function", "startLine": 660, - "startColumn": 7, + "startColumn": 20, "endLine": 660, - "endColumn": 16, + "endColumn": 21, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271328,12 +271905,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.0-download-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 687, - "startColumn": 10, - "endLine": 687, - "endColumn": 19, + "startLine": 688, + "startColumn": 11, + "endLine": 688, + "endColumn": 12, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271347,12 +271924,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::Instance" }, - "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join", + "propertyPath": "Metadata.AWS::CloudFormation::Init.installDeepSecurityAgent.commands.3-activate-DSA.command.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 705, - "startColumn": 10, - "endLine": 705, - "endColumn": 19, + "startLine": 706, + "startColumn": 11, + "endLine": 706, + "endColumn": 12, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271366,12 +271943,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.TemplateURL.Fn::Join", + "propertyPath": "Properties.TemplateURL.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 922, - "startColumn": 8, - "endLine": 922, - "endColumn": 17, + "startLine": 923, + "startColumn": 9, + "endLine": 923, + "endColumn": 10, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271385,12 +271962,12 @@ "entityType": "Resource", "resourceType": "AWS::CloudFormation::Stack" }, - "propertyPath": "Properties.Parameters.CfnUrlPrefix.Fn::Join", + "propertyPath": "Properties.Parameters.CfnUrlPrefix.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 992, - "startColumn": 7, - "endLine": 992, - "endColumn": 16, + "startLine": 993, + "startColumn": 8, + "endLine": 993, + "endColumn": 9, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -271478,10 +272055,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 342, - "startColumn": 5, - "endLine": 342, - "endColumn": 15, + "startLine": 343, + "startColumn": 6, + "endLine": 343, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271522,10 +272099,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 369, - "startColumn": 5, - "endLine": 369, - "endColumn": 11, + "startLine": 370, + "startColumn": 6, + "endLine": 370, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -271571,10 +272148,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 422, - "startColumn": 5, - "endLine": 422, - "endColumn": 11, + "startLine": 423, + "startColumn": 6, + "endLine": 423, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271616,10 +272193,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 441, - "startColumn": 5, - "endLine": 441, - "endColumn": 11, + "startLine": 442, + "startColumn": 6, + "endLine": 442, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271639,10 +272216,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 468, - "startColumn": 5, - "endLine": 468, - "endColumn": 15, + "startLine": 469, + "startColumn": 6, + "endLine": 469, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271661,10 +272238,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 471, - "startColumn": 5, - "endLine": 471, - "endColumn": 22, + "startLine": 472, + "startColumn": 6, + "endLine": 472, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271683,10 +272260,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 474, - "startColumn": 5, - "endLine": 474, - "endColumn": 11, + "startLine": 475, + "startColumn": 6, + "endLine": 475, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271706,10 +272283,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 486, - "startColumn": 5, - "endLine": 486, - "endColumn": 15, + "startLine": 487, + "startColumn": 6, + "endLine": 487, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271728,10 +272305,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 489, - "startColumn": 5, - "endLine": 489, - "endColumn": 22, + "startLine": 490, + "startColumn": 6, + "endLine": 490, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271750,10 +272327,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 492, - "startColumn": 5, - "endLine": 492, - "endColumn": 11, + "startLine": 493, + "startColumn": 6, + "endLine": 493, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271773,10 +272350,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 504, - "startColumn": 5, - "endLine": 504, - "endColumn": 15, + "startLine": 505, + "startColumn": 6, + "endLine": 505, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271795,10 +272372,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 507, - "startColumn": 5, - "endLine": 507, - "endColumn": 22, + "startLine": 508, + "startColumn": 6, + "endLine": 508, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271817,10 +272394,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 510, - "startColumn": 5, - "endLine": 510, - "endColumn": 11, + "startLine": 511, + "startColumn": 6, + "endLine": 511, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271840,10 +272417,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 522, - "startColumn": 5, - "endLine": 522, - "endColumn": 15, + "startLine": 523, + "startColumn": 6, + "endLine": 523, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271862,10 +272439,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 525, - "startColumn": 5, - "endLine": 525, - "endColumn": 22, + "startLine": 526, + "startColumn": 6, + "endLine": 526, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271884,10 +272461,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 528, - "startColumn": 5, - "endLine": 528, - "endColumn": 11, + "startLine": 529, + "startColumn": 6, + "endLine": 529, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271907,10 +272484,10 @@ }, "propertyPath": "Properties.DomainName", "category": "Best Practice", - "startLine": 541, - "startColumn": 5, - "endLine": 541, - "endColumn": 16, + "startLine": 542, + "startColumn": 6, + "endLine": 542, + "endColumn": 15, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -271951,10 +272528,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 558, - "startColumn": 5, - "endLine": 558, - "endColumn": 11, + "startLine": 559, + "startColumn": 6, + "endLine": 559, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -271975,10 +272552,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 570, - "startColumn": 5, - "endLine": 570, - "endColumn": 11, + "startLine": 571, + "startColumn": 6, + "endLine": 571, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -271999,10 +272576,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 582, - "startColumn": 5, - "endLine": 582, - "endColumn": 18, + "startLine": 583, + "startColumn": 6, + "endLine": 583, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272046,10 +272623,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 594, - "startColumn": 5, - "endLine": 594, - "endColumn": 18, + "startLine": 595, + "startColumn": 6, + "endLine": 595, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272073,10 +272650,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 597, - "startColumn": 5, - "endLine": 597, - "endColumn": 14, + "startLine": 598, + "startColumn": 6, + "endLine": 598, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272100,10 +272677,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 605, - "startColumn": 5, - "endLine": 605, - "endColumn": 18, + "startLine": 606, + "startColumn": 6, + "endLine": 606, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272127,10 +272704,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 608, - "startColumn": 5, - "endLine": 608, - "endColumn": 14, + "startLine": 609, + "startColumn": 6, + "endLine": 609, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272154,10 +272731,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 616, - "startColumn": 5, - "endLine": 616, - "endColumn": 18, + "startLine": 617, + "startColumn": 6, + "endLine": 617, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272181,10 +272758,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 619, - "startColumn": 5, - "endLine": 619, - "endColumn": 14, + "startLine": 620, + "startColumn": 6, + "endLine": 620, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272208,10 +272785,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 627, - "startColumn": 5, - "endLine": 627, - "endColumn": 18, + "startLine": 628, + "startColumn": 6, + "endLine": 628, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272235,10 +272812,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 630, - "startColumn": 5, - "endLine": 630, - "endColumn": 14, + "startLine": 631, + "startColumn": 6, + "endLine": 631, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272262,10 +272839,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 639, - "startColumn": 5, - "endLine": 639, - "endColumn": 18, + "startLine": 640, + "startColumn": 6, + "endLine": 640, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272285,10 +272862,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 642, - "startColumn": 5, - "endLine": 642, - "endColumn": 13, + "startLine": 643, + "startColumn": 6, + "endLine": 643, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272308,10 +272885,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 649, - "startColumn": 5, - "endLine": 649, - "endColumn": 13, + "startLine": 650, + "startColumn": 6, + "endLine": 650, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272354,10 +272931,10 @@ }, "propertyPath": "Properties.UserData", "category": "Best Practice", - "startLine": 658, - "startColumn": 5, - "endLine": 658, - "endColumn": 14, + "startLine": 659, + "startColumn": 6, + "endLine": 659, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272377,10 +272954,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 731, - "startColumn": 5, - "endLine": 731, - "endColumn": 18, + "startLine": 732, + "startColumn": 6, + "endLine": 732, + "endColumn": 17, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272404,10 +272981,10 @@ }, "propertyPath": "Properties.NetworkInterfaceId", "category": "Best Practice", - "startLine": 737, - "startColumn": 5, - "endLine": 737, - "endColumn": 24, + "startLine": 738, + "startColumn": 6, + "endLine": 738, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/tree/master/aws-ec2-eipassociation", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272453,10 +273030,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 746, - "startColumn": 5, - "endLine": 746, - "endColumn": 11, + "startLine": 747, + "startColumn": 6, + "endLine": 747, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -272476,10 +273053,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 776, - "startColumn": 5, - "endLine": 776, - "endColumn": 18, + "startLine": 777, + "startColumn": 6, + "endLine": 777, + "endColumn": 17, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -272499,10 +273076,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 779, - "startColumn": 5, - "endLine": 779, - "endColumn": 14, + "startLine": 780, + "startColumn": 6, + "endLine": 780, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -272522,10 +273099,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 788, - "startColumn": 5, - "endLine": 788, - "endColumn": 14, + "startLine": 789, + "startColumn": 6, + "endLine": 789, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2/networkinterface", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272568,10 +273145,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 805, - "startColumn": 5, - "endLine": 805, - "endColumn": 11, + "startLine": 806, + "startColumn": 6, + "endLine": 806, + "endColumn": 10, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -272591,10 +273168,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 831, - "startColumn": 5, - "endLine": 831, - "endColumn": 11, + "startLine": 832, + "startColumn": 6, + "endLine": 832, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272618,10 +273195,10 @@ }, "propertyPath": "Properties.DhcpOptionsId", "category": "Best Practice", - "startLine": 834, - "startColumn": 5, - "endLine": 834, - "endColumn": 19, + "startLine": 835, + "startColumn": 6, + "endLine": 835, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272645,10 +273222,10 @@ }, "propertyPath": "Properties.PeerVpcId", "category": "Best Practice", - "startLine": 843, - "startColumn": 5, - "endLine": 843, - "endColumn": 15, + "startLine": 844, + "startColumn": 6, + "endLine": 844, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-ec2-vpcpeering.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272668,10 +273245,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 846, - "startColumn": 5, - "endLine": 846, - "endColumn": 11, + "startLine": 847, + "startColumn": 6, + "endLine": 847, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-ec2-vpcpeering.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272692,10 +273269,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 859, - "startColumn": 5, - "endLine": 859, - "endColumn": 18, + "startLine": 860, + "startColumn": 6, + "endLine": 860, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272716,10 +273293,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 865, - "startColumn": 5, - "endLine": 865, - "endColumn": 26, + "startLine": 866, + "startColumn": 6, + "endLine": 866, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272739,10 +273316,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 874, - "startColumn": 5, - "endLine": 874, - "endColumn": 18, + "startLine": 875, + "startColumn": 6, + "endLine": 875, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272762,10 +273339,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 880, - "startColumn": 5, - "endLine": 880, - "endColumn": 26, + "startLine": 881, + "startColumn": 6, + "endLine": 881, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272785,10 +273362,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 889, - "startColumn": 5, - "endLine": 889, - "endColumn": 18, + "startLine": 890, + "startColumn": 6, + "endLine": 890, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272808,10 +273385,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 895, - "startColumn": 5, - "endLine": 895, - "endColumn": 26, + "startLine": 896, + "startColumn": 6, + "endLine": 896, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272831,10 +273408,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 904, - "startColumn": 5, - "endLine": 904, - "endColumn": 18, + "startLine": 905, + "startColumn": 6, + "endLine": 905, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -272855,10 +273432,10 @@ }, "propertyPath": "Properties.DestinationCidrBlock", "category": "Best Practice", - "startLine": 910, - "startColumn": 5, - "endLine": 910, - "endColumn": 26, + "startLine": 911, + "startColumn": 6, + "endLine": 911, + "endColumn": 10, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -273896,12 +274473,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::DHCPOptions" }, - "propertyPath": "Properties.DomainName.Fn::If.2.Fn::Join", + "propertyPath": "Properties.DomainName.Fn::If.2.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 489, - "startColumn": 29, - "endLine": 489, - "endColumn": 38, + "startLine": 490, + "startColumn": 33, + "endLine": 490, + "endColumn": 34, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -273915,12 +274492,12 @@ "entityType": "Resource", "resourceType": "AWS::EC2::VPCEndpoint" }, - "propertyPath": "Properties.ServiceName.Fn::Join", + "propertyPath": "Properties.ServiceName.Fn::Join.0", "category": "Intrinsic Function", - "startLine": 2203, - "startColumn": 21, - "endLine": 2203, - "endColumn": 30, + "startLine": 2204, + "startColumn": 25, + "endLine": 2204, + "endColumn": 26, "ruleDescription": "Use Sub instead of Join", "phase": "LINT" }, @@ -273936,9 +274513,9 @@ }, "propertyPath": "Properties.DomainName", "category": "Best Practice", - "startLine": 484, - "startColumn": 17, - "endLine": 484, + "startLine": 485, + "startColumn": 21, + "endLine": 485, "endColumn": 28, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -273981,10 +274558,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 509, - "startColumn": 17, - "endLine": 509, - "endColumn": 27, + "startLine": 510, + "startColumn": 21, + "endLine": 510, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274003,10 +274580,10 @@ }, "propertyPath": "Properties.InstanceTenancy", "category": "Best Practice", - "startLine": 512, - "startColumn": 17, - "endLine": 512, - "endColumn": 33, + "startLine": 513, + "startColumn": 21, + "endLine": 513, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274026,10 +274603,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 530, - "startColumn": 17, - "endLine": 530, - "endColumn": 23, + "startLine": 531, + "startColumn": 21, + "endLine": 531, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -274053,10 +274630,10 @@ }, "propertyPath": "Properties.DhcpOptionsId", "category": "Best Practice", - "startLine": 533, - "startColumn": 17, - "endLine": 533, - "endColumn": 31, + "startLine": 534, + "startColumn": 21, + "endLine": 534, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -274080,10 +274657,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 558, - "startColumn": 17, - "endLine": 558, - "endColumn": 23, + "startLine": 559, + "startColumn": 21, + "endLine": 559, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2-vpc-gateway-attachment.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -274107,10 +274684,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 570, - "startColumn": 17, - "endLine": 570, - "endColumn": 23, + "startLine": 571, + "startColumn": 21, + "endLine": 571, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274130,10 +274707,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 573, - "startColumn": 17, - "endLine": 573, - "endColumn": 27, + "startLine": 574, + "startColumn": 21, + "endLine": 574, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274152,10 +274729,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 576, - "startColumn": 17, - "endLine": 576, - "endColumn": 34, + "startLine": 577, + "startColumn": 21, + "endLine": 577, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274175,10 +274752,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 600, - "startColumn": 17, - "endLine": 600, - "endColumn": 23, + "startLine": 601, + "startColumn": 21, + "endLine": 601, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274198,10 +274775,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 603, - "startColumn": 17, - "endLine": 603, - "endColumn": 27, + "startLine": 604, + "startColumn": 21, + "endLine": 604, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274220,10 +274797,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 606, - "startColumn": 17, - "endLine": 606, - "endColumn": 34, + "startLine": 607, + "startColumn": 21, + "endLine": 607, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274243,10 +274820,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 630, - "startColumn": 17, - "endLine": 630, - "endColumn": 23, + "startLine": 631, + "startColumn": 21, + "endLine": 631, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274266,10 +274843,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 633, - "startColumn": 17, - "endLine": 633, - "endColumn": 27, + "startLine": 634, + "startColumn": 21, + "endLine": 634, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274288,10 +274865,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 636, - "startColumn": 17, - "endLine": 636, - "endColumn": 34, + "startLine": 637, + "startColumn": 21, + "endLine": 637, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274311,10 +274888,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 660, - "startColumn": 17, - "endLine": 660, - "endColumn": 23, + "startLine": 661, + "startColumn": 21, + "endLine": 661, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274334,10 +274911,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 663, - "startColumn": 17, - "endLine": 663, - "endColumn": 27, + "startLine": 664, + "startColumn": 21, + "endLine": 664, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274356,10 +274933,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 666, - "startColumn": 17, - "endLine": 666, - "endColumn": 34, + "startLine": 667, + "startColumn": 21, + "endLine": 667, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274379,10 +274956,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 690, - "startColumn": 17, - "endLine": 690, - "endColumn": 23, + "startLine": 691, + "startColumn": 21, + "endLine": 691, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274402,10 +274979,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 693, - "startColumn": 17, - "endLine": 693, - "endColumn": 27, + "startLine": 694, + "startColumn": 21, + "endLine": 694, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274424,10 +275001,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 696, - "startColumn": 17, - "endLine": 696, - "endColumn": 34, + "startLine": 697, + "startColumn": 21, + "endLine": 697, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274447,10 +275024,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 720, - "startColumn": 17, - "endLine": 720, - "endColumn": 23, + "startLine": 721, + "startColumn": 21, + "endLine": 721, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274470,10 +275047,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 723, - "startColumn": 17, - "endLine": 723, - "endColumn": 27, + "startLine": 724, + "startColumn": 21, + "endLine": 724, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274492,10 +275069,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 726, - "startColumn": 17, - "endLine": 726, - "endColumn": 34, + "startLine": 727, + "startColumn": 21, + "endLine": 727, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274515,10 +275092,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 750, - "startColumn": 17, - "endLine": 750, - "endColumn": 23, + "startLine": 751, + "startColumn": 21, + "endLine": 751, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274538,10 +275115,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 753, - "startColumn": 17, - "endLine": 753, - "endColumn": 27, + "startLine": 754, + "startColumn": 21, + "endLine": 754, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274560,10 +275137,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 756, - "startColumn": 17, - "endLine": 756, - "endColumn": 34, + "startLine": 757, + "startColumn": 21, + "endLine": 757, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274583,10 +275160,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 780, - "startColumn": 17, - "endLine": 780, - "endColumn": 23, + "startLine": 781, + "startColumn": 21, + "endLine": 781, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274606,10 +275183,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 783, - "startColumn": 17, - "endLine": 783, - "endColumn": 27, + "startLine": 784, + "startColumn": 21, + "endLine": 784, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274628,10 +275205,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 786, - "startColumn": 17, - "endLine": 786, - "endColumn": 34, + "startLine": 787, + "startColumn": 21, + "endLine": 787, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274651,10 +275228,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 809, - "startColumn": 17, - "endLine": 809, - "endColumn": 23, + "startLine": 810, + "startColumn": 21, + "endLine": 810, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274674,10 +275251,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 812, - "startColumn": 17, - "endLine": 812, - "endColumn": 27, + "startLine": 813, + "startColumn": 21, + "endLine": 813, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274696,10 +275273,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 815, - "startColumn": 17, - "endLine": 815, - "endColumn": 34, + "startLine": 816, + "startColumn": 21, + "endLine": 816, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274719,10 +275296,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 839, - "startColumn": 17, - "endLine": 839, - "endColumn": 23, + "startLine": 840, + "startColumn": 21, + "endLine": 840, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274742,10 +275319,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 842, - "startColumn": 17, - "endLine": 842, - "endColumn": 27, + "startLine": 843, + "startColumn": 21, + "endLine": 843, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274764,10 +275341,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 845, - "startColumn": 17, - "endLine": 845, - "endColumn": 34, + "startLine": 846, + "startColumn": 21, + "endLine": 846, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274787,10 +275364,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 870, - "startColumn": 17, - "endLine": 870, - "endColumn": 23, + "startLine": 871, + "startColumn": 21, + "endLine": 871, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274810,10 +275387,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 873, - "startColumn": 17, - "endLine": 873, - "endColumn": 27, + "startLine": 874, + "startColumn": 21, + "endLine": 874, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274832,10 +275409,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 876, - "startColumn": 17, - "endLine": 876, - "endColumn": 34, + "startLine": 877, + "startColumn": 21, + "endLine": 877, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274855,10 +275432,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 901, - "startColumn": 17, - "endLine": 901, - "endColumn": 23, + "startLine": 902, + "startColumn": 21, + "endLine": 902, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274878,10 +275455,10 @@ }, "propertyPath": "Properties.CidrBlock", "category": "Best Practice", - "startLine": 904, - "startColumn": 17, - "endLine": 904, - "endColumn": 27, + "startLine": 905, + "startColumn": 21, + "endLine": 905, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274900,10 +275477,10 @@ }, "propertyPath": "Properties.AvailabilityZone", "category": "Best Practice", - "startLine": 907, - "startColumn": 17, - "endLine": 907, - "endColumn": 34, + "startLine": 908, + "startColumn": 21, + "endLine": 908, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -274923,10 +275500,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 932, - "startColumn": 17, - "endLine": 932, - "endColumn": 23, + "startLine": 933, + "startColumn": 21, + "endLine": 933, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -274947,10 +275524,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 951, - "startColumn": 17, - "endLine": 951, - "endColumn": 30, + "startLine": 952, + "startColumn": 21, + "endLine": 952, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -274994,10 +275571,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 983, - "startColumn": 17, - "endLine": 983, - "endColumn": 26, + "startLine": 984, + "startColumn": 21, + "endLine": 984, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275021,10 +275598,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 986, - "startColumn": 17, - "endLine": 986, - "endColumn": 30, + "startLine": 987, + "startColumn": 21, + "endLine": 987, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275048,10 +275625,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 995, - "startColumn": 17, - "endLine": 995, - "endColumn": 23, + "startLine": 996, + "startColumn": 21, + "endLine": 996, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275072,10 +275649,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1014, - "startColumn": 17, - "endLine": 1014, - "endColumn": 30, + "startLine": 1015, + "startColumn": 21, + "endLine": 1015, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275119,10 +275696,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1046, - "startColumn": 17, - "endLine": 1046, - "endColumn": 26, + "startLine": 1047, + "startColumn": 21, + "endLine": 1047, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275146,10 +275723,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1049, - "startColumn": 17, - "endLine": 1049, - "endColumn": 30, + "startLine": 1050, + "startColumn": 21, + "endLine": 1050, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275173,10 +275750,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1058, - "startColumn": 17, - "endLine": 1058, - "endColumn": 23, + "startLine": 1059, + "startColumn": 21, + "endLine": 1059, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275197,10 +275774,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1077, - "startColumn": 17, - "endLine": 1077, - "endColumn": 30, + "startLine": 1078, + "startColumn": 21, + "endLine": 1078, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275244,10 +275821,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1109, - "startColumn": 17, - "endLine": 1109, - "endColumn": 26, + "startLine": 1110, + "startColumn": 21, + "endLine": 1110, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275271,10 +275848,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1112, - "startColumn": 17, - "endLine": 1112, - "endColumn": 30, + "startLine": 1113, + "startColumn": 21, + "endLine": 1113, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275298,10 +275875,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1121, - "startColumn": 17, - "endLine": 1121, - "endColumn": 23, + "startLine": 1122, + "startColumn": 21, + "endLine": 1122, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275322,10 +275899,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1140, - "startColumn": 17, - "endLine": 1140, - "endColumn": 30, + "startLine": 1141, + "startColumn": 21, + "endLine": 1141, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275369,10 +275946,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1172, - "startColumn": 17, - "endLine": 1172, - "endColumn": 26, + "startLine": 1173, + "startColumn": 21, + "endLine": 1173, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275396,10 +275973,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1175, - "startColumn": 17, - "endLine": 1175, - "endColumn": 30, + "startLine": 1176, + "startColumn": 21, + "endLine": 1176, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275423,10 +276000,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1184, - "startColumn": 17, - "endLine": 1184, - "endColumn": 23, + "startLine": 1185, + "startColumn": 21, + "endLine": 1185, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275447,10 +276024,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1203, - "startColumn": 17, - "endLine": 1203, - "endColumn": 30, + "startLine": 1204, + "startColumn": 21, + "endLine": 1204, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275494,10 +276071,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1235, - "startColumn": 17, - "endLine": 1235, - "endColumn": 26, + "startLine": 1236, + "startColumn": 21, + "endLine": 1236, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275521,10 +276098,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1238, - "startColumn": 17, - "endLine": 1238, - "endColumn": 30, + "startLine": 1239, + "startColumn": 21, + "endLine": 1239, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275548,10 +276125,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1247, - "startColumn": 17, - "endLine": 1247, - "endColumn": 23, + "startLine": 1248, + "startColumn": 21, + "endLine": 1248, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275595,10 +276172,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1268, - "startColumn": 17, - "endLine": 1268, - "endColumn": 30, + "startLine": 1269, + "startColumn": 21, + "endLine": 1269, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275665,10 +276242,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1282, - "startColumn": 17, - "endLine": 1282, - "endColumn": 30, + "startLine": 1283, + "startColumn": 21, + "endLine": 1283, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275712,10 +276289,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1294, - "startColumn": 17, - "endLine": 1294, - "endColumn": 26, + "startLine": 1295, + "startColumn": 21, + "endLine": 1295, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275739,10 +276316,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1297, - "startColumn": 17, - "endLine": 1297, - "endColumn": 30, + "startLine": 1298, + "startColumn": 21, + "endLine": 1298, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275766,10 +276343,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1306, - "startColumn": 17, - "endLine": 1306, - "endColumn": 23, + "startLine": 1307, + "startColumn": 21, + "endLine": 1307, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275790,10 +276367,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1325, - "startColumn": 17, - "endLine": 1325, - "endColumn": 30, + "startLine": 1326, + "startColumn": 21, + "endLine": 1326, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275837,10 +276414,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1357, - "startColumn": 17, - "endLine": 1357, - "endColumn": 26, + "startLine": 1358, + "startColumn": 21, + "endLine": 1358, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275864,10 +276441,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1360, - "startColumn": 17, - "endLine": 1360, - "endColumn": 30, + "startLine": 1361, + "startColumn": 21, + "endLine": 1361, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275891,10 +276468,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1369, - "startColumn": 17, - "endLine": 1369, - "endColumn": 23, + "startLine": 1370, + "startColumn": 21, + "endLine": 1370, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -275938,10 +276515,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1390, - "startColumn": 17, - "endLine": 1390, - "endColumn": 30, + "startLine": 1391, + "startColumn": 21, + "endLine": 1391, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276008,10 +276585,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1404, - "startColumn": 17, - "endLine": 1404, - "endColumn": 30, + "startLine": 1405, + "startColumn": 21, + "endLine": 1405, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276055,10 +276632,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1416, - "startColumn": 17, - "endLine": 1416, - "endColumn": 26, + "startLine": 1417, + "startColumn": 21, + "endLine": 1417, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276082,10 +276659,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1419, - "startColumn": 17, - "endLine": 1419, - "endColumn": 30, + "startLine": 1420, + "startColumn": 21, + "endLine": 1420, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276109,10 +276686,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1428, - "startColumn": 17, - "endLine": 1428, - "endColumn": 23, + "startLine": 1429, + "startColumn": 21, + "endLine": 1429, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276133,10 +276710,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1447, - "startColumn": 17, - "endLine": 1447, - "endColumn": 30, + "startLine": 1448, + "startColumn": 21, + "endLine": 1448, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276180,10 +276757,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1479, - "startColumn": 17, - "endLine": 1479, - "endColumn": 26, + "startLine": 1480, + "startColumn": 21, + "endLine": 1480, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276207,10 +276784,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1482, - "startColumn": 17, - "endLine": 1482, - "endColumn": 30, + "startLine": 1483, + "startColumn": 21, + "endLine": 1483, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276234,10 +276811,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1491, - "startColumn": 17, - "endLine": 1491, - "endColumn": 23, + "startLine": 1492, + "startColumn": 21, + "endLine": 1492, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276281,10 +276858,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1512, - "startColumn": 17, - "endLine": 1512, - "endColumn": 30, + "startLine": 1513, + "startColumn": 21, + "endLine": 1513, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276351,10 +276928,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1526, - "startColumn": 17, - "endLine": 1526, - "endColumn": 30, + "startLine": 1527, + "startColumn": 21, + "endLine": 1527, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276398,10 +276975,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1538, - "startColumn": 17, - "endLine": 1538, - "endColumn": 26, + "startLine": 1539, + "startColumn": 21, + "endLine": 1539, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276425,10 +277002,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1541, - "startColumn": 17, - "endLine": 1541, - "endColumn": 30, + "startLine": 1542, + "startColumn": 21, + "endLine": 1542, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276452,10 +277029,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1550, - "startColumn": 17, - "endLine": 1550, - "endColumn": 23, + "startLine": 1551, + "startColumn": 21, + "endLine": 1551, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276476,10 +277053,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1569, - "startColumn": 17, - "endLine": 1569, - "endColumn": 30, + "startLine": 1570, + "startColumn": 21, + "endLine": 1570, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276523,10 +277100,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1601, - "startColumn": 17, - "endLine": 1601, - "endColumn": 26, + "startLine": 1602, + "startColumn": 21, + "endLine": 1602, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276550,10 +277127,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1604, - "startColumn": 17, - "endLine": 1604, - "endColumn": 30, + "startLine": 1605, + "startColumn": 21, + "endLine": 1605, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276577,10 +277154,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1613, - "startColumn": 17, - "endLine": 1613, - "endColumn": 23, + "startLine": 1614, + "startColumn": 21, + "endLine": 1614, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276624,10 +277201,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1634, - "startColumn": 17, - "endLine": 1634, - "endColumn": 30, + "startLine": 1635, + "startColumn": 21, + "endLine": 1635, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276694,10 +277271,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1648, - "startColumn": 17, - "endLine": 1648, - "endColumn": 30, + "startLine": 1649, + "startColumn": 21, + "endLine": 1649, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276741,10 +277318,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1660, - "startColumn": 17, - "endLine": 1660, - "endColumn": 26, + "startLine": 1661, + "startColumn": 21, + "endLine": 1661, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276768,10 +277345,10 @@ }, "propertyPath": "Properties.NetworkAclId", "category": "Best Practice", - "startLine": 1663, - "startColumn": 17, - "endLine": 1663, - "endColumn": 30, + "startLine": 1664, + "startColumn": 21, + "endLine": 1664, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276795,10 +277372,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 1671, - "startColumn": 17, - "endLine": 1671, - "endColumn": 23, + "startLine": 1672, + "startColumn": 21, + "endLine": 1672, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276819,10 +277396,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1690, - "startColumn": 17, - "endLine": 1690, - "endColumn": 30, + "startLine": 1691, + "startColumn": 21, + "endLine": 1691, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276866,10 +277443,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1702, - "startColumn": 17, - "endLine": 1702, - "endColumn": 26, + "startLine": 1703, + "startColumn": 21, + "endLine": 1703, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276893,10 +277470,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1705, - "startColumn": 17, - "endLine": 1705, - "endColumn": 30, + "startLine": 1706, + "startColumn": 21, + "endLine": 1706, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276920,10 +277497,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1713, - "startColumn": 17, - "endLine": 1713, - "endColumn": 26, + "startLine": 1714, + "startColumn": 21, + "endLine": 1714, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276947,10 +277524,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1716, - "startColumn": 17, - "endLine": 1716, - "endColumn": 30, + "startLine": 1717, + "startColumn": 21, + "endLine": 1717, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -276974,10 +277551,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1725, - "startColumn": 17, - "endLine": 1725, - "endColumn": 26, + "startLine": 1726, + "startColumn": 21, + "endLine": 1726, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277001,10 +277578,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1728, - "startColumn": 17, - "endLine": 1728, - "endColumn": 30, + "startLine": 1729, + "startColumn": 21, + "endLine": 1729, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277028,10 +277605,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1737, - "startColumn": 17, - "endLine": 1737, - "endColumn": 26, + "startLine": 1738, + "startColumn": 21, + "endLine": 1738, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277055,10 +277632,10 @@ }, "propertyPath": "Properties.RouteTableId", "category": "Best Practice", - "startLine": 1740, - "startColumn": 17, - "endLine": 1740, - "endColumn": 30, + "startLine": 1741, + "startColumn": 21, + "endLine": 1741, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277082,10 +277659,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1826, - "startColumn": 17, - "endLine": 1826, - "endColumn": 30, + "startLine": 1827, + "startColumn": 21, + "endLine": 1827, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277105,10 +277682,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1832, - "startColumn": 17, - "endLine": 1832, - "endColumn": 26, + "startLine": 1833, + "startColumn": 21, + "endLine": 1833, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277128,10 +277705,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1842, - "startColumn": 17, - "endLine": 1842, - "endColumn": 30, + "startLine": 1843, + "startColumn": 21, + "endLine": 1843, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277151,10 +277728,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1848, - "startColumn": 17, - "endLine": 1848, - "endColumn": 26, + "startLine": 1849, + "startColumn": 21, + "endLine": 1849, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277174,10 +277751,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1858, - "startColumn": 17, - "endLine": 1858, - "endColumn": 30, + "startLine": 1859, + "startColumn": 21, + "endLine": 1859, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277197,10 +277774,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1864, - "startColumn": 17, - "endLine": 1864, - "endColumn": 26, + "startLine": 1865, + "startColumn": 21, + "endLine": 1865, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277220,10 +277797,10 @@ }, "propertyPath": "Properties.AllocationId", "category": "Best Practice", - "startLine": 1874, - "startColumn": 17, - "endLine": 1874, - "endColumn": 30, + "startLine": 1875, + "startColumn": 21, + "endLine": 1875, + "endColumn": 32, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277243,10 +277820,10 @@ }, "propertyPath": "Properties.SubnetId", "category": "Best Practice", - "startLine": 1880, - "startColumn": 17, - "endLine": 1880, - "endColumn": 26, + "startLine": 1881, + "startColumn": 21, + "endLine": 1881, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277266,10 +277843,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1890, - "startColumn": 17, - "endLine": 1890, - "endColumn": 25, + "startLine": 1891, + "startColumn": 21, + "endLine": 1891, + "endColumn": 35, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277290,10 +277867,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 1899, - "startColumn": 17, - "endLine": 1899, - "endColumn": 30, + "startLine": 1900, + "startColumn": 21, + "endLine": 1900, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277337,10 +277914,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 1923, - "startColumn": 17, - "endLine": 1923, - "endColumn": 25, + "startLine": 1924, + "startColumn": 21, + "endLine": 1924, + "endColumn": 28, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277361,10 +277938,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1942, - "startColumn": 17, - "endLine": 1942, - "endColumn": 25, + "startLine": 1943, + "startColumn": 21, + "endLine": 1943, + "endColumn": 35, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277385,10 +277962,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 1951, - "startColumn": 17, - "endLine": 1951, - "endColumn": 30, + "startLine": 1952, + "startColumn": 21, + "endLine": 1952, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277432,10 +278009,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 1975, - "startColumn": 17, - "endLine": 1975, - "endColumn": 25, + "startLine": 1976, + "startColumn": 21, + "endLine": 1976, + "endColumn": 28, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277456,10 +278033,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 1994, - "startColumn": 17, - "endLine": 1994, - "endColumn": 25, + "startLine": 1995, + "startColumn": 21, + "endLine": 1995, + "endColumn": 35, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277480,10 +278057,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 2003, - "startColumn": 17, - "endLine": 2003, - "endColumn": 30, + "startLine": 2004, + "startColumn": 21, + "endLine": 2004, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277527,10 +278104,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 2027, - "startColumn": 17, - "endLine": 2027, - "endColumn": 25, + "startLine": 2028, + "startColumn": 21, + "endLine": 2028, + "endColumn": 28, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277551,10 +278128,10 @@ }, "propertyPath": "Properties.ImageId", "category": "Best Practice", - "startLine": 2046, - "startColumn": 17, - "endLine": 2046, - "endColumn": 25, + "startLine": 2047, + "startColumn": 21, + "endLine": 2047, + "endColumn": 35, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277575,10 +278152,10 @@ }, "propertyPath": "Properties.InstanceType", "category": "Best Practice", - "startLine": 2055, - "startColumn": 17, - "endLine": 2055, - "endColumn": 30, + "startLine": 2056, + "startColumn": 21, + "endLine": 2056, + "endColumn": 25, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277622,10 +278199,10 @@ }, "propertyPath": "Properties.KeyName", "category": "Best Practice", - "startLine": 2079, - "startColumn": 17, - "endLine": 2079, - "endColumn": 25, + "startLine": 2080, + "startColumn": 21, + "endLine": 2080, + "endColumn": 28, "documentationUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git", "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", @@ -277668,10 +278245,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 2098, - "startColumn": 17, - "endLine": 2098, - "endColumn": 23, + "startLine": 2099, + "startColumn": 21, + "endLine": 2099, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277691,10 +278268,10 @@ }, "propertyPath": "Properties.ServiceName", "category": "Best Practice", - "startLine": 2202, - "startColumn": 17, - "endLine": 2202, - "endColumn": 29, + "startLine": 2203, + "startColumn": 21, + "endLine": 2203, + "endColumn": 30, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277713,10 +278290,10 @@ }, "propertyPath": "Properties.VpcId", "category": "Best Practice", - "startLine": 2214, - "startColumn": 17, - "endLine": 2214, - "endColumn": 23, + "startLine": 2215, + "startColumn": 21, + "endLine": 2215, + "endColumn": 25, "ruleDescription": "Create-only property updated triggers resource replacement", "phase": "SCHEMA", "context": { @@ -277988,7 +278565,7 @@ "startLine": 868, "startColumn": 77, "endLine": 868, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278007,7 +278584,7 @@ "startLine": 874, "startColumn": 77, "endLine": 874, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278026,7 +278603,7 @@ "startLine": 880, "startColumn": 77, "endLine": 880, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278045,7 +278622,7 @@ "startLine": 886, "startColumn": 77, "endLine": 886, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278064,7 +278641,7 @@ "startLine": 892, "startColumn": 77, "endLine": 892, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278083,7 +278660,7 @@ "startLine": 898, "startColumn": 77, "endLine": 898, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278102,7 +278679,7 @@ "startLine": 904, "startColumn": 77, "endLine": 904, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278121,7 +278698,7 @@ "startLine": 910, "startColumn": 77, "endLine": 910, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278140,7 +278717,7 @@ "startLine": 916, "startColumn": 77, "endLine": 916, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278159,7 +278736,7 @@ "startLine": 922, "startColumn": 77, "endLine": 922, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278178,7 +278755,7 @@ "startLine": 928, "startColumn": 77, "endLine": 928, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278197,7 +278774,7 @@ "startLine": 934, "startColumn": 77, "endLine": 934, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278216,7 +278793,7 @@ "startLine": 940, "startColumn": 77, "endLine": 940, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278235,7 +278812,7 @@ "startLine": 946, "startColumn": 77, "endLine": 946, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278254,7 +278831,7 @@ "startLine": 952, "startColumn": 77, "endLine": 952, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278273,7 +278850,7 @@ "startLine": 958, "startColumn": 77, "endLine": 958, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278292,7 +278869,7 @@ "startLine": 964, "startColumn": 77, "endLine": 964, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278311,7 +278888,7 @@ "startLine": 970, "startColumn": 77, "endLine": 970, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278330,7 +278907,7 @@ "startLine": 976, "startColumn": 77, "endLine": 976, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -278349,7 +278926,7 @@ "startLine": 982, "startColumn": 77, "endLine": 982, - "endColumn": 78, + "endColumn": 87, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280348,7 +280925,7 @@ "startLine": 367, "startColumn": 65, "endLine": 367, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280386,7 +280963,7 @@ "startLine": 367, "startColumn": 107, "endLine": 367, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280405,7 +280982,7 @@ "startLine": 373, "startColumn": 65, "endLine": 373, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280443,7 +281020,7 @@ "startLine": 373, "startColumn": 107, "endLine": 373, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280462,7 +281039,7 @@ "startLine": 379, "startColumn": 65, "endLine": 379, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280500,7 +281077,7 @@ "startLine": 379, "startColumn": 107, "endLine": 379, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280519,7 +281096,7 @@ "startLine": 385, "startColumn": 65, "endLine": 385, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280557,7 +281134,7 @@ "startLine": 385, "startColumn": 107, "endLine": 385, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280576,7 +281153,7 @@ "startLine": 391, "startColumn": 65, "endLine": 391, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280614,7 +281191,7 @@ "startLine": 391, "startColumn": 107, "endLine": 391, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280633,7 +281210,7 @@ "startLine": 397, "startColumn": 65, "endLine": 397, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280671,7 +281248,7 @@ "startLine": 397, "startColumn": 107, "endLine": 397, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280690,7 +281267,7 @@ "startLine": 403, "startColumn": 65, "endLine": 403, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280728,7 +281305,7 @@ "startLine": 403, "startColumn": 107, "endLine": 403, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280747,7 +281324,7 @@ "startLine": 409, "startColumn": 65, "endLine": 409, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280785,7 +281362,7 @@ "startLine": 409, "startColumn": 107, "endLine": 409, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280804,7 +281381,7 @@ "startLine": 415, "startColumn": 65, "endLine": 415, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280842,7 +281419,7 @@ "startLine": 415, "startColumn": 107, "endLine": 415, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280861,7 +281438,7 @@ "startLine": 421, "startColumn": 65, "endLine": 421, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -280899,7 +281476,7 @@ "startLine": 421, "startColumn": 107, "endLine": 421, - "endColumn": 108, + "endColumn": 114, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281378,7 +281955,7 @@ "startLine": 579, "startColumn": 65, "endLine": 579, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281397,7 +281974,7 @@ "startLine": 585, "startColumn": 65, "endLine": 585, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281416,7 +281993,7 @@ "startLine": 591, "startColumn": 65, "endLine": 591, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281435,7 +282012,7 @@ "startLine": 597, "startColumn": 65, "endLine": 597, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281454,7 +282031,7 @@ "startLine": 603, "startColumn": 65, "endLine": 603, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281473,7 +282050,7 @@ "startLine": 609, "startColumn": 65, "endLine": 609, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281492,7 +282069,7 @@ "startLine": 615, "startColumn": 65, "endLine": 615, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281511,7 +282088,7 @@ "startLine": 621, "startColumn": 65, "endLine": 621, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281530,7 +282107,7 @@ "startLine": 627, "startColumn": 65, "endLine": 627, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -281549,7 +282126,7 @@ "startLine": 633, "startColumn": 65, "endLine": 633, - "endColumn": 66, + "endColumn": 72, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282667,7 +283244,7 @@ "startLine": 216, "startColumn": 48, "endLine": 216, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282686,7 +283263,7 @@ "startLine": 221, "startColumn": 48, "endLine": 221, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282705,7 +283282,7 @@ "startLine": 226, "startColumn": 48, "endLine": 226, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282724,7 +283301,7 @@ "startLine": 231, "startColumn": 48, "endLine": 231, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282743,7 +283320,7 @@ "startLine": 236, "startColumn": 48, "endLine": 236, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282762,7 +283339,7 @@ "startLine": 241, "startColumn": 48, "endLine": 241, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282781,7 +283358,7 @@ "startLine": 246, "startColumn": 48, "endLine": 246, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282800,7 +283377,7 @@ "startLine": 251, "startColumn": 48, "endLine": 251, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282819,7 +283396,7 @@ "startLine": 256, "startColumn": 48, "endLine": 256, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282838,7 +283415,7 @@ "startLine": 261, "startColumn": 48, "endLine": 261, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282857,7 +283434,7 @@ "startLine": 266, "startColumn": 48, "endLine": 266, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282876,7 +283453,7 @@ "startLine": 271, "startColumn": 48, "endLine": 271, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282895,7 +283472,7 @@ "startLine": 276, "startColumn": 48, "endLine": 276, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282914,7 +283491,7 @@ "startLine": 281, "startColumn": 48, "endLine": 281, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282933,7 +283510,7 @@ "startLine": 286, "startColumn": 48, "endLine": 286, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282952,7 +283529,7 @@ "startLine": 291, "startColumn": 48, "endLine": 291, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282971,7 +283548,7 @@ "startLine": 296, "startColumn": 48, "endLine": 296, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -282990,7 +283567,7 @@ "startLine": 301, "startColumn": 48, "endLine": 301, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -283009,7 +283586,7 @@ "startLine": 306, "startColumn": 48, "endLine": 306, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -283028,7 +283605,7 @@ "startLine": 311, "startColumn": 48, "endLine": 311, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -316188,7 +316765,7 @@ "startLine": 228, "startColumn": 48, "endLine": 228, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, @@ -332065,7 +332642,7 @@ "startLine": 218, "startColumn": 48, "endLine": 218, - "endColumn": 49, + "endColumn": 58, "ruleDescription": "Check Fn::If has a path that cannot be reached", "phase": "LINT" }, diff --git a/src/resources/templates/bad/resources/properties/custom_missing_service_token.yaml b/src/resources/templates/bad/resources/properties/custom_missing_service_token.yaml new file mode 100644 index 00000000..0c1b234f --- /dev/null +++ b/src/resources/templates/bad/resources/properties/custom_missing_service_token.yaml @@ -0,0 +1,10 @@ +Resources: + CustomPrefixMissingToken: + Type: Custom::MyHandler + Properties: + SomeInput: value + + CloudFormationCustomMissingToken: + Type: AWS::CloudFormation::CustomResource + Properties: + SomeInput: value diff --git a/src/resources/templates/bad/resources/sqs/standard_queue_fifo_suffix.yaml b/src/resources/templates/bad/resources/sqs/standard_queue_fifo_suffix.yaml new file mode 100644 index 00000000..7d7cb911 --- /dev/null +++ b/src/resources/templates/bad/resources/sqs/standard_queue_fifo_suffix.yaml @@ -0,0 +1,7 @@ +AWSTemplateFormatVersion: "2010-09-09" +Resources: + StandardQueueWithFifoSuffix: + Type: AWS::SQS::Queue + Properties: + QueueName: standard-queue.fifo + FifoQueue: false diff --git a/src/resources/templates/good/both_forms.yaml b/src/resources/templates/good/both_forms.yaml index c182f1a1..ecd0de01 100644 --- a/src/resources/templates/good/both_forms.yaml +++ b/src/resources/templates/good/both_forms.yaml @@ -33,6 +33,7 @@ Resources: WithGetAtt: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" ShortForm: !GetAtt BucketShort.Arn LongFormDotted: Fn::GetAtt: BucketShort.DomainName @@ -43,6 +44,7 @@ Resources: WithJoin: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !Join ["-", [a, b, c]] Long: Fn::Join: @@ -51,6 +53,7 @@ Resources: WithSelect: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !Select [0, [a, b]] Long: Fn::Select: @@ -59,6 +62,7 @@ Resources: WithIf: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !If [IsProd, yes, no] Long: Fn::If: @@ -68,6 +72,7 @@ Resources: WithFindInMap: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !FindInMap [MyMap, !Ref Env, key] Long: Fn::FindInMap: @@ -77,12 +82,14 @@ Resources: WithBase64: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !Base64 hello Long: Fn::Base64: hello-long WithSplit: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !Split [",", "a,b,c"] Long: Fn::Split: @@ -91,18 +98,21 @@ Resources: WithImport: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !ImportValue SharedStack-Output Long: Fn::ImportValue: SharedStack-Output2 WithGetAZs: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !GetAZs us-east-1 Long: Fn::GetAZs: us-west-2 WithCidr: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" Short: !Cidr ["10.0.0.0/16", 6, 8] Long: Fn::Cidr: @@ -112,6 +122,7 @@ Resources: SubBlock: Type: Custom::IntrinsicTest Properties: + ServiceToken: !Sub "arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:test" UserData: !Sub | #!/bin/bash echo ${Env} diff --git a/src/resources/templates/good/resources/properties/custom_with_service_token.yaml b/src/resources/templates/good/resources/properties/custom_with_service_token.yaml new file mode 100644 index 00000000..8c059d34 --- /dev/null +++ b/src/resources/templates/good/resources/properties/custom_with_service_token.yaml @@ -0,0 +1,12 @@ +Resources: + CustomPrefixValid: + Type: Custom::MyHandler + Properties: + ServiceToken: arn:aws:lambda:us-east-1:123456789012:function:handler + SomeInput: value + + CloudFormationCustomValid: + Type: AWS::CloudFormation::CustomResource + Properties: + ServiceToken: arn:aws:sns:us-east-1:123456789012:my-topic + SomeInput: value diff --git a/src/resources/templates/good/resources/sqs/standard_queue_name.yaml b/src/resources/templates/good/resources/sqs/standard_queue_name.yaml new file mode 100644 index 00000000..46fa752d --- /dev/null +++ b/src/resources/templates/good/resources/sqs/standard_queue_name.yaml @@ -0,0 +1,7 @@ +AWSTemplateFormatVersion: "2010-09-09" +Resources: + StandardQueue: + Type: AWS::SQS::Queue + Properties: + QueueName: standard-queue + FifoQueue: false diff --git a/src/rules/src/helpers.rs b/src/rules/src/helpers.rs index d436dcb6..495bdbf7 100644 --- a/src/rules/src/helpers.rs +++ b/src/rules/src/helpers.rs @@ -185,7 +185,6 @@ mod tests { #[test] fn category_for_rule_id_applies_three_char_overrides() { assert_eq!(category_for_rule_id("E2529"), Category::Resource); - assert_eq!(category_for_rule_id("E2504"), Category::Resource); assert_eq!(category_for_rule_id("I2530"), Category::BestPractice); assert_eq!(category_for_rule_id("F8600"), Category::Structure); } diff --git a/src/rules/src/registry.rs b/src/rules/src/registry.rs index 299883a3..4e5f379b 100644 --- a/src/rules/src/registry.rs +++ b/src/rules/src/registry.rs @@ -764,12 +764,6 @@ pub const RULE_REGISTRY: &[RuleDefinition] = &[ description: "Resource references conditional resource with mutually exclusive condition", origin: RuleOrigin::Engine, }, - RuleDefinition { - id: "E2504", - category: Category::Resource, - description: "FIFO queue name must end with .fifo", - origin: RuleOrigin::Engine, - }, RuleDefinition { id: "E2529", category: Category::Resource, @@ -1302,7 +1296,7 @@ pub const RULE_REGISTRY: &[RuleDefinition] = &[ id: "W2509", category: Category::Security, description: "Password parameter should have NoEcho", - origin: RuleOrigin::Engine, + origin: RuleOrigin::CfnLint, }, RuleDefinition { id: "W2511", diff --git a/src/schema-validator/src/validate.rs b/src/schema-validator/src/validate.rs index 5853941f..4f186f91 100644 --- a/src/schema-validator/src/validate.rs +++ b/src/schema-validator/src/validate.rs @@ -232,6 +232,24 @@ pub fn validate_all_resources( validate_extensions(&mut out, store, model, rid, res); } } + // Custom:: resources are not in the provider schema store, so + // validate_resource never sees them. ServiceToken is unconditionally + // required by CloudFormation for all custom resources using the Custom:: + // prefix; AWS::CloudFormation::CustomResource is already handled by its + // compiled schema. Check each Custom:: resource individually. + for (rid, res) in &model.resources { + if res.resource_type.starts_with("Custom::") && !res.properties.contains_key("ServiceToken") { + out.push(build_diagnostic( + "F3003", + "'ServiceToken' is a required property", + model, + rid, + KEY_PROPERTIES, + Some("Add a ServiceToken property (ARN of the Lambda or SNS topic backing this custom resource)"), + )); + } + } + for (resource_id, property_path) in take_scenario_analysis_curtailments() { out.push(build_diagnostic( "I9052", diff --git a/src/schema-validator/tests/integration.rs b/src/schema-validator/tests/integration.rs index 5fe7958b..5f9b9cd8 100644 --- a/src/schema-validator/tests/integration.rs +++ b/src/schema-validator/tests/integration.rs @@ -777,3 +777,26 @@ fn i9001_conditional_create_only_not_emitted_when_property_is_absent() { "control VPC without InstanceTenancy must not emit I9001 for InstanceTenancy, got: {control_diagnostics:?}" ); } + +#[test] +fn custom_prefix_missing_service_token_fires_f3003() { + let diags = validate_fixture("bad/resources/properties/custom_missing_service_token.yaml"); + let f3003 = diags_for(&diags, "F3003"); + assert!( + f3003.iter().any(|d| d.message.contains("ServiceToken") + && d.entity.as_ref().map(|e| e.logical_id == "CustomPrefixMissingToken").unwrap_or(false)), + "F3003 should fire for Custom:: resource missing ServiceToken, got: {:?}", + f3003 + ); +} + +#[test] +fn custom_with_service_token_passes_clean() { + let diags = validate_fixture("good/resources/properties/custom_with_service_token.yaml"); + let f3003 = diags_for(&diags, "F3003"); + assert!( + f3003.is_empty(), + "F3003 should not fire when ServiceToken is present, got: {:?}", + f3003.iter().map(|d| &d.message).collect::>() + ); +} diff --git a/src/template-model/src/defect.rs b/src/template-model/src/defect.rs index bf6ad008..e8642535 100644 --- a/src/template-model/src/defect.rs +++ b/src/template-model/src/defect.rs @@ -120,6 +120,24 @@ pub(crate) fn make_parse_defect_for_resource( ParseDefect::new(rule_id, message).location(span).resource(resource_id).phase(DefectPhase::Parse) } +/// Like [`make_parse_defect_for_resource`], but also records a resource-relative +/// property path locating the offending attribute within the resource body. +/// Used when the defect points at a specific authored key (e.g. `Type`, +/// `Condition`, `DependsOn`, or an unknown attribute). +pub(crate) fn make_resource_defect_with_path( + rule_id: &str, + message: String, + span: SourceSpan, + resource_id: &str, + property_path: &str, +) -> ParseDefect { + ParseDefect::new(rule_id, message) + .location(span) + .resource(resource_id) + .property_path(property_path) + .phase(DefectPhase::Parse) +} + pub(crate) fn make_parse_defect(rule_id: &str, message: String, span: SourceSpan) -> ParseDefect { ParseDefect::new(rule_id, message).location(span).phase(DefectPhase::Parse) } @@ -198,4 +216,12 @@ mod tests { assert_eq!(defect.resource_id, None); assert_eq!(defect.property_path.as_deref(), Some("Conditions/C/Fn::And")); } + + #[test] + fn make_resource_defect_with_path_anchors_at_resource_and_member() { + let defect = make_resource_defect_with_path("E3001", "msg".into(), UNKNOWN_SPAN, "R", "Condition"); + assert_eq!(defect.resource_id.as_deref(), Some("R")); + assert_eq!(defect.property_path.as_deref(), Some("Condition")); + assert_eq!(defect.phase, Some(DefectPhase::Parse)); + } } diff --git a/src/template-model/src/diagnostic.rs b/src/template-model/src/diagnostic.rs index 4c5a8af4..dd164a5a 100644 --- a/src/template-model/src/diagnostic.rs +++ b/src/template-model/src/diagnostic.rs @@ -210,8 +210,10 @@ pub struct DiagnosticResource { pub properties: HashMap, pub outgoing_refs: Vec, pub incoming_refs: Vec, - /// Mapping names referenced by Fn::FindInMap within this resource. + /// Mapping names referenced by Fn::FindInMap. pub find_in_map_refs: Vec, + /// Map-name arguments paired with their authored property paths. + pub find_in_map_ref_paths: Vec, /// Fn::Sub uses whose template is a single variable with no surrounding text, which could be written as a plain reference. pub simple_subs: Vec, /// Property paths where Fn::Sub has no variables to substitute. diff --git a/src/template-model/src/graph.rs b/src/template-model/src/graph.rs index 22f9bc44..1b9a933b 100644 --- a/src/template-model/src/graph.rs +++ b/src/template-model/src/graph.rs @@ -151,7 +151,6 @@ impl ReferenceGraph { format!("Circular Dependencies for resource {source}. Circular dependency with [{path}]"), ) .resource(source.to_string()) - .property_path(format!("Resources/{}", source)) .location(span) .phase(DefectPhase::Lint) }) @@ -761,6 +760,26 @@ mod tests { let diags = graph.cycle_diagnostics(&span_index); let a = diags.iter().find(|d| d.resource_logical_id() == Some("A")).expect("F3004 for A"); assert_eq!(a.span.start_line, 42); - assert_eq!(a.property_path.as_deref(), Some("Resources/A")); + assert_eq!(a.property_path, None, "resource-anchored defect uses resource root (no property path)"); + } + + /// Circular dependency diagnostics anchor at the resource root: a finding + /// already carries the resource logical ID, so there is no child property + /// to descend into. property_path must be None. + #[test] + fn graph_cycle_diagnostics_property_path_is_resource_root() { + let edges = vec![make_edge("A", "B"), make_edge("B", "C"), make_edge("C", "A")]; + let ids = vec!["A".into(), "B".into(), "C".into()]; + let graph = ReferenceGraph::build(edges, &ids); + let diags = graph.cycle_diagnostics(&HashMap::new()); + for d in &diags { + assert_eq!( + d.property_path, + None, + "F3004 for {} must have no property_path (resource root), got {:?}", + d.resource_logical_id().unwrap_or("?"), + d.property_path, + ); + } } } diff --git a/src/template-model/src/inspect.rs b/src/template-model/src/inspect.rs index 05cc2060..7409a506 100644 --- a/src/template-model/src/inspect.rs +++ b/src/template-model/src/inspect.rs @@ -318,8 +318,11 @@ fn inspect_file(path: &str) { println!(" │ Properties: "); } - if !res.diagnostics.find_in_map_refs.is_empty() { - println!(" │ FindInMap refs: {}", res.diagnostics.find_in_map_refs.join(", ")); + if !res.diagnostics.find_in_map_ref_paths.is_empty() { + println!(" │ FindInMap refs:"); + for entry in &res.diagnostics.find_in_map_ref_paths { + println!(" │ {} → {}", entry.path, entry.value); + } } if !res.diagnostics.simple_subs.is_empty() { println!(" │ Simple Subs:"); diff --git a/src/template-model/src/model.rs b/src/template-model/src/model.rs index c76ce1c4..9d7dc24a 100644 --- a/src/template-model/src/model.rs +++ b/src/template-model/src/model.rs @@ -49,6 +49,8 @@ pub struct ConditionalNullEntry { pub struct ResourceDiagnostics { /// Mapping names referenced by Fn::FindInMap within this resource. pub find_in_map_refs: Vec, + /// Map-name arguments paired with their authored property paths. + pub find_in_map_ref_paths: Vec, /// Fn::Sub uses whose template is a single variable that could be a plain Ref; each pairs the property path with the variable name. pub simple_subs: Vec, /// Property paths where Fn::Sub wraps a constant string with no variables to substitute. @@ -563,11 +565,17 @@ impl SemanticModel { let value_nodes = resolver.value_nodes(); let mut all_edges = resolver.edges; for (id, res) in &resources { - for dep in &res.depends_on { + for (dependency_index, dependency) in res.depends_on.iter().enumerate() { + let indexed_source_path = format!("Resources/{}/{}/{}", id, KEY_DEPENDS_ON, dependency_index); + let source_path = if ir.span_index.contains_key(&indexed_source_path) { + format!("{}.{}", KEY_DEPENDS_ON, dependency_index) + } else { + KEY_DEPENDS_ON.to_string() + }; all_edges.push(ResolverEdge { source_resource: id.clone(), - source_path: KEY_DEPENDS_ON.to_string(), - target: dep.clone(), + source_path, + target: dependency.clone(), kind: RefKind::DependsOn, span: UNKNOWN_SPAN, condition_context: None, @@ -834,11 +842,16 @@ impl SemanticModel { if let Some(cond) = &resources[rid].condition && !conditions.conditions.contains_key(cond) { - diagnostics.push(crate::make_parse_defect_for_resource( + let cond_span = + ir.span_index.get(&format!("Resources/{}/Condition", rid)).copied().unwrap_or_else(|| { + ir.span_index.get(&format!("Resources/{}", rid)).copied().unwrap_or(UNKNOWN_SPAN) + }); + diagnostics.push(crate::defect::make_resource_defect_with_path( "E8002", format!("Condition '{}' referenced by resource '{}' is not defined", cond, rid), - ir.span_index.get(&format!("Resources/{}", rid)).copied().unwrap_or(UNKNOWN_SPAN), + cond_span, rid, + KEY_CONDITION, )); } } @@ -1683,19 +1696,26 @@ impl SemanticModel { /// here would silently mislocate every dotted-path diagnostic onto the /// resource declaration line. pub fn resource_span(&self, resource_id: &str, prop_path: &str) -> SourceSpan { - // An empty resource id means the path is already a section-absolute span-index - // key (e.g. an output's `Outputs/X/Value.Fn::Join`); prefixing it with - // `Resources/` would mislocate the finding onto the Resources block. Resolve it - // as-is (no dot-to-slash conversion, since dots in segment names like `Fn::Join` - // are literal, not path separators). Returns UNKNOWN when nothing resolves so - // callers fall back to section-level or backfill-based location. + // An empty resource id means the path is already section-absolute + // (for example, an output Value). Resolve mixed slash/dot intrinsic + // suffixes through the authored arena path before walking ancestors. if resource_id.is_empty() { - return self.walk_up_span(prop_path).unwrap_or(UNKNOWN_SPAN); + return self + .authored_absolute_intrinsic_span(prop_path) + .or_else(|| self.walk_up_span(prop_path)) + .unwrap_or(UNKNOWN_SPAN); + } + if let Some(span) = self.authored_intrinsic_span(resource_id, prop_path) { + return span; } + if let Some(span) = self.authored_value_intrinsic_span(resource_id, prop_path) { + return span; + } + let lookup_path = self.authored_lookup_path(resource_id, prop_path); let specific = if prop_path.is_empty() { format!("Resources/{}", resource_id) } else { - format!("Resources/{}/{}", resource_id, prop_path.replace('.', "/")) + format!("Resources/{}/{}", resource_id, lookup_path.replace('.', "/")) }; // Walk up from the exact path to the nearest indexed ancestor, so a leaf that // carries no span of its own - a synthetic intrinsic key (`…/Topic/Fn::Sub`), @@ -1705,6 +1725,98 @@ impl SemanticModel { self.walk_up_span(&specific).unwrap_or(UNKNOWN_SPAN) } + fn dotted_numeric_indices(property_path: &str) -> Option { + let bytes = property_path.as_bytes(); + let mut normalized = String::with_capacity(property_path.len()); + let mut cursor = 0; + let mut changed = false; + while cursor < bytes.len() { + if bytes[cursor] == b'[' { + let digit_start = cursor + 1; + let mut end = digit_start; + while end < bytes.len() && bytes[end].is_ascii_digit() { + end += 1; + } + if end > digit_start && end < bytes.len() && bytes[end] == b']' { + normalized.push('.'); + normalized.push_str(&property_path[digit_start..end]); + cursor = end + 1; + changed = true; + continue; + } + } + let character = property_path[cursor..].chars().next()?; + normalized.push(character); + cursor += character.len_utf8(); + } + changed.then_some(normalized) + } + + fn authored_lookup_path<'a>(&self, resource_id: &str, property_path: &'a str) -> std::borrow::Cow<'a, str> { + let original_key = (resource_id.to_string(), property_path.to_string()); + let original_source_path = format!("Resources/{}/{}", resource_id, property_path.replace('.', "/")); + if self.value_nodes.contains_key(&original_key) || self.span_index.contains_key(&original_source_path) { + return std::borrow::Cow::Borrowed(property_path); + } + if let Some(normalized) = Self::dotted_numeric_indices(property_path) { + let normalized_source_path = format!("Resources/{}/{}", resource_id, normalized.replace('.', "/")); + if self.value_nodes.contains_key(&(resource_id.to_string(), normalized.clone())) + || self.span_index.contains_key(&normalized_source_path) + { + return std::borrow::Cow::Owned(normalized); + } + } + std::borrow::Cow::Borrowed(property_path) + } + + fn authored_intrinsic_span(&self, resource_id: &str, property_path: &str) -> Option { + let lookup_path = self.authored_lookup_path(resource_id, property_path); + for (separator_index, _) in lookup_path.match_indices('.').rev() { + let intrinsic_suffix = &lookup_path[separator_index + 1..]; + if !intrinsic_suffix.starts_with("Fn::") && intrinsic_suffix != "Ref" { + continue; + } + let value_path = &lookup_path[..separator_index]; + let Some(node_ref) = self.value_nodes.get(&(resource_id.to_string(), value_path.to_string())) else { + continue; + }; + let authored_path = &self.arena.get(*node_ref).path; + let source_path = format!("{}/{}", authored_path, intrinsic_suffix.replace('.', "/")); + return self.walk_up_span(&source_path); + } + None + } + + fn authored_value_intrinsic_span(&self, resource_id: &str, property_path: &str) -> Option { + let lookup_path = self.authored_lookup_path(resource_id, property_path); + let node_ref = self.value_nodes.get(&(resource_id.to_string(), lookup_path.into_owned()))?; + let Node::Intrinsic(intrinsic) = self.arena.node(*node_ref) else { + return None; + }; + let source_path = format!("{}/{}", self.arena.get(*node_ref).path, cfn_function_name(intrinsic)); + self.walk_up_span(&source_path) + } + + fn authored_absolute_intrinsic_span(&self, property_path: &str) -> Option { + for (separator_index, _) in property_path.match_indices('.').rev() { + let intrinsic_suffix = &property_path[separator_index + 1..]; + if !intrinsic_suffix.starts_with("Fn::") && intrinsic_suffix != "Ref" { + continue; + } + let value_path = &property_path[..separator_index]; + let authored_value_exists = self.span_index.contains_key(value_path) + || (0..self.arena.len()).any(|index| self.arena.get(index as NodeRef).path == value_path); + if !authored_value_exists { + continue; + } + let source_path = format!("{}/{}", value_path, intrinsic_suffix.replace('.', "/")); + if let Some(span) = self.walk_up_span(&source_path) { + return Some(span); + } + } + None + } + /// Walks up `key` (a `/`-separated span-index path), trimming one trailing /// segment at a time, and returns the first ancestor with a known span. This /// anchors a diagnostic as close to the offending node as the index allows - @@ -1746,7 +1858,11 @@ impl SemanticModel { let rid = resource_id.filter(|r| !r.is_empty()); if property_path.contains('/') || (rid.is_none() && !property_path.is_empty()) { - // Absolute, section-rooted path: resolve directly. + // Absolute, section-rooted paths may mix slash-form section segments + // with dotted intrinsic suffixes retained by engine diagnostics. + if let Some(span) = self.authored_absolute_intrinsic_span(property_path) { + return Some(span); + } if let Some(span) = self.walk_up_span(property_path) { return Some(span); } @@ -1983,6 +2099,7 @@ fn validate_resource_shape( // `Type` is required and must be a string. match entries.iter().find(|(k, _)| k == KEY_TYPE) { None => { + // Missing Type has no authored child to point at. out.push(crate::make_parse_defect_for_resource( "E3001", format!("Resource '{}' is missing required property 'Type'", name), @@ -1992,11 +2109,12 @@ fn validate_resource_shape( } Some((_, type_ref)) if !matches!(arena.node(*type_ref), Node::String(_)) => { let type_span = span_index.get(&format!("Resources/{}/Type", name)).copied().unwrap_or(resource_span); - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'Type' must be a string", name), type_span, name, + KEY_TYPE, )); } _ => {} @@ -2005,11 +2123,12 @@ fn validate_resource_shape( // `Condition` must be a string when present. if invalid_resource_condition_ref(arena, node_ref).is_some() { let cond_span = span_index.get(&format!("Resources/{}/Condition", name)).copied().unwrap_or(resource_span); - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'Condition' must be a string", name), cond_span, name, + KEY_CONDITION, )); } @@ -2022,11 +2141,12 @@ fn validate_resource_shape( if !matches!(arena.node(*item_ref), Node::String(_)) { let dep_span = span_index.get(&format!("Resources/{}/DependsOn", name)).copied().unwrap_or(resource_span); - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'DependsOn' list elements must be strings", name), dep_span, name, + KEY_DEPENDS_ON, )); break; } @@ -2035,11 +2155,12 @@ fn validate_resource_shape( _ => { let dep_span = span_index.get(&format!("Resources/{}/DependsOn", name)).copied().unwrap_or(resource_span); - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'DependsOn' must be a string or list of strings", name), dep_span, name, + KEY_DEPENDS_ON, )); } } @@ -2051,18 +2172,20 @@ fn validate_resource_shape( if let Some((_, version_ref)) = entries.iter().find(|(key, _)| key == "Version") { let version_span = span_index.get(&format!("Resources/{}/Version", name)).copied().unwrap_or(resource_span); if !is_custom_resource { - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'Version' is only valid for custom resources", name), version_span, name, + "Version", )); } else if !matches!(arena.node(*version_ref), Node::String(_) | Node::Int(_)) { - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property 'Version' must be a string or integer", name), version_span, name, + "Version", )); } } @@ -2074,18 +2197,20 @@ fn validate_resource_shape( let policy_span = span_index.get(&format!("Resources/{}/{}", name, policy_name)).copied().unwrap_or(resource_span); if is_custom_resource { - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property '{}' is not valid for custom resources", name, policy_name), policy_span, name, + policy_name, )); } else if !matches!(arena.node(*policy_ref), Node::Map(_) | Node::Intrinsic(_)) { - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!("Resource '{}' property '{}' must be an object", name, policy_name), policy_span, name, + policy_name, )); } } @@ -2099,7 +2224,7 @@ fn validate_resource_shape( continue; } let key_span = span_index.get(&format!("Resources/{}/{}", name, key)).copied().unwrap_or(resource_span); - out.push(crate::make_parse_defect_for_resource( + out.push(crate::defect::make_resource_defect_with_path( "E3001", format!( "Resource '{}' has invalid property '{}'. Valid resource attributes: {}", @@ -2109,6 +2234,7 @@ fn validate_resource_shape( ), key_span, name, + key, )); } @@ -2263,6 +2389,15 @@ fn resolve_resource(arena: &Arena, name: &str, node_ref: NodeRef, resolver: &mut condition_refs.sort(); condition_refs.dedup(); + let find_in_map_ref_paths: Vec = resolver + .find_in_map_refs + .remove(name) + .unwrap_or_default() + .into_iter() + .map(|(path, value)| PathValuePair { path, value }) + .collect(); + let find_in_map_refs = find_in_map_ref_paths.iter().map(|entry| entry.value.clone()).collect(); + ResolvedResource { logical_id: name.to_string(), resource_type, @@ -2276,7 +2411,8 @@ fn resolve_resource(arena: &Arena, name: &str, node_ref: NodeRef, resolver: &mut properties, properties_dynamic, diagnostics: ResourceDiagnostics { - find_in_map_refs: resolver.find_in_map_refs.remove(name).unwrap_or_default(), + find_in_map_refs, + find_in_map_ref_paths, simple_subs: resolver .simple_subs .remove(name) @@ -2798,14 +2934,24 @@ Resources: fn model_findinmap_refs_tracked() { let input = br#"{"Resources":{"R":{"Type":"T","Properties":{"V":{"Fn::FindInMap":["MyMap","k1","k2"]}}}}}"#; let model = SemanticModel::from_bytes(input).unwrap(); - assert!(model.resource("R").unwrap().diagnostics.find_in_map_refs.contains(&"MyMap".to_string())); + let diagnostics = &model.resource("R").unwrap().diagnostics; + assert!(diagnostics.find_in_map_refs.contains(&"MyMap".to_string())); + assert!( + diagnostics.find_in_map_ref_paths.iter().any(|entry| entry.path.ends_with(".Fn::FindInMap.0")), + "path must end with the map-name argument index" + ); } #[test] fn model_findinmap_refs_tracked_yaml() { let input = b"Resources:\n R:\n Type: T\n Properties:\n V: !FindInMap [MyMap, k1, k2]\n"; let model = SemanticModel::from_bytes(input).unwrap(); - assert!(model.resource("R").unwrap().diagnostics.find_in_map_refs.contains(&"MyMap".to_string())); + let diagnostics = &model.resource("R").unwrap().diagnostics; + assert!(diagnostics.find_in_map_refs.contains(&"MyMap".to_string())); + assert!( + diagnostics.find_in_map_ref_paths.iter().any(|entry| entry.path == "Properties.V.Fn::FindInMap.0"), + "path must be the full property path to the map-name operand" + ); } #[test] @@ -3100,6 +3246,57 @@ Resources: assert_eq!(second.start_line, 7, "Ingress[1].Port is on line 7, got {:?}", second); } + #[test] + fn resource_span_accepts_bracketed_numeric_indices() { + let input = + "Resources:\n R:\n Type: T\n Properties:\n Ingress:\n - Port: 80\n - Port: 443\n"; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let dotted = model.resource_span("R", "Properties.Ingress.1.Port"); + let bracketed = model.resource_span("R", "Properties.Ingress[1].Port"); + assert_eq!(bracketed, dotted); + assert_eq!(bracketed.start_line, 7); + } + + #[test] + fn resource_span_logical_value_uses_authored_intrinsic_node() { + let input = concat!( + "Parameters:\n Image:\n Type: String\n", + "Resources:\n R:\n Type: T\n Properties:\n ImageId:\n Ref: Image\n", + ); + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let exact = + *model.source_location("Resources/R/Properties/ImageId/Ref").expect("Ref source path must be indexed"); + let logical = model.resource_span("R", "Properties.ImageId"); + assert_eq!(logical, exact); + assert_eq!(logical.start_line, 9); + } + + #[test] + fn resource_span_uses_authored_intrinsic_path_through_literal_metadata_keys() { + let input = concat!( + "Resources:\n", + " R:\n", + " Type: T\n", + " Metadata:\n", + " AWS::CloudFormation::Init:\n", + " config:\n", + " files:\n", + " /etc/cfn/cfn-hup.conf:\n", + " content: !Sub constant\n", + ); + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let exact_source_path = + "Resources/R/Metadata/AWS::CloudFormation::Init/config/files//etc/cfn/cfn-hup.conf/content/Fn::Sub"; + let expected = *model.source_location(exact_source_path).expect("intrinsic source path must be indexed"); + let actual = model.resource_span( + "R", + "Metadata.AWS::CloudFormation::Init.config.files./etc/cfn/cfn-hup.conf.content.Fn::Sub", + ); + + assert_eq!(actual, expected); + assert_eq!(actual.start_line, 9); + } + #[test] fn resource_span_empty_id_resolves_section_absolute_path_precisely() { // A finding with no resource id (e.g. an Outputs-level diagnostic) carries a @@ -3120,15 +3317,10 @@ Resources: } #[test] - fn resource_span_empty_id_fused_intrinsic_suffix_anchors_at_nearest_slash_ancestor() { - // A synthetic intrinsic suffix (`.Fn::Join`) is joined to its parent by a DOT, - // which is deliberately not treated as a path separator here: real span-index - // keys contain literal dots inside a single segment (e.g. API Gateway's - // `method.request.path.proxy`), so splitting on dots would shred those paths and - // mis-anchor. The walk-up therefore trims the whole `Value.Fn::Join` segment on - // the nearest `/`, landing on the enclosing output - still within Outputs, never - // on the Resources block. Both engines resolve this identically, which is what - // keeps them at parity. + fn resource_span_empty_id_fused_intrinsic_suffix_uses_authored_value() { + // A section-absolute path can contain slash-separated section members and a + // dotted intrinsic suffix. The authored arena path safely reconstructs that + // suffix without splitting literal dots in unrelated key names. let input = concat!( "Resources:\n R:\n Type: T\n", // lines 1-3 "Outputs:\n Combined:\n Value: !Join [\"\", [\"a\", \"b\"]]\n", // lines 4-6 @@ -3136,8 +3328,8 @@ Resources: let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); let span = model.resource_span("", "Outputs/Combined/Value.Fn::Join"); assert_eq!( - span.start_line, 5, - "fused-suffix path must anchor at the enclosing output (line 5), got {:?}", + span.start_line, 6, + "fused-suffix path must anchor at the authored output value (line 6), got {:?}", span ); } @@ -3620,4 +3812,103 @@ Resources: ); assert_ne!(ref_defect.span, crate::UNKNOWN_SPAN, "span must be resolved"); } + + #[test] + fn resource_shape_non_string_type_has_type_property_path() { + let input = r#"{"Resources":{"R":{"Type":123,"Properties":{}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model.diagnostics.iter().find(|d| d.message.contains("'Type' must be a string")).expect("type defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("Type"), "authored member must be the property path"); + } + + #[test] + fn resource_shape_missing_type_has_no_property_path() { + let input = r#"{"Resources":{"R":{"Properties":{"X":"Y"}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model + .diagnostics + .iter() + .find(|d| d.message.contains("missing required property 'Type'")) + .expect("missing type"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path, None, "missing Type has no child to point at"); + } + + #[test] + fn resource_shape_non_object_body_has_no_property_path() { + let input = "Resources:\n R: a string\n"; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model.diagnostics.iter().find(|d| d.message.contains("body must be an object")).expect("body defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path, None, "non-object body has no child to point at"); + } + + #[test] + fn resource_shape_non_string_condition_has_condition_path() { + let input = r#"{"Resources":{"R":{"Type":"T","Condition":123,"Properties":{}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = + model.diagnostics.iter().find(|d| d.message.contains("'Condition' must be a string")).expect("cond defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("Condition")); + } + + #[test] + fn resource_shape_invalid_depends_on_has_depends_on_path() { + let input = r#"{"Resources":{"R":{"Type":"T","DependsOn":123,"Properties":{}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model.diagnostics.iter().find(|d| d.message.contains("DependsOn")).expect("depends_on defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("DependsOn")); + } + + #[test] + fn resource_shape_unknown_key_has_key_property_path() { + let input = r#"{"Resources":{"R":{"Type":"T","Bogus":"V","Properties":{}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = + model.diagnostics.iter().find(|d| d.message.contains("invalid property 'Bogus'")).expect("bogus defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("Bogus")); + } + + #[test] + fn resource_shape_lifecycle_attribute_has_attribute_path() { + let input = r#"{"Resources":{"R":{"Type":"T","CreationPolicy":"bad","Properties":{}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model.diagnostics.iter().find(|d| d.message.contains("CreationPolicy")).expect("policy defect"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("CreationPolicy")); + } + + #[test] + fn e8002_undefined_condition_points_at_condition_attribute() { + let input = "Resources:\n R:\n Type: T\n Condition: DoesNotExist\n Properties:\n X: Y\n"; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let d = model.diagnostics.iter().find(|d| d.rule_id == "E8002").expect("E8002 expected"); + assert_eq!(d.resource_id.as_deref(), Some("R")); + assert_eq!(d.property_path.as_deref(), Some("Condition"), "span and path must target the Condition attribute"); + } + + #[test] + fn fn_sub_explicit_map_invalid_ref_has_map_key_path() { + let input = + r#"{"Resources":{"R":{"Type":"T","Properties":{"V":{"Fn::Sub":["${x}",{"x":{"Ref":"NoSuchThing"}}]}}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let r = model.resource("R").unwrap(); + let invalid = r.diagnostics.invalid_refs.iter().find(|r| r.value == "NoSuchThing").expect("invalid ref"); + assert_eq!(invalid.path, "Properties.V.Fn::Sub.1.x", "path must descend into the substitution map key"); + } + + #[test] + fn findinmap_ref_carries_map_name_operand_path() { + let input = r#"{"Resources":{"R":{"Type":"T","Properties":{"A":{"Fn::FindInMap":["M1","k","v"]},"B":{"Fn::FindInMap":["M2","k","v"]}}}}}"#; + let model = SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let refs = &model.resource("R").unwrap().diagnostics.find_in_map_ref_paths; + let m1 = refs.iter().find(|r| r.value == "M1").expect("M1 entry"); + assert_eq!(m1.path, "Properties.A.Fn::FindInMap.0"); + let m2 = refs.iter().find(|r| r.value == "M2").expect("M2 entry"); + assert_eq!(m2.path, "Properties.B.Fn::FindInMap.0"); + } } diff --git a/src/template-model/src/parser/yaml.rs b/src/template-model/src/parser/yaml.rs index 70fc493e..50c44b20 100644 --- a/src/template-model/src/parser/yaml.rs +++ b/src/template-model/src/parser/yaml.rs @@ -14,7 +14,7 @@ use yaml_rust2::yaml::{Hash, Yaml}; /// path, and any duplicate-key diagnostics found during the load. struct LoadedYaml { docs: Vec, - span_map: HashMap, + span_map: HashMap, dup_key_diagnostics: Vec, merge_key_spans: Vec, } @@ -287,6 +287,7 @@ fn path_from_frames(frames: &[PathFrame]) -> String { /// Converts YAML shorthand tags (!Ref, !Sub, etc.) into map-form intrinsics. struct CfnYamlLoader { + source: String, docs: Vec, doc_stack: Vec<(Yaml, usize)>, key_stack: Vec, @@ -298,7 +299,7 @@ struct CfnYamlLoader { pending_tags: Vec<(String, usize)>, /// One frame per open container, parallel to `doc_stack`; see [`PathFrame`]. path_frames: Vec, - span_map: HashMap, + span_map: HashMap, /// Source position of the key currently awaiting its value, one entry per open /// mapping (parallel to `key_stack`). Used to anchor duplicate-key diagnostics. key_marks: Vec>, @@ -337,8 +338,9 @@ struct CfnYamlLoader { } impl CfnYamlLoader { - fn new() -> Self { + fn new(source: &str) -> Self { Self { + source: source.to_string(), docs: Vec::new(), doc_stack: Vec::new(), key_stack: Vec::new(), @@ -359,7 +361,7 @@ impl CfnYamlLoader { } fn load(text: &str) -> Result { - let mut loader = Self::new(); + let mut loader = Self::new(text); let mut parser = Parser::new_from_str(text); // The scanner error carries a Marker locating the failure; surface it so the // resulting F1101 diagnostic is anchored at the offending position instead of @@ -406,25 +408,76 @@ impl CfnYamlLoader { (mark.line() as u32, mark.col() as u32 + 1) } - /// Anchors a mapping value at its key's position, overwriting any earlier entry so - /// a duplicate key resolves to the surviving (last) occurrence - matching how the - /// loaded `Hash` keeps the last value written for a repeated key. Object-property - /// diagnostics anchor at the key, so this is where the value's span lives. - fn record_key_span(&mut self, mark: Marker) { + fn span_with_width(mark: Marker, width: u32) -> SourceSpan { + let (line, column) = Self::mark_position(mark); + SourceSpan { start_line: line, start_column: column, end_line: line, end_column: column + width } + } + + fn quoted_scalar_width(source: &str, quote: char) -> Option { + let mut characters = source.char_indices().peekable(); + if characters.next()?.1 != quote { + return None; + } + let mut escaped = false; + while let Some((byte_index, character)) = characters.next() { + if quote == '"' { + if escaped { + escaped = false; + continue; + } + if character == '\\' { + escaped = true; + continue; + } + } + if character != quote { + continue; + } + if quote == '\'' && characters.peek().is_some_and(|(_, next)| *next == '\'') { + characters.next(); + continue; + } + let end = byte_index + character.len_utf8(); + return Some(source[..end].chars().count() as u32); + } + None + } + + fn scalar_source_width(&self, mark: Marker, style: yaml_rust2::scanner::TScalarStyle, value: &str) -> u32 { + let source = self.source.get(mark.index()..).unwrap_or_default(); + match style { + yaml_rust2::scanner::TScalarStyle::SingleQuoted => Self::quoted_scalar_width(source, '\''), + yaml_rust2::scanner::TScalarStyle::DoubleQuoted => Self::quoted_scalar_width(source, '"'), + yaml_rust2::scanner::TScalarStyle::Literal | yaml_rust2::scanner::TScalarStyle::Folded => Some(1), + yaml_rust2::scanner::TScalarStyle::Plain => Some(value.chars().count() as u32), + } + .unwrap_or_else(|| value.chars().count().max(1) as u32) + } + + /// Anchors a mapping value at its key's authored token, overwriting any earlier + /// entry so a duplicate key resolves to the surviving occurrence. + fn record_key_span(&mut self, mark: Marker, style: yaml_rust2::scanner::TScalarStyle, key: &str) { let path = self.current_path(); if !path.is_empty() { - self.span_map.insert(path, Self::mark_position(mark)); + let width = self.scalar_source_width(mark, style, key); + self.span_map.insert(path, Self::span_with_width(mark, width)); } } - /// Anchors a value that no key precedes - a sequence element, or a container opened - /// directly inside a sequence - at its own position. Never overwrites a span a key - /// already assigned to the same path (a container that is a mapping *value* is - /// reached here too, but its key recorded the authoritative position first). + /// Anchors a container without a preceding mapping key at its own position. fn record_value_span(&mut self, mark: Marker) { let path = self.current_path(); if !path.is_empty() { - self.span_map.entry(path).or_insert_with(|| Self::mark_position(mark)); + let width = path.rsplit('/').next().map(|segment| segment.chars().count()).unwrap_or(1).max(1) as u32; + self.span_map.entry(path).or_insert_with(|| Self::span_with_width(mark, width)); + } + } + + fn record_scalar_value_span(&mut self, mark: Marker, style: yaml_rust2::scanner::TScalarStyle, value: &str) { + let path = self.current_path(); + if !path.is_empty() { + let width = self.scalar_source_width(mark, style, value); + self.span_map.entry(path).or_insert_with(|| Self::span_with_width(mark, width)); } } @@ -514,7 +567,7 @@ impl CfnYamlLoader { } let descendant_prefix = format!("{}/", base_path); - let descendant_spans: Vec<(String, (u32, u32))> = self + let descendant_spans: Vec<(String, SourceSpan)> = self .span_map .iter() .filter_map(|(path, span)| { @@ -779,7 +832,7 @@ impl MarkedEventReceiver for CfnYamlLoader { if let Some(PathFrame::Map(slot)) = self.path_frames.last_mut() { *slot = Some(slot_name); } - self.record_key_span(mark); + self.record_key_span(mark, style, &v); // Remember this key's position so a later duplicate of it can be // anchored at the offending occurrence. if let Some(slot) = self.key_marks.last_mut() { @@ -787,7 +840,7 @@ impl MarkedEventReceiver for CfnYamlLoader { } } else if matches!(self.doc_stack.last(), Some((Yaml::Array(_), _))) { // A sequence element: no key precedes it, so anchor it at itself. - self.record_value_span(mark); + self.record_scalar_value_span(mark, style, &v); } if let Some(tag_name) = cfn_tag { @@ -1040,16 +1093,8 @@ pub fn parse_yaml(bytes: &[u8]) -> Result { let sections = TemplateSections::extract(&builder.arena, root); - for (path, (line, col)) in &raw_spans { - builder.span_index.insert( - path.clone(), - SourceSpan { - start_line: *line, - start_column: *col, - end_line: *line, - end_column: *col + path.rsplit('/').next().unwrap_or(path).len() as u32, - }, - ); + for (path, span) in raw_spans { + builder.span_index.insert(path, span); } info!("YAML span assignment complete: {} entries from marker tracking", builder.span_index.len()); @@ -1110,23 +1155,38 @@ mod tests { assert_eq!(ir.arena.as_map(ir.resources).unwrap().len(), 1); } - /// Span-index paths must carry the array index, matching the paths the shared - /// builder assigns. A key inside an array element (`Ingress/1/Port`) and a scalar - /// array element (`Cidrs/1`) each get their own span, so a diagnostic on them - /// anchors at the offending line rather than walking up to the enclosing array. #[test] fn array_element_spans_include_index() { - // 1 2 3 4 5 6 7 8 9 - let input = "Resources:\n R:\n Type: T\n Properties:\n Ingress:\n - Port: 80\n - Port: 443\n Cidrs:\n - 10.0.0.0/16\n"; + let input = concat!( + "Resources:\n", + " R:\n", + " Type: T\n", + " Properties:\n", + " Ingress:\n", + " - Port: 80\n", + " - Port: 443\n", + " Cidrs:\n", + " - 10.0.0.0/16\n", + " - \"127.0.0.1\"\n", + " - 'FirstTopic'\n", + ); let ir = parse_yaml(input.as_bytes()).unwrap(); - let line = |path: &str| ir.span_index.get(path).map(|s| s.start_line); - // Keys inside distinct array elements resolve to distinct element lines, - // never collapsing onto a single index-less `Ingress/Port` key. - assert_eq!(line("Resources/R/Properties/Ingress/0/Port"), Some(6)); - assert_eq!(line("Resources/R/Properties/Ingress/1/Port"), Some(7)); - assert!(line("Resources/R/Properties/Ingress/Port").is_none(), "index-less array key must not exist"); - // A scalar array element is anchored at itself. - assert_eq!(line("Resources/R/Properties/Cidrs/0"), Some(9)); + let span = |path: &str| ir.span_index.get(path).copied(); + assert_eq!(span("Resources/R/Properties/Ingress/0/Port").map(|value| value.start_line), Some(6)); + assert_eq!(span("Resources/R/Properties/Ingress/1/Port").map(|value| value.start_line), Some(7)); + assert!(span("Resources/R/Properties/Ingress/Port").is_none(), "index-less array key must not exist"); + assert_eq!( + span("Resources/R/Properties/Cidrs/0"), + Some(SourceSpan { start_line: 9, start_column: 9, end_line: 9, end_column: 20 }) + ); + assert_eq!( + span("Resources/R/Properties/Cidrs/1"), + Some(SourceSpan { start_line: 10, start_column: 9, end_line: 10, end_column: 20 }) + ); + assert_eq!( + span("Resources/R/Properties/Cidrs/2"), + Some(SourceSpan { start_line: 11, start_column: 9, end_line: 11, end_column: 21 }) + ); } #[test] diff --git a/src/template-model/src/resolver.rs b/src/template-model/src/resolver.rs index b6e0c1dd..f683439f 100644 --- a/src/template-model/src/resolver.rs +++ b/src/template-model/src/resolver.rs @@ -129,7 +129,7 @@ pub(crate) struct Resolver<'a> { resource_ids: HashSet, pub(crate) edges: Vec, pub(crate) diagnostics: Vec, - pub(crate) find_in_map_refs: HashMap>, + pub(crate) find_in_map_refs: HashMap>, pub(crate) simple_subs: HashMap>, pub(crate) redundant_subs: HashMap>, pub(crate) empty_joins: HashMap>, @@ -408,7 +408,7 @@ impl<'a> Resolver<'a> { && self.is_simple_join(*values_ref) { let key = self.current_resource.clone().unwrap_or_else(|| OUTPUTS_PSEUDO_RESOURCE.into()); - self.empty_joins.entry(key).or_default().push(join_path.clone()); + self.empty_joins.entry(key).or_default().push(format!("{}.0", join_path)); } self.current_path = format!("{}.1", join_path); let values = self.resolve_node(*values_ref); @@ -486,8 +486,12 @@ impl<'a> Resolver<'a> { } } IntrinsicFn::Select(idx_ref, list_ref) => { + let saved = self.current_path.clone(); + self.current_path = format!("{}.Fn::Select.0", saved); let idx = self.resolve_node(*idx_ref); + self.current_path = format!("{}.Fn::Select.1", saved); let list = self.resolve_node(*list_ref); + self.current_path = saved; match (&idx, &list) { (ResolvedValue::Concrete { value: i }, ResolvedValue::Concrete { value: l }) => { if let Some(arr) = l.as_array() @@ -644,7 +648,10 @@ impl<'a> Resolver<'a> { self.resolution_source_map .insert((rid.clone(), self.current_path.clone()), "Intrinsic/Fn::GetAZs".to_string()); } + let saved = self.current_path.clone(); + self.current_path = format!("{}.Fn::GetAZs", saved); let region_val = self.resolve_node(*region_ref); + self.current_path = saved; resolve_getazs_value(®ion_val, self.pseudo_parameter_overrides) } IntrinsicFn::Cidr(ip_ref, count_ref, bits_ref) => { @@ -1006,7 +1013,8 @@ impl<'a> Resolver<'a> { ResolvedValue::Concrete { value: name_val } => { let map_name = name_val.as_str().unwrap_or(""); if let Some(ref rid) = self.current_resource { - self.find_in_map_refs.entry(rid.clone()).or_default().push(map_name.to_string()); + let map_name_path = format!("{}.0", fim_path); + self.find_in_map_refs.entry(rid.clone()).or_default().push((map_name_path, map_name.to_string())); } self.lookup_mapping(map_name, &first_key, &second_key, default_ref) } @@ -1021,7 +1029,11 @@ impl<'a> Resolver<'a> { } }; if let Some(ref rid) = self.current_resource { - self.find_in_map_refs.entry(rid.clone()).or_default().push(map_name.clone()); + let map_name_path = format!("{}.0", fim_path); + self.find_in_map_refs + .entry(rid.clone()) + .or_default() + .push((map_name_path, map_name.clone())); } self.lookup_mapping(&map_name, &first_key, &second_key, default_ref) }) @@ -1327,9 +1339,12 @@ impl<'a> Resolver<'a> { let mut sub_map: HashMap = HashMap::new(); let invalid_refs_before = self.invalid_ref_count(); if let Some(explicit_subs) = subs { + let saved_path = self.current_path.clone(); for (k, v) in explicit_subs { + self.current_path = format!("{}.Fn::Sub.1.{}", saved_path, k); sub_map.insert(k.clone(), self.resolve_node(*v)); } + self.current_path = saved_path; if let Some(ref rid) = self.current_resource { for (k, _) in explicit_subs { if !vars.iter().any(|v| v == k) { @@ -1407,7 +1422,7 @@ impl<'a> Resolver<'a> { && !template.contains("${!") && let Some(ref rid) = self.current_resource { - self.redundant_subs.entry(rid.clone()).or_default().push(self.current_path.clone()); + self.redundant_subs.entry(rid.clone()).or_default().push(format!("{}.Fn::Sub", self.current_path)); } if template.contains("arn:aws:") @@ -2399,6 +2414,14 @@ mod tests { } } + #[test] + fn resolve_empty_join_records_delimiter_path() { + let input = r#"{"Resources":{"R":{"Type":"T","Properties":{"V":{"Fn::Join":["",["a","b"]]}}}}}"#; + let model = crate::model::SemanticModel::from_bytes(input.as_bytes()).unwrap(); + let resource = model.resource("R").unwrap(); + assert_eq!(resource.diagnostics.empty_joins, ["Properties.V.Fn::Join.0"]); + } + #[test] fn resolve_ref_param_override_bypasses_allowed_values() { let input = r#"{"Parameters":{"Env":{"Type":"String","AllowedValues":["dev","prod"]}},"Resources":{"R":{"Type":"T","Properties":{"V":{"Ref":"Env"}}}}}"#; @@ -2489,8 +2512,8 @@ mod tests { fn resolve_sub_no_variables_is_redundant() { let input = r#"{"Resources":{"R":{"Type":"T","Properties":{"V":{"Fn::Sub":"no-vars-here"}}}}}"#; let model = crate::model::SemanticModel::from_bytes(input.as_bytes()).unwrap(); - let r = model.resource("R").unwrap(); - assert!(!r.diagnostics.redundant_subs.is_empty()); + let resource = model.resource("R").unwrap(); + assert_eq!(resource.diagnostics.redundant_subs, ["Properties.V.Fn::Sub"]); } #[test] diff --git a/src/template-model/src/serialization.rs b/src/template-model/src/serialization.rs index a875412e..5d3312ae 100644 --- a/src/template-model/src/serialization.rs +++ b/src/template-model/src/serialization.rs @@ -196,6 +196,12 @@ fn build_resources( outgoing_refs: outgoing, incoming_refs: incoming, find_in_map_refs: res.diagnostics.find_in_map_refs.clone(), + find_in_map_ref_paths: res + .diagnostics + .find_in_map_ref_paths + .iter() + .map(|entry| PathTarget { path: entry.path.clone(), target: entry.value.clone() }) + .collect(), simple_subs: res .diagnostics .simple_subs diff --git a/src/template-model/tests/sample_templates.rs b/src/template-model/tests/sample_templates.rs index 26ea30d2..922b7de4 100644 --- a/src/template-model/tests/sample_templates.rs +++ b/src/template-model/tests/sample_templates.rs @@ -562,7 +562,7 @@ fn findinmap_refs_tracked() { let m = load("lsp/comprehensive.yaml"); let db = m.resource("Database").unwrap(); assert!( - db.diagnostics.find_in_map_refs.contains(&"EnvironmentMap".to_string()), + db.diagnostics.find_in_map_refs.iter().any(|name| name == "EnvironmentMap"), "find_in_map_refs should contain EnvironmentMap" ); } diff --git a/src/validation-engine/src/engine.rs b/src/validation-engine/src/engine.rs index 40b7d550..8aab610e 100644 --- a/src/validation-engine/src/engine.rs +++ b/src/validation-engine/src/engine.rs @@ -15,7 +15,7 @@ use schema_validator::{ }; use serde::{Deserialize, Serialize}; use std::any::Any; -use std::collections::HashMap; +use std::collections::{HashMap, HashSet}; use std::error; use std::fmt; use std::panic::{AssertUnwindSafe, catch_unwind}; @@ -777,6 +777,39 @@ pub(crate) fn finalize_diagnostics(diagnostics: &mut Vec, config: &V && a.property_path == b.property_path }); + // Semantic deduplication: when a more specific diagnostic fires for the + // same condition as a generic diagnostic, the generic finding is noise. + // Each entry maps a preferred rule and optional redundant-message marker + // to the redundant rule. Matching is limited to the same template entity. + const SUBSUMPTION_PAIRS: &[(&str, Option<&str>, &str)] = &[ + // The billing-mode diagnostic explains why throughput is required; + // the generic schema diagnostic only states that it is required. + ("E3639", Some("ProvisionedThroughput"), "F3003"), + // A usage-based password warning is more precise than the parameter-name + // heuristic when both identify the same parameter. + ("W2501", None, "W2509"), + ]; + + for &(preferred_rule, redundant_message_marker, redundant_rule) in SUBSUMPTION_PAIRS { + let preferred_entities: HashSet<(EntityType, String)> = diagnostics + .iter() + .filter(|diagnostic| diagnostic.rule_id == preferred_rule) + .filter_map(|diagnostic| { + diagnostic.entity.as_ref().map(|entity| (entity.entity_type, entity.logical_id.clone())) + }) + .collect(); + if !preferred_entities.is_empty() { + diagnostics.retain(|diagnostic| { + let same_entity = diagnostic.entity.as_ref().is_some_and(|entity| { + preferred_entities.contains(&(entity.entity_type, entity.logical_id.clone())) + }); + let message_matches = + redundant_message_marker.map(|marker| diagnostic.message.contains(marker)).unwrap_or(true); + !(diagnostic.rule_id == redundant_rule && same_entity && message_matches) + }); + } + } + let suppressed = total_before.saturating_sub(diagnostics.len() as u32); (total_before, suppressed) } @@ -1860,6 +1893,22 @@ Resources: } } + fn make_entity_diag( + rule_id: &str, + severity: Severity, + entity_type: EntityType, + logical_id: &str, + message: &str, + ) -> Diagnostic { + Diagnostic { + rule_id: rule_id.into(), + severity, + message: message.into(), + entity: Some(Entity { logical_id: logical_id.into(), entity_type, resource_type: None }), + ..default_diag() + } + } + fn make_transform_error_diag() -> Diagnostic { Diagnostic { message: format!( @@ -1966,6 +2015,97 @@ Resources: assert_eq!(diags.len(), 2); } + #[test] + fn finalize_prefers_billing_mode_explanation_for_same_resource() { + let config = ValidateConfig::default(); + let mut diags = vec![ + make_entity_diag( + "F3003", + Severity::Fatal, + EntityType::Resource, + "Table", + "'ProvisionedThroughput' is a required property", + ), + make_entity_diag( + "E3639", + Severity::Error, + EntityType::Resource, + "Table", + "ProvisionedThroughput is required for the selected billing mode", + ), + ]; + + let (_, suppressed) = finalize_diagnostics(&mut diags, &config); + + assert_eq!(suppressed, 1); + assert_eq!(diags.len(), 1); + assert_eq!(diags[0].rule_id, "E3639"); + } + + #[test] + fn finalize_keeps_unrelated_required_property_diagnostic() { + let config = ValidateConfig::default(); + let mut diags = vec![ + make_entity_diag( + "F3003", + Severity::Fatal, + EntityType::Resource, + "Table", + "'ServiceToken' is a required property", + ), + make_entity_diag( + "E3639", + Severity::Error, + EntityType::Resource, + "Table", + "ProvisionedThroughput is required for the selected billing mode", + ), + ]; + + let (_, suppressed) = finalize_diagnostics(&mut diags, &config); + + assert_eq!(suppressed, 0); + assert_eq!(diags.len(), 2); + } + + #[test] + fn finalize_prefers_usage_based_password_warning_for_same_parameter() { + let config = ValidateConfig::default(); + let mut diags = vec![ + make_entity_diag( + "W2501", + Severity::Warn, + EntityType::Parameter, + "DatabasePassword", + "Parameter is used by a password property without NoEcho", + ), + make_entity_diag( + "W2509", + Severity::Warn, + EntityType::Parameter, + "DatabasePassword", + "Parameter name appears to contain a password", + ), + make_entity_diag( + "W2509", + Severity::Warn, + EntityType::Parameter, + "IndependentSecret", + "Parameter name appears to contain a password", + ), + ]; + + let (_, suppressed) = finalize_diagnostics(&mut diags, &config); + + assert_eq!(suppressed, 1); + assert_eq!(diags.len(), 2); + assert!(diags.iter().any(|diagnostic| diagnostic.rule_id == "W2501")); + assert!(diags.iter().any(|diagnostic| { + diagnostic.rule_id == "W2509" + && diagnostic.entity.as_ref().map(|entity| entity.logical_id.as_str()) == Some("IndependentSecret") + })); + } + /// Regression for a dedup bug where the same rule/message/line was duplicated /// across native and WASM builds, separated by a sibling diagnostic. /// diff --git a/src/validation-engine/src/step_functions.rs b/src/validation-engine/src/step_functions.rs index 684a6c38..9a4dd5d4 100644 --- a/src/validation-engine/src/step_functions.rs +++ b/src/validation-engine/src/step_functions.rs @@ -1,4 +1,4 @@ -use crate::make_resource_diagnostic; +use crate::make_resource_diagnostic_at_source; use diagnostics::Diagnostic; use std::sync::Arc; use template_model::SemanticModel; @@ -18,10 +18,11 @@ pub fn validate_definition( } if definition.get("StartAt").is_none() { - out.push(mk(model, resource_id, prop_key, "State machine definition must have 'StartAt'")); + // Missing field: anchor at the nearest authored parent (the definition object itself) + out.push(mk_at(model, resource_id, prop_key, prop_key, "State machine definition must have 'StartAt'")); } if definition.get("States").is_none() { - out.push(mk(model, resource_id, prop_key, "State machine definition must have 'States'")); + out.push(mk_at(model, resource_id, prop_key, prop_key, "State machine definition must have 'States'")); return out; } @@ -86,10 +87,16 @@ fn validate_start_at( }; if !states.contains_key(start_at) { - let display = if path_prefix.is_empty() { "StartAt".to_string() } else { format!("{}/StartAt", path_prefix) }; - out.push(mk( + let logical_path = if path_prefix.is_empty() { + format!("{}.StartAt", prop_key) + } else { + format!("{}.{}.StartAt", prop_key, path_prefix) + }; + let display = if path_prefix.is_empty() { "StartAt".to_string() } else { format!("{}.StartAt", path_prefix) }; + out.push(mk_at( model, rid, + &logical_path, prop_key, &format!("StartAt '{}' does not reference a valid state at {}", start_at, display), )); @@ -101,16 +108,16 @@ fn validate_start_at( } let stype = state.get(KEY_TYPE).and_then(|v| v.as_str()).unwrap_or(""); let state_path = if path_prefix.is_empty() { - format!("States/{}", state_name) + format!("States.{}", state_name) } else { - format!("{}/States/{}", path_prefix, state_name) + format!("{}.States.{}", path_prefix, state_name) }; if stype == "Parallel" && let Some(branches) = state.get("Branches").and_then(|v| v.as_array()) { for (i, branch) in branches.iter().enumerate() { - validate_start_at(out, branch, model, rid, prop_key, &format!("{}/Branches/{}", state_path, i)); + validate_start_at(out, branch, model, rid, prop_key, &format!("{}.Branches.{}", state_path, i)); } } if stype == "Map" { @@ -118,7 +125,7 @@ fn validate_start_at( if let Some(proc) = state.get(key) && proc.is_object() { - validate_start_at(out, proc, model, rid, prop_key, &format!("{}/{}", state_path, key)); + validate_start_at(out, proc, model, rid, prop_key, &format!("{}.{}", state_path, key)); } } } @@ -137,19 +144,30 @@ fn validate_state( if !state.is_object() { return; } + let state_base = format!("{}.States.{}", prop_key, name); let stype = match state.get(KEY_TYPE).and_then(|v| v.as_str()) { Some(t) => t, None => { - out.push(mk(model, rid, prop_key, &format!("State '{}' is missing required 'Type' property", name))); + // Missing Type: anchor at the state object (nearest authored parent) + out.push(mk_at( + model, + rid, + &state_base, + prop_key, + &format!("State '{}' is missing required 'Type' property", name), + )); return; } }; let valid_types = ["Task", "Pass", "Choice", "Wait", "Succeed", "Fail", "Parallel", "Map"]; if !valid_types.contains(&stype) { - out.push(mk( + // Invalid existing Type value: anchor at the Type field + let type_path = format!("{}.Type", state_base); + out.push(mk_at( model, rid, + &type_path, prop_key, &format!("State '{}' has invalid Type '{}'. Must be one of {}", name, stype, render_str_list(valid_types)), )); @@ -159,9 +177,12 @@ fn validate_state( if is_jsonata { for forbidden in &["InputPath", "OutputPath", "Parameters", "ResultPath", "ResultSelector"] { if state.get(*forbidden).is_some() { - out.push(mk( + // Existing forbidden field: anchor at that exact field + let field_path = format!("{}.{}", state_base, forbidden); + out.push(mk_at( model, rid, + &field_path, prop_key, &format!("State '{}': '{}' is not allowed when QueryLanguage is JSONata", name, forbidden), )); @@ -172,9 +193,11 @@ fn validate_state( match stype { "Task" => { if state.get("Resource").is_none() { - out.push(mk( + // Missing Resource: anchor at the state object (nearest authored parent) + out.push(mk_at( model, rid, + &state_base, prop_key, &format!("Task state '{}' is missing required 'Resource' property", name), )); @@ -182,9 +205,11 @@ fn validate_state( } "Choice" => { if state.get("Choices").is_none() { - out.push(mk( + // Missing Choices: anchor at the state object + out.push(mk_at( model, rid, + &state_base, prop_key, &format!("Choice state '{}' is missing required 'Choices' property", name), )); @@ -194,9 +219,11 @@ fn validate_state( let has_wait = ["Seconds", "Timestamp", "SecondsPath", "TimestampPath"].iter().any(|k| state.get(k).is_some()); if !has_wait { - out.push(mk( + // Missing all timing fields: anchor at the state object + out.push(mk_at( model, rid, + &state_base, prop_key, &format!( "Wait state '{}' must have one of Seconds, Timestamp, SecondsPath, or TimestampPath", @@ -209,8 +236,12 @@ fn validate_state( } } -fn mk(model: &Arc, rid: &str, prop_key: &str, msg: &str) -> Diagnostic { - make_resource_diagnostic("E3601", msg, model, rid, prop_key, None) +/// Builds a state-machine diagnostic with separate logical and source paths. +/// `logical_path` carries the precise member path for the diagnostic's `property_path`. +/// `source_path` is the base property key used for span resolution (walks up to the +/// authored DefinitionString/Definition value even when the logical path points deeper). +fn mk_at(model: &Arc, rid: &str, logical_path: &str, source_path: &str, msg: &str) -> Diagnostic { + make_resource_diagnostic_at_source("E3601", msg, model, rid, logical_path, source_path, None) } #[cfg(test)] @@ -248,7 +279,7 @@ Resources: } #[test] - fn missing_start_at_produces_diagnostic() { + fn missing_start_at_anchors_at_definition_base() { let model = minimal_arc_model(); let def = json!({ "States": { @@ -256,15 +287,18 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("StartAt"))); + let d = diags.iter().find(|d| d.message.contains("StartAt")).expect("missing StartAt diagnostic"); + // Missing field anchors at nearest authored parent (the definition base) + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString")); } #[test] - fn missing_states_produces_diagnostic_and_returns_early() { + fn missing_states_anchors_at_definition_base() { let model = minimal_arc_model(); let def = json!({"StartAt": "Hello"}); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("States"))); + let d = diags.iter().find(|d| d.message.contains("States")).expect("missing States diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString")); } #[test] @@ -285,7 +319,7 @@ Resources: } #[test] - fn start_at_referencing_nonexistent_state() { + fn start_at_referencing_nonexistent_state_anchors_at_start_at_field() { let model = minimal_arc_model(); let def = json!({ "StartAt": "NonExistent", @@ -294,11 +328,13 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("NonExistent") && d.message.contains("StartAt"))); + let d = diags.iter().find(|d| d.message.contains("NonExistent")).expect("StartAt diagnostic"); + // Existing invalid StartAt anchors at .StartAt + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.StartAt")); } #[test] - fn state_missing_type_produces_diagnostic() { + fn state_missing_type_anchors_at_state_object() { let model = minimal_arc_model(); let def = json!({ "StartAt": "Bad", @@ -307,11 +343,13 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("missing required 'Type'"))); + let d = diags.iter().find(|d| d.message.contains("missing required 'Type'")).expect("missing Type diagnostic"); + // Missing Type: anchor at the state object (nearest authored parent) + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.Bad")); } #[test] - fn state_invalid_type_produces_diagnostic() { + fn state_invalid_type_anchors_at_type_field() { let model = minimal_arc_model(); let def = json!({ "StartAt": "Bad", @@ -320,7 +358,9 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("InvalidType"))); + let d = diags.iter().find(|d| d.message.contains("InvalidType")).expect("invalid Type diagnostic"); + // Existing invalid Type: anchor at .States..Type + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.Bad.Type")); } #[test] @@ -331,7 +371,6 @@ Resources: let mut state = serde_json::Map::new(); state.insert("Type".into(), json!(stype)); state.insert("End".into(), json!(true)); - // Add required fields per type match *stype { "Task" => { state.insert("Resource".into(), json!("arn:aws:lambda:us-east-1:123:function:fn")); @@ -367,36 +406,40 @@ Resources: } #[test] - fn task_state_missing_resource() { + fn task_state_missing_resource_anchors_at_state_object() { let model = minimal_arc_model(); let def = json!({ "StartAt": "T", "States": {"T": {"Type": "Task", "End": true}} }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Resource"))); + let d = diags.iter().find(|d| d.message.contains("Resource")).expect("missing Resource diagnostic"); + // Missing field: anchor at state object + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.T")); } #[test] - fn choice_state_missing_choices() { + fn choice_state_missing_choices_anchors_at_state_object() { let model = minimal_arc_model(); let def = json!({ "StartAt": "C", "States": {"C": {"Type": "Choice"}} }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Choices"))); + let d = diags.iter().find(|d| d.message.contains("Choices")).expect("missing Choices diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.C")); } #[test] - fn wait_state_missing_timing_field() { + fn wait_state_missing_timing_anchors_at_state_object() { let model = minimal_arc_model(); let def = json!({ "StartAt": "W", "States": {"W": {"Type": "Wait", "End": true}} }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Seconds"))); + let d = diags.iter().find(|d| d.message.contains("Seconds")).expect("missing timing diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.W")); } #[test] @@ -421,6 +464,23 @@ Resources: assert!(!diags.iter().any(|d| d.message.contains("Wait state"))); } + #[test] + fn jsonata_forbidden_field_anchors_at_exact_field() { + let model = minimal_arc_model(); + let def = json!({ + "QueryLanguage": "JSONata", + "StartAt": "P", + "States": {"P": {"Type": "Pass", "InputPath": "$.x", "End": true}} + }); + let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); + let d = diags + .iter() + .find(|d| d.message.contains("InputPath") && d.message.contains("JSONata")) + .expect("JSONata forbidden field diagnostic"); + // Existing forbidden field: anchors at its exact path + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.P.InputPath")); + } + #[test] fn jsonata_mode_forbids_all_restricted_fields() { let model = minimal_arc_model(); @@ -455,7 +515,7 @@ Resources: } #[test] - fn parallel_branch_bad_start_at_detected() { + fn parallel_branch_bad_start_at_uses_nested_path() { let model = minimal_arc_model(); let def = json!({ "StartAt": "P", @@ -473,11 +533,13 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Ghost") && d.message.contains("StartAt"))); + let d = diags.iter().find(|d| d.message.contains("Ghost")).expect("nested StartAt diagnostic"); + // Nested Parallel: full dotted path through the branch hierarchy + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.P.Branches.0.StartAt")); } #[test] - fn map_item_processor_bad_start_at_detected() { + fn map_item_processor_bad_start_at_uses_nested_path() { let model = minimal_arc_model(); let def = json!({ "StartAt": "M", @@ -495,11 +557,12 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Missing") && d.message.contains("StartAt"))); + let d = diags.iter().find(|d| d.message.contains("Missing")).expect("nested Map StartAt diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.M.ItemProcessor.StartAt")); } #[test] - fn map_iterator_bad_start_at_detected() { + fn map_iterator_bad_start_at_uses_nested_path() { let model = minimal_arc_model(); let def = json!({ "StartAt": "M", @@ -517,7 +580,8 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Ghost") && d.message.contains("StartAt"))); + let d = diags.iter().find(|d| d.message.contains("Ghost")).expect("nested Iterator StartAt diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.DefinitionString.States.M.Iterator.StartAt")); } #[test] @@ -576,7 +640,6 @@ Resources: }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); // Non-string StartAt is silently skipped by validate_start_at (no crash) - // Only the missing-StartAt-as-string path is skipped, no StartAt error assert!(!diags.iter().any(|d| d.message.contains("does not reference"))); } @@ -594,7 +657,7 @@ Resources: } #[test] - fn parallel_multiple_branches_all_validated() { + fn parallel_multiple_branches_all_validated_with_paths() { let model = minimal_arc_model(); let def = json!({ "StartAt": "P", @@ -616,8 +679,10 @@ Resources: } }); let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); - assert!(diags.iter().any(|d| d.message.contains("Ghost1"))); - assert!(diags.iter().any(|d| d.message.contains("Ghost2"))); + let d1 = diags.iter().find(|d| d.message.contains("Ghost1")).expect("branch 0 diagnostic"); + let d2 = diags.iter().find(|d| d.message.contains("Ghost2")).expect("branch 1 diagnostic"); + assert_eq!(d1.property_path.as_deref(), Some("Properties.DefinitionString.States.P.Branches.0.StartAt")); + assert_eq!(d2.property_path.as_deref(), Some("Properties.DefinitionString.States.P.Branches.1.StartAt")); } #[test] @@ -685,4 +750,74 @@ Resources: let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); assert!(diags.is_empty()); } + + #[test] + fn definition_property_uses_definition_key_in_path() { + let model = minimal_arc_model(); + let def = json!({ + "StartAt": "Ghost", + "States": { + "Hello": {"Type": "Pass", "End": true} + } + }); + let diags = validate_definition(&def, &model, "SM", "Properties.Definition"); + let d = diags.iter().find(|d| d.message.contains("Ghost")).expect("StartAt diagnostic"); + assert_eq!(d.property_path.as_deref(), Some("Properties.Definition.StartAt")); + } + + #[test] + fn deeply_nested_parallel_preserves_full_path() { + let model = minimal_arc_model(); + let def = json!({ + "StartAt": "Outer", + "States": { + "Outer": { + "Type": "Parallel", + "End": true, + "Branches": [{ + "StartAt": "Inner", + "States": { + "Inner": { + "Type": "Parallel", + "End": true, + "Branches": [{ + "StartAt": "DeepGhost", + "States": { + "Leaf": {"Type": "Pass", "End": true} + } + }] + } + } + }] + } + } + }); + let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); + let d = diags.iter().find(|d| d.message.contains("DeepGhost")).expect("deep nested diagnostic"); + assert_eq!( + d.property_path.as_deref(), + Some("Properties.DefinitionString.States.Outer.Branches.0.States.Inner.Branches.0.StartAt") + ); + } + + #[test] + fn all_diagnostics_have_span_resolved_to_authored_property() { + let model = minimal_arc_model(); + let def = json!({ + "StartAt": "Ghost", + "States": { + "Bad": {"End": true}, + "Invalid": {"Type": "Bogus", "End": true} + } + }); + let diags = validate_definition(&def, &model, "SM", "Properties.DefinitionString"); + assert!(!diags.is_empty()); + // Span resolution uses the base source_path, so all diagnostics get a + // consistent location regardless of their logical depth. In a minimal model + // without "SM" as a resource, location may be None — the important thing is + // that no diagnostic panics during construction. + for d in &diags { + assert_eq!(d.rule_id, "E3601"); + } + } }